Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/8-JOWpt2_k0l0xdcOl98Kcb7BIg.cer
File:                     8-JOWpt2_k0l0xdcOl98Kcb7BIg.cer (raw, json)
Hash identifier:          qeIbZwYyw/8lS/k2Jj1pOhz7FDBJMp/qzFr8iglXlE0=
Subject key identifier:   F3:E2:4E:5A:9B:76:FE:4D:25:D3:17:5C:3A:5F:7C:29:C6:FB:04:88
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       268D
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/8-JOWpt2_k0l0xdcOl98Kcb7BIg.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:13:51 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 329211
                          IP: 102.212.236.0/22
                          IP: 2c0f:3980::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 05:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9869 (0x268d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:13:51 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36952BDAF/serialNumber=F3E24E5A9B76FE4D25D3175C3A5F7C29C6FB0488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:72:e9:46:5f:1d:a1:bf:68:6c:29:cb:c4:39:
                    e5:f3:6b:15:88:b8:dc:0a:3e:25:f1:9d:2a:8f:7e:
                    5c:d8:5e:65:0a:02:a6:04:72:0d:5c:f1:3e:2a:13:
                    d4:8f:63:b1:39:bc:1e:2c:85:a5:88:b4:a0:a7:6e:
                    3f:7d:07:8c:91:60:f7:64:8d:84:9f:f1:33:c9:aa:
                    9f:9f:71:12:6b:03:00:52:57:2b:45:2f:1d:ab:fc:
                    de:06:ea:a8:f5:98:9e:1f:21:51:4f:a7:ee:60:c2:
                    f5:69:4b:76:d0:d2:56:94:47:af:02:42:48:a7:fb:
                    59:14:d6:a6:9e:d7:40:65:ab:26:20:d7:45:b4:ea:
                    79:c8:24:4d:58:77:cb:c6:d8:74:57:9d:fe:3d:ae:
                    c2:84:a5:1a:8a:a0:a0:20:07:5c:9a:a4:47:96:3d:
                    cc:e3:97:eb:68:94:26:96:99:5a:30:c8:0e:29:53:
                    2d:79:69:91:2c:18:ed:5a:f1:da:e2:2e:c3:bf:b6:
                    06:07:46:4b:fc:d1:54:02:bd:35:70:96:64:f5:4d:
                    09:d3:91:16:bf:d6:9f:b8:ae:59:97:38:6e:c8:4e:
                    a8:05:55:27:ef:e9:ae:fb:df:1a:16:fd:5e:77:ac:
                    ac:94:74:33:5f:1b:f4:37:9b:9d:ac:c0:27:6d:42:
                    fa:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E2:4E:5A:9B:76:FE:4D:25:D3:17:5C:3A:5F:7C:29:C6:FB:04:88
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/8-JOWpt2_k0l0xdcOl98Kcb7BIg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329211

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.236.0/22
                IPv6:
                  2c0f:3980::/32

    Signature Algorithm: sha256WithRSAEncryption
         c4:33:71:b1:96:12:af:5f:08:55:73:4b:5b:7d:b9:5b:df:46:
         bf:3e:8a:76:d1:af:42:27:ea:f3:f8:c0:e7:8a:1f:bb:68:37:
         a1:8b:12:7a:79:17:61:9d:08:49:7c:c2:dc:8d:ef:70:c3:50:
         9b:2b:bd:cb:ea:de:d1:fb:27:71:c4:4b:d4:64:1b:e5:6b:01:
         66:1e:6d:0f:55:9e:e9:5a:f7:17:c3:20:c1:ff:66:41:d4:af:
         97:3d:4b:f9:07:0b:e3:27:2d:6a:74:be:34:f7:87:da:05:1f:
         ba:aa:4c:4b:39:0f:72:ed:28:fa:a1:a5:f1:c5:02:86:98:ab:
         29:3a:a2:15:96:58:73:18:eb:60:92:4f:90:49:0e:8e:fe:70:
         85:a3:54:4c:40:0d:37:72:64:a8:a5:c3:e3:56:df:a1:ed:ae:
         d5:c8:ea:6a:15:37:11:df:b3:4c:58:df:4c:64:4a:a9:7b:36:
         02:5f:d2:d3:28:f6:9a:82:36:b8:51:ea:6d:f8:f3:c2:46:02:
         8b:74:31:49:3a:70:cb:9f:8f:84:22:ff:b0:e1:68:bd:bb:11:
         c4:df:76:c2:ee:80:32:9c:04:ea:12:b8:2c:63:90:d2:e5:cb:
         6e:ff:73:48:73:b7:93:44:62:c3:a2:1e:4b:5d:72:49:71:98:
         de:59:7b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----