Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/9BcdTqJJyhR6uN7CBdy1H0mYi1A.cer
File:                     9BcdTqJJyhR6uN7CBdy1H0mYi1A.cer (raw, json)
Hash identifier:          6fJRq7WM/HNgJ4BAM5TEg9prTh3L6Rotbb09hAtza+8=
Subject key identifier:   F4:17:1D:4E:A2:49:CA:14:7A:B8:DE:C2:05:DC:B5:1F:49:98:8B:50
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       25EE
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/9BcdTqJJyhR6uN7CBdy1H0mYi1A.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:51:09 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328964
                          IP: 102.217.253.0/24
                          IP: 2c0f:4880::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 05:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9710 (0x25ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:51:09 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36797C7AF/serialNumber=F4171D4EA249CA147AB8DEC205DCB51F49988B50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d7:f2:37:17:2d:50:a4:10:17:54:9b:bf:e6:
                    89:e7:2d:52:09:5f:b7:f2:d1:dd:f0:a2:00:7f:4e:
                    fa:44:98:36:be:a4:ab:2e:ac:4f:85:54:ce:31:23:
                    8d:b0:f5:64:c5:70:fc:12:92:10:3c:77:59:9e:bc:
                    86:68:2b:12:6f:15:8e:75:5e:00:ed:09:8d:92:2c:
                    12:b1:e3:0a:b3:29:24:10:5b:86:0c:0d:3a:1f:45:
                    29:9d:3c:4e:6e:0e:21:ec:fa:df:33:bd:dc:dc:01:
                    d1:03:a3:3e:03:27:26:e8:81:f2:21:f9:ba:72:93:
                    9f:3d:c9:05:4a:58:b4:4c:b9:25:fe:09:02:b3:7e:
                    5e:ad:38:d1:10:22:15:eb:1d:e2:b3:6f:bd:cf:cb:
                    96:42:47:31:94:cb:c3:f6:c6:51:53:0b:39:46:7a:
                    23:c1:b2:8b:59:d4:f9:4e:25:73:2f:6a:06:08:aa:
                    a6:3b:44:6f:b4:21:04:c6:38:cc:7e:90:b0:4e:c2:
                    8d:48:18:11:84:b4:26:f6:fc:3e:19:ea:4f:1b:d2:
                    de:55:c3:ec:c5:bb:e6:42:34:63:7c:5b:3a:48:a7:
                    00:82:8c:6f:4f:16:7b:52:0f:cd:3f:4a:ba:43:0a:
                    67:1f:b5:22:ef:9c:7c:8d:28:8d:cf:48:2a:23:89:
                    7f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:17:1D:4E:A2:49:CA:14:7A:B8:DE:C2:05:DC:B5:1F:49:98:8B:50
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/9BcdTqJJyhR6uN7CBdy1H0mYi1A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328964

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.217.253.0/24
                IPv6:
                  2c0f:4880::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:8a:30:ea:4d:10:b9:eb:2a:2c:4c:66:c7:8b:a0:54:ab:96:
         94:46:10:28:f2:ee:36:7a:24:23:4f:d6:98:23:a0:65:d8:53:
         0a:31:ee:bd:b8:1c:18:05:0b:97:22:68:71:03:11:61:4e:d4:
         70:da:0e:1c:d8:5f:4c:1c:94:fc:39:39:87:b7:40:79:bc:33:
         ad:b9:57:61:6f:79:a7:20:3c:00:54:df:51:42:17:a8:ab:c0:
         5e:56:66:94:63:25:8c:0c:22:43:a1:9f:45:9c:66:ea:14:f7:
         58:78:5f:76:c4:92:82:46:3e:28:7f:cc:51:52:81:86:89:37:
         30:ac:c1:d9:1d:24:c6:ba:1e:75:b4:62:04:3a:f2:33:20:28:
         0e:a5:ac:76:c9:5c:8b:f8:ec:12:33:26:50:b4:20:86:d8:45:
         5b:95:4b:40:71:fe:4c:04:e8:ed:90:b7:bf:5e:61:b1:69:80:
         ae:17:0c:7f:dc:96:98:ef:19:ad:f8:ef:e4:1e:70:70:05:63:
         cb:b8:40:b9:a4:49:6c:c0:3d:90:ca:d4:b8:f7:2b:6f:0b:3f:
         50:3a:31:45:b3:94:44:46:28:9a:f5:28:aa:44:8e:03:2c:91:
         7f:b0:82:96:34:b7:d3:ad:b2:89:c4:ad:2b:9b:47:87:fb:bc:
         00:44:42:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----