Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/3EJIwHspjM1rOedr4TDL0ntsigU.cer
File:                     3EJIwHspjM1rOedr4TDL0ntsigU.cer (raw, json)
Hash identifier:          bp0gKzbt+SIt3Z317YckVFTrtDll5T5T26pcaVxt6rc=
Subject key identifier:   DC:42:48:C0:7B:29:8C:CD:6B:39:E7:6B:E1:30:CB:D2:7B:6C:8A:05
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       23A4
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:43:28 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 329144
                          IP: 102.214.204.0/22
                          IP: 2c0f:7e80::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 15:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9124 (0x23a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:43:28 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3629595AF/serialNumber=DC4248C07B298CCD6B39E76BE130CBD27B6C8A05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9e:75:85:42:f4:e1:5b:f9:11:ce:0a:c8:ca:
                    0f:00:32:7c:f6:62:1e:a3:d7:5d:f3:ec:d3:d3:5d:
                    bb:d6:34:e7:13:1d:a0:56:c2:15:de:cb:b1:1f:fe:
                    82:f4:fe:25:6d:b5:36:af:9c:40:62:15:2b:8b:f7:
                    41:09:0b:98:8c:93:7f:52:45:f0:91:09:5a:80:66:
                    b0:6b:2e:9c:ca:34:04:50:24:b3:31:91:de:8c:d0:
                    59:08:66:f5:40:ab:34:4c:4d:d1:95:9d:f6:bb:41:
                    3f:04:03:9e:d2:b4:a5:3e:9f:8d:be:79:38:76:8e:
                    2e:20:a4:44:7e:b0:b7:07:ef:dc:56:36:1c:83:ad:
                    33:08:5f:b1:8f:df:6c:2f:d1:34:8c:85:ed:f6:61:
                    43:65:20:10:5b:fd:43:f3:63:a5:19:ba:85:67:8b:
                    ad:85:b3:da:a4:03:aa:c7:72:ad:50:f6:66:a9:53:
                    cd:44:bb:47:eb:31:90:ea:b5:d8:fd:d9:cc:e8:f0:
                    e5:40:06:44:b2:df:13:ae:75:8d:8c:8a:5f:c4:41:
                    81:5e:ac:b0:a9:7e:93:7e:21:c2:67:29:74:91:8e:
                    92:a3:1a:af:e0:62:f9:72:f5:8f:a7:e4:b7:fd:5c:
                    2a:03:f4:4a:7b:58:82:3e:59:bf:0e:ed:9a:ca:22:
                    30:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:42:48:C0:7B:29:8C:CD:6B:39:E7:6B:E1:30:CB:D2:7B:6C:8A:05
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329144

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.214.204.0/22
                IPv6:
                  2c0f:7e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:21:c6:c9:fc:4e:ff:39:b2:8e:a6:d4:ba:b5:61:72:a4:d8:
         79:d1:08:89:c4:cd:7f:a9:e3:d6:73:e2:92:8c:73:43:96:71:
         12:c7:16:0c:66:80:9f:94:54:ae:c5:a3:e6:ec:13:7c:31:13:
         7b:12:ca:f1:a2:51:89:98:44:e0:7e:61:43:3a:4d:74:50:95:
         49:ac:43:02:f1:d2:21:19:10:a5:1a:bb:82:73:dd:ba:7e:c7:
         3c:10:56:1f:3a:72:3b:42:33:66:b5:86:99:37:e3:4e:f4:81:
         21:9a:2f:fe:61:8d:92:f7:42:3b:f6:fd:2c:fd:16:e5:39:e7:
         2a:07:e7:e9:70:2d:3b:db:fc:3e:40:bf:07:a2:1b:e0:ca:62:
         03:75:79:85:66:8a:d0:99:f3:f6:8a:27:8d:f6:e0:d5:0b:e1:
         bf:cc:c6:7b:eb:31:ea:5b:d3:99:7f:a5:a4:a2:12:19:e1:fc:
         c9:63:ce:79:4c:56:ea:19:e8:34:2c:2e:00:ed:25:54:62:b9:
         10:d0:b7:a3:9d:28:29:19:ae:41:df:c3:ce:04:2b:26:c0:56:
         fa:f2:78:8b:ea:44:2a:85:fb:3c:c0:2a:c2:86:b6:ce:3d:27:
         49:f2:a8:25:9a:d6:8c:5a:92:8f:d1:69:2a:fb:ad:55:4b:81:
         45:c2:e6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----