Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/7AcBgZ3bw9nWDMZr3ycxHq7wXJs.cer
File:                     7AcBgZ3bw9nWDMZr3ycxHq7wXJs.cer (raw, json)
Hash identifier:          fJYnQeIAfYuT3rf1vkhlOT1izDct4XAxT+qwPsBqaJI=
Subject key identifier:   EC:07:01:81:9D:DB:C3:D9:D6:0C:C6:6B:DF:27:31:1E:AE:F0:5C:9B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2462
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/7AcBgZ3bw9nWDMZr3ycxHq7wXJs.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:30:34 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 327700
                          IP: 41.94.0.0/16
                          IP: 2c0f:f140::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 05:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9314 (0x2462)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:30:34 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F364A64DAF/serialNumber=EC0701819DDBC3D9D60CC66BDF27311EAEF05C9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e0:ca:f5:08:6c:13:12:55:8e:7e:14:97:15:
                    42:b8:02:81:b9:9a:92:bf:23:0d:47:52:01:18:43:
                    5d:f7:d5:12:83:42:75:d3:b1:9c:63:c7:36:9b:8d:
                    e3:e3:ab:73:06:ad:5c:43:4d:e5:75:df:45:03:d8:
                    51:2b:70:9d:88:a2:13:89:c2:2d:b0:0b:0f:3d:b2:
                    04:aa:fa:af:c2:67:69:9d:88:d8:99:d0:de:57:01:
                    12:2f:2c:ec:78:38:ec:15:5f:d6:a9:4c:d7:72:7e:
                    3a:97:0f:3d:3d:26:41:06:8a:64:8b:e3:da:49:34:
                    c5:bf:d5:1b:58:37:45:f2:53:10:23:ef:ab:83:e5:
                    b3:4d:52:2d:0f:bc:ca:bc:80:ad:7b:9c:77:1a:06:
                    f6:8f:2d:ae:2d:d3:4a:46:4d:ce:b7:3c:28:41:1a:
                    45:7f:51:f0:a6:e7:59:ef:73:3d:69:27:97:24:a5:
                    e1:bb:7a:59:43:a9:65:de:da:78:76:8f:eb:88:a6:
                    89:73:68:56:59:21:b9:4c:08:95:5f:0f:11:eb:c4:
                    31:02:98:b0:11:a2:7b:1f:e9:10:88:6e:a8:f8:a8:
                    70:2f:27:08:40:22:aa:5b:29:85:2c:2c:ba:97:e4:
                    80:83:58:1d:2d:f3:b5:25:bc:16:5e:c9:e3:a5:a3:
                    cd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:07:01:81:9D:DB:C3:D9:D6:0C:C6:6B:DF:27:31:1E:AE:F0:5C:9B
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/7AcBgZ3bw9nWDMZr3ycxHq7wXJs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327700

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.94.0.0/16
                IPv6:
                  2c0f:f140::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:4f:7d:74:4a:89:4e:0e:fc:7a:a6:7c:95:31:d6:73:42:2b:
         c9:8d:42:0b:1c:60:d2:32:55:74:c1:46:e1:32:7a:6a:b6:94:
         8f:7f:03:de:af:40:de:b0:b1:18:e4:79:67:d5:1f:e6:1a:94:
         d2:2e:57:ee:e5:7c:aa:3f:8c:2a:ec:49:91:70:f3:cc:c1:58:
         1f:8c:99:5b:ce:db:bf:f5:2d:f9:d9:a7:fc:0a:6d:e3:b8:8c:
         8c:b6:9c:8a:44:a1:c4:a4:44:39:68:18:cf:83:10:86:a4:61:
         48:b1:0e:41:47:0f:b7:5a:bc:05:cd:8c:b7:61:98:fe:5f:b8:
         d2:2b:29:1e:6f:c3:ec:46:46:19:7a:19:1c:f8:99:a5:4d:04:
         59:2d:49:23:1d:dc:ee:01:0b:22:a3:07:09:97:69:84:aa:5f:
         07:98:1c:35:77:f5:c0:46:0a:63:97:e8:b0:aa:af:d4:d7:11:
         e0:85:84:12:48:4f:0b:e1:8f:73:8d:e7:0e:0f:40:ef:3e:02:
         0f:4c:a5:c8:f7:87:76:47:af:aa:61:2d:ac:bb:b0:46:60:b1:
         42:8e:1d:36:fb:28:85:85:76:34:45:41:ab:1c:fb:1f:2c:4b:
         97:c4:ad:cd:54:90:63:69:12:3b:5f:86:28:9f:21:cf:f0:3e:
         69:d7:9d:9c
-----BEGIN CERTIFICATE-----
MIIGJDCCBQygAwIBAgICJGIwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAxMDEwMTMwMzRaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjRBNjREQUYxMTAvBgNVBAUTKEVDMDcwMTgxOUREQkMzRDlENjBDQzY2
QkRGMjczMTFFQUVGMDVDOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCT4Mr1CGwTElWOfhSXFUK4AoG5mpK/Iw1HUgEYQ1331RKDQnXTsZxjxzabjePj
q3MGrVxDTeV130UD2FErcJ2IohOJwi2wCw89sgSq+q/CZ2mdiNiZ0N5XARIvLOx4
OOwVX9apTNdyfjqXDz09JkEGimSL49pJNMW/1RtYN0XyUxAj76uD5bNNUi0PvMq8
gK17nHcaBvaPLa4t00pGTc63PChBGkV/UfCm51nvcz1pJ5ckpeG7ellDqWXe2nh2
j+uIpolzaFZZIblMCJVfDxHrxDECmLARonsf6RCIbqj4qHAvJwhAIqpbKYUsLLqX
5ICDWB0t87UlvBZeyeOlo83ZAgMBAAGjggMZMIIDFTAdBgNVHQ4EFgQU7AcBgZ3b
w9nWDMZr3ycxHq7wXJswHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY0QTY0RC82MjMyQzVBNkNDOTgx
MUU4QkQ5M0QxNTdGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NEE2NEQvNjIzMkM1QTZDQzk4MTFFOEJEOTNEMTU3RjhBRUEyMjgvN0FjQmda
M2J3OW5XRE1acjN5Y3hIcTd3WEpzLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFABQwLQYIKwYBBQUHAQcBAf8EHjAcMAsEAgABMAUDAwApXjANBAIAAjAHAwUA
LA/xQDANBgkqhkiG9w0BAQsFAAOCAQEAE099dEqJTg78eqZ8lTHWc0IryY1CCxxg
0jJVdMFG4TJ6araUj38D3q9A3rCxGOR5Z9Uf5hqU0i5X7uV8qj+MKuxJkXDzzMFY
H4yZW87bv/Ut+dmn/Apt47iMjLacikShxKREOWgYz4MQhqRhSLEOQUcPt1q8Bc2M
t2GY/l+40ispHm/D7EZGGXoZHPiZpU0EWS1JIx3c7gELIqMHCZdphKpfB5gcNXf1
wEYKY5fosKqv1NcR4IWEEkhPC+GPc43nDg9A7z4CD0ylyPeHdkevqmEtrLuwRmCx
Qo4dNvsohYV2NEVBqxz7HyxLl8StzVSQY2kSO1+GKJ8hz/A+adednA==
-----END CERTIFICATE-----