Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/DfSP5wXc0B45e4-chO8Xkcls-9g.cer
File:                     DfSP5wXc0B45e4-chO8Xkcls-9g.cer (raw, json)
Hash identifier:          TbbQrd1Tonv1wJCl31xONCPppLJdxSp38PQg2JXeBto=
Subject key identifier:   0D:F4:8F:E7:05:DC:D0:1E:39:7B:8F:9C:84:EF:17:91:C9:6C:FB:D8
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       279D
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:55:36 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328346
                          IP: 102.134.24.0/22
                          IP: 2c0f:ef60::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Apr 2024 07:20:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10141 (0x279d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:55:36 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36C4AD7AF/serialNumber=0DF48FE705DCD01E397B8F9C84EF1791C96CFBD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:97:14:60:3a:6d:66:27:75:c7:2e:b6:bd:c8:
                    a7:88:00:df:11:42:99:00:f3:cf:49:ce:d3:4d:05:
                    02:2d:34:2e:9e:0e:f2:c7:14:be:19:4c:f9:ae:6b:
                    f2:53:b8:4f:9f:79:a2:7a:d7:0a:86:f0:68:48:a0:
                    ba:53:2b:1f:cb:7a:c0:af:0c:77:d6:f4:8d:f8:0d:
                    44:ac:1b:fc:ba:3b:f7:24:4e:b1:b7:40:06:16:09:
                    13:7a:3e:77:00:ab:dc:c4:ec:62:10:49:97:7a:fa:
                    57:d8:84:ca:87:e0:17:7b:d7:cd:52:26:8c:16:89:
                    07:9b:f1:44:86:19:b1:ca:a6:4a:2f:1d:0b:bb:75:
                    50:85:d6:7e:9b:86:b1:a9:d9:f8:db:91:cb:5d:2e:
                    87:10:64:fb:11:9d:2d:4a:3d:3b:bf:68:ba:70:b1:
                    75:52:7b:c3:8f:3a:87:91:a5:e0:27:87:14:f2:45:
                    79:3a:e4:50:70:e0:97:eb:98:98:4d:d1:86:78:68:
                    d6:89:7d:54:05:c8:37:42:ce:8e:c4:2b:13:9c:cd:
                    1e:5e:8f:14:11:84:e8:a8:7e:5a:42:58:3b:66:37:
                    ba:1d:1e:2d:0b:2c:fe:6d:0d:d2:de:f5:98:5e:05:
                    10:48:f5:24:80:13:c0:17:17:b2:f5:ac:c2:59:b0:
                    22:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F4:8F:E7:05:DC:D0:1E:39:7B:8F:9C:84:EF:17:91:C9:6C:FB:D8
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328346

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.134.24.0/22
                IPv6:
                  2c0f:ef60::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:4f:de:11:ad:0a:40:39:82:5d:d9:29:a6:db:f7:6e:f9:36:
         28:ef:5b:ea:ee:a3:6c:bf:a1:70:66:49:3c:0e:0b:76:10:51:
         34:b4:1b:a3:c0:9f:1e:ba:8f:fd:73:bf:43:71:2f:6f:84:48:
         6e:52:ea:ab:30:5a:2f:e8:0d:48:c4:25:ea:d7:97:1c:d9:40:
         a3:8c:3f:af:fa:0e:43:52:85:bd:03:8c:08:29:57:37:f4:10:
         6e:ee:36:2a:f5:01:34:58:4c:8f:24:3f:e9:c2:33:5d:90:09:
         70:94:34:82:03:de:d7:28:3d:6d:ae:7f:e1:c5:9d:7f:c4:8b:
         1c:82:2b:9a:89:a6:20:29:1f:08:c2:68:45:32:c2:f9:74:0c:
         9b:6a:86:fc:98:18:7d:ec:81:9b:57:a7:b2:cf:5d:ab:da:6c:
         15:2f:83:5b:b6:39:96:90:10:61:10:0f:db:f1:c1:00:d4:a8:
         6a:55:5e:83:c2:58:79:e6:71:93:04:4e:b1:0c:bf:c4:08:93:
         d5:19:7e:47:53:50:aa:18:8a:bd:05:9e:bb:c0:46:8b:8c:72:
         7c:87:7a:fc:24:eb:64:82:c3:f7:4c:6e:df:64:13:5c:38:4d:
         62:92:93:52:9f:f0:eb:10:3e:5a:4b:14:56:0a:04:20:57:61:
         dd:b8:91:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----