Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
File:                     2qhy_5oERGtxio2fR1VL-lgbOg4.cer (raw, json)
Hash identifier:          c0F9WQuh4wSP+vEiOmtFZVWXFwUWUOFqO8lqohM94m0=
Subject key identifier:   DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2C50
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Tue 19 Nov 2024 06:53:57 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328467
                          IP: 102.67.128.0/21
                          IP: 2c0f:ed48::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11344 (0x2c50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Nov 19 06:53:57 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F362793FAF/serialNumber=DAA872FF9A04446B718A8D9F47554BFA581B3A0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bf:92:71:62:6d:96:39:69:68:93:d5:83:61:
                    f3:0e:85:de:3e:0b:ab:5a:9d:71:fb:eb:75:51:02:
                    0d:3b:c4:14:61:09:1d:e0:a8:fc:2f:bc:38:0e:d2:
                    7e:f3:c3:6a:9f:05:de:90:37:c2:5c:ab:84:26:61:
                    b2:ef:bb:0e:3d:92:f0:7b:23:98:9e:61:90:e2:37:
                    f0:45:3b:e9:ce:54:e5:ac:b4:46:a9:42:08:4e:08:
                    ef:69:f4:4d:e5:00:90:5a:3d:cf:c7:81:15:8c:e9:
                    c9:eb:37:fe:b6:c1:de:a4:0b:4b:bc:db:aa:ec:19:
                    15:b4:ce:56:dd:dd:39:83:94:6c:1a:01:5a:73:85:
                    07:60:6a:7f:03:dc:61:62:4f:12:36:11:73:11:1a:
                    37:03:7a:fe:e9:fe:30:ee:8e:42:be:33:36:5c:42:
                    5d:ef:ce:58:e6:6c:e8:99:e7:99:7e:6d:60:72:08:
                    8a:3c:cf:41:46:e4:4b:b4:de:a4:04:b4:5f:d9:de:
                    69:0a:f6:39:43:f7:54:32:d4:d9:1e:4b:39:9c:c2:
                    ef:2b:96:0f:2f:57:d9:9b:fc:ea:6f:a2:fe:3f:68:
                    3b:26:86:93:bd:ea:89:5c:a8:c9:ce:60:2b:9a:4e:
                    20:96:00:68:be:93:89:bd:24:ce:1a:23:c1:48:04:
                    92:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328467

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.67.128.0/21
                IPv6:
                  2c0f:ed48::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:d2:3d:93:96:37:f4:4d:a1:5a:da:ed:cd:94:54:0e:52:da:
         56:7d:ed:50:a7:e7:ee:e5:43:f2:ea:8d:9d:81:33:d6:c6:f1:
         ed:c9:24:d2:14:4d:fd:40:dd:86:83:08:9f:ab:5a:18:38:7a:
         2c:72:f6:53:cb:11:25:1b:da:90:fa:48:69:7b:96:3e:3d:98:
         36:1c:5e:2c:bc:e9:76:e8:3f:09:14:e0:1e:29:9a:8f:c0:3a:
         2a:c5:81:5c:86:60:fa:05:1d:22:6c:b0:09:5c:7d:a1:5e:e3:
         91:67:5e:94:09:a7:12:92:dd:23:d2:a0:9e:41:e6:af:26:8a:
         7b:13:e3:ae:f4:e7:aa:4e:5c:f7:ea:e8:71:93:22:1d:73:d2:
         c6:81:e6:a8:d4:3d:02:4d:e6:7d:4c:59:8f:cc:8c:05:0b:5f:
         f2:c1:e2:18:cb:9a:13:ec:b5:ec:81:48:30:64:75:ce:ea:d5:
         ab:fb:38:01:7f:56:91:0f:d5:e0:4f:7c:5e:f3:57:28:0f:3d:
         2c:fe:c7:d6:38:b4:0c:fc:b4:51:3d:ba:5c:47:71:57:f4:e7:
         a6:c5:de:7f:c7:ed:ff:8a:a3:f1:37:3d:ce:98:73:60:23:1c:
         81:56:82:99:29:12:f1:3a:fb:5a:ea:21:2e:7d:c3:4c:7a:af:
         e7:e2:10:96
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICLFAwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDExMTkwNjUzNTdaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjI3OTNGQUYxMTAvBgNVBAUTKERBQTg3MkZGOUEwNDQ0NkI3MThBOEQ5
RjQ3NTU0QkZBNTgxQjNBMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDGv5JxYm2WOWlok9WDYfMOhd4+C6tanXH763VRAg07xBRhCR3gqPwvvDgO0n7z
w2qfBd6QN8Jcq4QmYbLvuw49kvB7I5ieYZDiN/BFO+nOVOWstEapQghOCO9p9E3l
AJBaPc/HgRWM6cnrN/62wd6kC0u826rsGRW0zlbd3TmDlGwaAVpzhQdgan8D3GFi
TxI2EXMRGjcDev7p/jDujkK+MzZcQl3vzljmbOiZ55l+bWByCIo8z0FG5Eu03qQE
tF/Z3mkK9jlD91Qy1NkeSzmcwu8rlg8vV9mb/Opvov4/aDsmhpO96olcqMnOYCua
TiCWAGi+k4m9JM4aI8FIBJKnAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQU2qhy/5oE
RGtxio2fR1VL+lgbOg4wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYyNzkzRi8wNjVENERCQUE2NDMx
MUVGOEI0RDNFOEI3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2Mjc5M0YvMDY1RDREQkFBNjQzMTFFRjhCNEQzRThCNzYyRTk1MUEvMnFoeV81
b0VSR3R4aW8yZlIxVkwtbGdiT2c0Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFAxMwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBANmQ4AwDQQCAAIwBwMF
ACwP7UgwDQYJKoZIhvcNAQELBQADggEBAMHSPZOWN/RNoVra7c2UVA5S2lZ97VCn
5+7lQ/LqjZ2BM9bG8e3JJNIUTf1A3YaDCJ+rWhg4eixy9lPLESUb2pD6SGl7lj49
mDYcXiy86XboPwkU4B4pmo/AOirFgVyGYPoFHSJssAlcfaFe45FnXpQJpxKS3SPS
oJ5B5q8minsT467056pOXPfq6HGTIh1z0saB5qjUPQJN5n1MWY/MjAULX/LB4hjL
mhPsteyBSDBkdc7q1av7OAF/VpEP1eBPfF7zVygPPSz+x9Y4tAz8tFE9ulxHcVf0
56bF3n/H7f+Ko/E3Pc6Yc2AjHIFWgpkpEvE6+1rqIS59w0x6r+fiEJY=
-----END CERTIFICATE-----