Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/4CGdWkzYWCxPN-LQ3dcGt369n2w.cer
File:                     4CGdWkzYWCxPN-LQ3dcGt369n2w.cer (raw, json)
Hash identifier:          QU6fyriI6sZ0OPKqr3olaODB6Atf43mffv0FxH+4nXo=
Subject key identifier:   E0:21:9D:5A:4C:D8:58:2C:4F:37:E2:D0:DD:D7:06:B7:7E:BD:9F:6C
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2571
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:33:06 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 18922
                          AS: 27576
                          IP: 196.43.96.0/19
                          IP: 2001:42b0::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Apr 2024 00:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9585 (0x2571)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:33:06 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36663C2AF/serialNumber=E0219D5A4CD8582C4F37E2D0DDD706B77EBD9F6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:38:9d:34:e6:38:a1:26:f7:4e:dc:f3:2d:94:
                    0c:e7:a4:cd:58:64:59:17:7b:88:3a:67:9b:88:36:
                    50:ff:b5:8f:e2:fb:ab:7a:2a:a7:a2:1f:9d:63:c5:
                    46:0f:74:2f:a3:6f:b9:0a:5f:15:f6:93:3b:ae:9e:
                    fe:cf:d3:2d:8c:61:17:d0:fa:4a:9f:a7:69:1d:c4:
                    65:d8:df:cf:1b:97:bf:0b:84:21:f0:6f:a7:9e:55:
                    8e:26:95:70:32:06:ae:a6:d8:9e:3f:27:bb:52:de:
                    18:c2:07:5b:69:24:8f:73:d2:80:0f:2d:bf:d5:d1:
                    37:e0:79:11:f6:b7:36:6d:d1:04:24:e6:c7:20:1d:
                    b8:a6:07:83:3e:4b:10:ae:b0:ef:98:40:9a:23:c7:
                    c6:bd:55:99:b0:a8:99:eb:05:24:a2:4d:b4:70:42:
                    45:e2:e6:ea:6f:26:fc:03:99:cb:c6:ee:8d:af:a2:
                    81:e3:3e:6f:6e:4b:20:e3:bf:b2:0b:42:21:19:fe:
                    fe:b0:2a:10:4e:d6:81:67:50:d2:8e:a1:e3:2a:ee:
                    f0:a1:42:37:41:b2:82:69:2c:d6:6f:e2:fe:dd:c6:
                    7d:d1:6e:b5:3e:c9:d8:bf:fa:e4:0e:7b:a2:93:dc:
                    d6:f4:9f:f1:98:8e:e7:9b:02:a4:27:0f:84:f1:f8:
                    df:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:21:9D:5A:4C:D8:58:2C:4F:37:E2:D0:DD:D7:06:B7:7E:BD:9F:6C
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18922
                  27576

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.43.96.0/19
                IPv6:
                  2001:42b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:cb:5f:0f:b3:f0:ea:a3:9a:8d:c6:f8:72:4a:99:14:10:72:
         71:0d:f2:58:d7:25:0a:7f:78:98:1d:5a:0f:dd:2d:81:3c:b8:
         ab:18:e8:71:3b:29:e7:26:6e:ad:d8:72:19:77:42:cb:dc:b7:
         11:da:ba:25:35:f0:cc:35:b0:55:e4:9f:41:ce:2d:fc:bd:12:
         68:0b:e7:74:0a:43:a1:9b:35:32:96:f9:39:85:5b:bf:73:bc:
         88:95:6c:21:9f:5f:0d:87:17:15:0a:eb:d0:98:5f:cc:13:aa:
         06:ea:6b:fe:65:78:87:a5:a7:da:4e:49:11:32:ea:40:25:6b:
         22:aa:6c:90:d2:aa:ed:d6:42:ed:d7:5e:86:09:c1:45:1e:42:
         68:80:ec:be:25:62:61:fa:f3:59:10:d9:dd:17:f0:48:36:21:
         2d:32:fa:47:86:54:71:58:63:ce:69:c1:3a:07:c9:cb:6d:ab:
         ae:9d:9e:a1:0e:92:ee:4f:4c:9f:ee:b9:69:99:e0:0a:7c:4a:
         1b:25:b2:8a:96:0d:cd:61:e9:c2:ba:80:4d:1d:3b:d7:06:05:
         8f:b1:b5:94:fc:5d:6d:60:43:f1:97:36:b1:a6:bc:c2:01:4c:
         88:cb:ad:ba:7f:2f:08:b5:ab:67:d2:74:c9:79:cd:2d:1a:5a:
         f0:84:3f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----