Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/C5yG63QrIlz6nfruJ4cXnOLL5Ik.cer
File:                     C5yG63QrIlz6nfruJ4cXnOLL5Ik.cer (raw, json)
Hash identifier:          9K9K+4ZcUgbG7ImmSYtDvjAi8TnSCplPZWDZ3SDIM64=
Subject key identifier:   0B:9C:86:EB:74:2B:22:5C:FA:9D:FA:EE:27:87:17:9C:E2:CB:E4:89
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2902
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F362B5C8/922EABF4BB6B11EEA0EDEA56775412E6/C5yG63QrIlz6nfruJ4cXnOLL5Ik.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F362B5C8/922EABF4BB6B11EEA0EDEA56775412E6/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 25 Jan 2024 10:22:05 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 329079
                          IP: 2c0f:6a40::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10498 (0x2902)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan 25 10:22:05 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F362B5C8AF/serialNumber=0B9C86EB742B225CFA9DFAEE2787179CE2CBE489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1b:7e:6e:64:8b:98:52:07:6e:d0:a9:13:eb:
                    ec:16:1a:6d:99:59:56:7f:d6:76:3b:2d:6d:a9:a4:
                    72:50:71:a6:ea:0e:47:ef:cf:de:12:9c:8a:c9:6a:
                    7d:ba:10:4b:b4:c5:07:2e:87:b6:bd:1e:6e:3d:35:
                    09:25:f6:9c:95:d3:e0:a2:05:0c:39:9a:24:38:cf:
                    38:07:44:c1:85:1b:68:b1:02:30:f7:76:a0:54:62:
                    3a:f4:6e:6b:e8:7f:6c:19:73:db:41:b3:f5:ea:e4:
                    5e:0e:9b:e2:6e:15:12:9a:98:43:1a:2c:a5:33:7f:
                    e1:6a:5c:20:32:aa:d4:92:d8:27:ba:74:17:8b:00:
                    7e:e6:2c:59:b3:73:56:5b:59:f5:c9:a2:15:a8:34:
                    a5:a8:ba:8e:fe:47:47:76:ba:0c:45:a0:26:5c:0b:
                    17:ae:af:38:f7:e0:71:9d:b0:bd:03:30:bb:76:6b:
                    bd:b5:12:2a:20:73:43:16:b5:02:91:27:49:33:a8:
                    ae:95:b7:97:41:10:6b:a2:56:8e:a9:45:14:12:9c:
                    c9:c7:7a:5a:77:66:8c:67:8a:a2:42:2e:23:b7:e4:
                    61:27:98:e1:2f:36:76:96:7f:19:bc:37:2f:79:fb:
                    56:6b:2f:1a:a3:32:a1:55:21:3f:30:1f:15:02:a8:
                    4a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9C:86:EB:74:2B:22:5C:FA:9D:FA:EE:27:87:17:9C:E2:CB:E4:89
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B5C8/922EABF4BB6B11EEA0EDEA56775412E6/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B5C8/922EABF4BB6B11EEA0EDEA56775412E6/C5yG63QrIlz6nfruJ4cXnOLL5Ik.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329079

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:6a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:fd:1f:8a:d7:45:d3:05:47:53:09:d4:3e:07:58:bf:04:f6:
         d8:f3:5f:52:f2:d7:52:93:4b:3a:d0:a3:f4:51:e4:69:9d:f6:
         7f:00:b0:f5:68:1f:35:f5:16:e8:11:7f:56:07:c7:e6:c0:3e:
         e7:a2:53:26:41:7c:0c:15:8f:be:5c:a0:84:c0:29:64:91:d1:
         a1:3f:5a:54:f4:69:bc:c6:ee:5b:49:dc:6f:b5:54:ac:2b:99:
         20:45:fa:9b:08:70:a3:14:2e:89:9f:78:83:07:10:63:2a:b7:
         2f:29:09:ea:34:d1:df:e6:a8:be:17:b6:70:78:5e:fb:ff:49:
         5c:7b:65:0f:50:ad:39:b5:aa:e9:fb:64:ff:79:7c:6c:48:12:
         4b:7d:c2:a6:88:73:73:08:ee:2a:99:7a:7d:b8:a2:e1:86:44:
         0e:c8:c5:df:32:b4:60:6a:b0:bd:64:77:a6:5d:61:bd:db:da:
         18:29:1a:69:d6:15:cc:c5:9b:f9:13:4b:54:31:f2:89:cd:28:
         52:01:3a:41:9a:07:86:db:a5:a5:01:b1:be:b8:4b:74:3c:89:
         23:7e:df:f6:e0:9d:c0:98:42:70:9c:e2:60:ed:8d:05:6c:98:
         26:d9:19:38:11:c1:fa:34:0c:9e:ba:b0:5d:45:88:1f:3e:04:
         35:08:ef:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----