Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/7LPP-0CimvoX8H5dSzxCY0E2ukA.cer
File:                     7LPP-0CimvoX8H5dSzxCY0E2ukA.cer (raw, json)
Hash identifier:          XmpLEWs8CyjQ+A0hks0U2/45uI0XGSnISM7sITrnDXY=
Subject key identifier:   EC:B3:CF:FB:40:A2:9A:FA:17:F0:7E:5D:4B:3C:42:63:41:36:BA:40
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2326
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3614C03/0053EC7406B311EA9DC20648F8AEA228/7LPP-0CimvoX8H5dSzxCY0E2ukA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3614C03/0053EC7406B311EA9DC20648F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:06:11 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 21739
                          IP: 196.202.248.0/22
                          IP: 2c0f:980::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Apr 2024 17:38:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8998 (0x2326)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:06:11 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3614C03AF/serialNumber=ECB3CFFB40A29AFA17F07E5D4B3C42634136BA40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c8:cc:11:92:3a:2a:be:d8:dd:38:f3:ce:8d:
                    7f:50:25:bc:dc:99:0c:d2:b0:92:48:d6:33:fb:0c:
                    e1:a6:e0:ae:97:b5:1f:79:18:6c:e6:50:a1:e9:67:
                    5d:89:cd:73:9e:b4:94:28:08:94:1a:ad:93:33:3d:
                    c6:a4:8d:1e:2d:11:ea:8d:f7:98:e6:23:8a:1d:a1:
                    fe:22:2b:e8:04:03:58:82:e5:c0:da:57:51:9d:f7:
                    ea:67:f3:99:80:3b:4a:3e:77:a7:0b:79:1f:fd:ec:
                    4f:fb:f2:b5:62:9c:16:87:de:92:84:62:56:70:b1:
                    db:7f:4b:73:dd:57:ea:cb:5c:e1:0e:e2:b3:13:29:
                    80:39:9b:db:2b:7d:45:14:b6:35:f6:1a:ab:7c:a3:
                    72:cc:53:37:a7:87:0e:b6:03:3d:c5:e7:db:c1:dc:
                    6b:2d:4a:87:b0:0c:8b:95:bd:7f:9d:47:a8:15:b1:
                    89:43:90:0f:3d:f5:2c:79:dc:8f:a6:67:d0:0a:8a:
                    b7:21:01:91:27:e9:22:f2:93:a0:b2:68:d5:fe:c3:
                    56:e5:cd:09:ee:34:5c:75:0b:b8:34:2e:31:e8:af:
                    cc:8a:2b:85:40:6f:a5:63:d6:43:af:7d:1b:70:37:
                    56:34:8f:33:53:40:cb:14:8c:b4:a4:5f:45:18:0a:
                    05:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B3:CF:FB:40:A2:9A:FA:17:F0:7E:5D:4B:3C:42:63:41:36:BA:40
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614C03/0053EC7406B311EA9DC20648F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614C03/0053EC7406B311EA9DC20648F8AEA228/7LPP-0CimvoX8H5dSzxCY0E2ukA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21739

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.202.248.0/22
                IPv6:
                  2c0f:980::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:df:75:61:eb:76:83:27:22:3d:29:3c:fe:41:6f:e9:75:06:
         26:3d:b4:ee:9d:87:e7:32:77:9d:69:49:97:b9:74:fe:1b:b6:
         57:31:b6:33:3b:b1:bf:94:bd:f1:c7:73:98:fa:6c:dc:bb:c3:
         c7:9e:17:d7:fc:a6:02:73:e3:2e:6c:ec:bb:c9:b4:93:26:3c:
         ff:7d:c0:09:bc:b3:3b:10:e7:cc:ba:28:d1:a4:b6:10:06:04:
         68:c0:bc:55:37:43:90:58:7a:83:92:b6:2b:00:cd:f3:0e:80:
         9b:79:3a:13:ce:9c:8c:44:de:a8:d8:cf:af:4c:af:a3:33:84:
         dd:d4:6d:4f:e8:03:30:94:fa:15:f5:d8:be:7d:0d:dc:21:1e:
         75:93:0c:8f:c7:b6:e1:c7:74:7e:df:60:d4:03:20:9b:3d:73:
         2f:06:02:ec:be:39:90:d4:39:97:a6:e4:51:65:2d:43:d4:90:
         03:bd:e1:2e:94:47:42:e3:1b:8f:4a:b6:df:de:ae:93:e6:31:
         41:39:e2:4b:53:46:5a:1d:ba:7e:de:7f:64:5b:5e:15:de:68:
         1b:90:3e:40:e1:2c:9b:70:f1:d6:88:56:ec:af:bd:5d:d6:2b:
         33:ab:4b:91:98:9e:b7:02:8e:1f:4f:98:dd:fd:af:f2:e1:81:
         6a:73:38:97
-----BEGIN CERTIFICATE-----
MIIGJDCCBQygAwIBAgICIyYwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAxMDEwMDA2MTFaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjE0QzAzQUYxMTAvBgNVBAUTKEVDQjNDRkZCNDBBMjlBRkExN0YwN0U1
RDRCM0M0MjYzNDEzNkJBNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHyMwRkjoqvtjdOPPOjX9QJbzcmQzSsJJI1jP7DOGm4K6XtR95GGzmUKHpZ12J
zXOetJQoCJQarZMzPcakjR4tEeqN95jmI4odof4iK+gEA1iC5cDaV1Gd9+pn85mA
O0o+d6cLeR/97E/78rVinBaH3pKEYlZwsdt/S3PdV+rLXOEO4rMTKYA5m9srfUUU
tjX2Gqt8o3LMUzenhw62Az3F59vB3GstSoewDIuVvX+dR6gVsYlDkA899Sx53I+m
Z9AKirchAZEn6SLyk6CyaNX+w1blzQnuNFx1C7g0LjHor8yKK4VAb6Vj1kOvfRtw
N1Y0jzNTQMsUjLSkX0UYCgVbAgMBAAGjggMZMIIDFTAdBgNVHQ4EFgQU7LPP+0Ci
mvoX8H5dSzxCY0E2ukAwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYxNEMwMy8wMDUzRUM3NDA2QjMx
MUVBOURDMjA2NDhGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTRDMDMvMDA1M0VDNzQwNkIzMTFFQTlEQzIwNjQ4RjhBRUEyMjgvN0xQUC0w
Q2ltdm9YOEg1ZFN6eENZMEUydWtBLm1mdDAZBggrBgEFBQcBCAEB/wQKMAigBjAE
AgJU6zAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAsTK+DANBAIAAjAHAwUA
LA8JgDANBgkqhkiG9w0BAQsFAAOCAQEAbd91Yet2gyciPSk8/kFv6XUGJj207p2H
5zJ3nWlJl7l0/hu2VzG2Mzuxv5S98cdzmPps3LvDx54X1/ymAnPjLmzsu8m0kyY8
/33ACbyzOxDnzLoo0aS2EAYEaMC8VTdDkFh6g5K2KwDN8w6Am3k6E86cjETeqNjP
r0yvozOE3dRtT+gDMJT6FfXYvn0N3CEedZMMj8e24cd0ft9g1AMgmz1zLwYC7L45
kNQ5l6bkUWUtQ9SQA73hLpRHQuMbj0q2396uk+YxQTniS1NGWh26ft5/ZFteFd5o
G5A+QOEsm3Dx1ohW7K+9XdYrM6tLkZietwKOH0+Y3f2v8uGBanM4lw==
-----END CERTIFICATE-----