Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/4DauCP4DQW9YiHqdGV2_2GolYDw.cer
File:                     4DauCP4DQW9YiHqdGV2_2GolYDw.cer (raw, json)
Hash identifier:          Eyz9osD3VHHpJDlo3tI2sTAcV/TeBa87ViU7yJJib+k=
Subject key identifier:   E0:36:AE:08:FE:03:41:6F:58:88:7A:9D:19:5D:BF:D8:6A:25:60:3C
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       293E
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Fri 09 Feb 2024 13:44:13 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37739
                          IP: 102.209.240.0/22
                          IP: 2c0f:2c40::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10558 (0x293e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Feb  9 13:44:13 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36BF59BAF/serialNumber=E036AE08FE03416F58887A9D195DBFD86A25603C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:70:fc:e3:1b:90:e9:a5:8c:b9:3b:a4:f7:1f:
                    5f:db:b8:8a:b4:b1:57:40:3f:7f:45:5b:db:02:97:
                    de:cc:25:cd:c9:c0:51:65:26:65:f1:9e:53:78:f8:
                    b9:08:f4:19:19:74:9b:e8:ed:05:b1:5f:35:1e:53:
                    66:4b:91:d0:65:74:bd:38:50:2c:24:ed:d7:ea:3c:
                    bb:66:37:b2:14:dc:91:36:38:dc:d9:55:8b:55:7f:
                    78:a5:a4:0f:3c:06:90:2f:9e:1e:a3:6f:8c:d2:5e:
                    42:bd:a5:fd:7f:c5:da:9c:68:f8:e5:fd:b4:5a:d3:
                    fd:e8:9f:3e:cc:c2:f3:85:2b:98:ee:ce:2b:53:f9:
                    dd:47:cc:aa:3d:6b:9c:fc:c9:17:22:4a:85:c3:73:
                    04:f4:8d:42:9f:e0:58:e1:4d:a1:4f:12:58:f5:f5:
                    18:1e:a0:01:a8:67:86:35:ea:58:60:0a:4f:e7:62:
                    22:28:9d:bc:58:9d:6a:3c:71:cc:7a:5a:5b:7a:42:
                    86:9c:e7:9f:14:ed:97:3b:8f:c3:93:a9:fa:5b:9f:
                    47:c4:15:2e:a9:e1:07:b0:22:b1:07:95:6d:37:67:
                    8a:c9:0b:d8:97:15:68:bf:02:cc:50:d9:a7:20:8a:
                    7e:f5:1a:ff:07:ec:7d:88:2f:20:9e:73:a3:37:60:
                    1d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:36:AE:08:FE:03:41:6F:58:88:7A:9D:19:5D:BF:D8:6A:25:60:3C
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37739

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.209.240.0/22
                IPv6:
                  2c0f:2c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:4c:b8:13:52:d8:04:76:eb:3e:b1:e2:9e:a9:30:7c:3e:e6:
         e1:8a:ff:1f:0a:e5:a5:c1:27:32:64:26:4e:5d:59:34:bf:40:
         ee:24:6c:38:98:4d:38:10:d2:0b:d9:1f:bc:26:f4:f5:ff:50:
         01:b6:8f:b3:39:39:8c:1b:6e:d6:c2:c4:d8:48:ab:e9:65:56:
         11:93:ee:18:cc:1b:d5:fd:04:fe:72:ec:c1:b0:3a:a6:ac:25:
         7e:20:60:66:de:83:12:a8:56:8f:5b:06:06:23:a1:ce:9a:1d:
         a5:bc:a6:d1:f5:f1:ff:f0:6e:0d:f0:82:75:12:69:95:bf:f0:
         54:8a:54:30:bf:19:ba:54:b4:a8:71:be:17:cc:61:d7:e3:14:
         79:a1:b2:b9:fe:2d:4f:5e:ab:73:99:d2:d1:d7:a3:ad:1b:80:
         63:b4:e7:f3:db:0a:5f:00:0a:dc:9c:57:92:42:8e:fd:f5:cd:
         4d:e0:54:17:92:39:16:8f:a5:99:cd:9b:5d:4a:6d:19:88:44:
         72:5e:b7:d2:64:d9:39:6c:bb:df:8d:fb:01:26:a1:31:f3:c0:
         2e:e4:de:46:b3:79:ed:8d:fd:bd:50:47:f0:93:ab:19:77:e2:
         05:9c:e7:e1:11:24:8c:08:c5:1a:1a:48:28:5b:28:92:30:b2:
         49:45:3f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----