Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/41870XBX5RmmOBSWl-AwgOrYdys.cer
File:                     41870XBX5RmmOBSWl-AwgOrYdys.cer (raw, json)
Hash identifier:          4U9e6k9l6+riGXcD7lXImj5dK9SXSA6DDnyRoaUE5X8=
Subject key identifier:   E3:5F:3B:D1:70:57:E5:19:A6:38:14:96:97:E0:30:80:EA:D8:77:2B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2727
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:37:34 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37519
                          IP: 154.70.136.0/21
                          IP: 2c0f:f668::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Apr 2024 07:20:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10023 (0x2727)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:37:34 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36ABB63AF/serialNumber=E35F3BD17057E519A638149697E03080EAD8772B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cd:19:46:26:6b:82:f1:2f:21:9f:a4:37:ac:
                    aa:c0:e8:44:20:12:30:58:42:28:6a:fe:ca:40:36:
                    b1:40:f7:02:18:d9:b8:51:26:3c:ab:ad:ee:0a:6a:
                    c2:6a:f5:e2:14:2d:6c:4b:b5:17:22:95:d5:80:2a:
                    53:ee:ce:5c:e0:02:dc:d0:28:6c:36:60:e4:61:e1:
                    cd:1a:f4:5d:b1:61:65:c6:be:5f:36:43:11:49:7b:
                    32:5d:ed:fd:b4:54:72:fe:d4:34:55:af:8b:e1:3e:
                    b2:87:dc:6c:cd:4e:96:22:a0:72:23:66:3c:a8:13:
                    9f:5a:d2:16:e8:a4:40:03:9d:38:3e:27:b4:b7:d0:
                    39:03:79:d4:69:88:af:05:7e:07:b1:13:45:90:d5:
                    ad:94:60:16:94:cf:1b:d4:ea:a5:4f:b9:52:0a:56:
                    00:3b:65:24:ea:55:bd:59:05:df:2f:9a:4f:6b:5f:
                    47:e9:d6:e0:1a:c3:f6:cb:ea:85:a5:52:ba:af:34:
                    9d:c5:27:18:2d:50:c8:da:67:5d:2f:0c:b7:2a:a7:
                    43:d7:66:69:7b:61:c7:17:ac:4a:d4:1c:fa:a3:cc:
                    ae:d8:ad:da:c6:97:bb:e2:a3:25:3a:ca:f3:46:ed:
                    f2:08:73:2b:fb:76:c8:f8:04:1b:aa:9f:95:2d:5c:
                    21:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5F:3B:D1:70:57:E5:19:A6:38:14:96:97:E0:30:80:EA:D8:77:2B
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37519

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.70.136.0/21
                IPv6:
                  2c0f:f668::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:44:bb:45:35:57:10:a3:63:0d:8b:f1:1d:79:aa:a9:e5:87:
         37:28:5d:fa:10:e2:36:79:14:11:44:7a:74:fa:ba:05:53:d1:
         4c:df:c9:bf:bb:f3:ce:c4:8f:c5:f1:4b:98:1b:f5:d8:11:42:
         5d:69:00:d9:56:79:7e:b4:f8:b4:ee:46:77:11:e3:f8:c4:d0:
         b6:1a:c5:c4:c6:ee:20:5a:60:cc:e8:63:2d:6a:e5:96:39:bf:
         93:9f:f7:86:8c:8d:0e:96:be:e4:5c:93:97:bb:28:4a:2b:20:
         5e:12:91:88:a0:d1:07:64:20:31:3f:0f:f9:81:de:76:25:f5:
         ae:94:e1:ea:5e:ab:f8:f4:fb:bd:5e:ac:4f:b8:f7:a6:48:f4:
         5e:93:83:52:55:cf:b0:a1:54:fa:ab:e4:3b:65:bc:96:2a:64:
         2c:4a:ce:64:17:7c:a7:17:e7:17:40:b1:76:f9:39:28:1a:20:
         99:9f:b4:00:4d:ec:58:a6:56:7d:2b:3d:92:5f:29:50:41:fb:
         ee:d2:6f:52:bb:16:65:b3:79:4c:3e:9f:13:aa:27:d1:86:73:
         9a:2c:6a:8f:40:7f:40:a0:2a:d3:c0:27:e4:05:c4:33:5d:43:
         c4:04:a5:06:43:89:cb:66:fd:5c:ea:0f:7a:24:1f:ff:65:c4:
         47:13:63:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----