Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/DrLmbWwSK_P-qDtsu3uMrq4Rww4.cer
File:                     DrLmbWwSK_P-qDtsu3uMrq4Rww4.cer (raw, json)
Hash identifier:          szHGGJMYA57p+dVxaCEaDVmcOBNKT+V4j4zsrChq3p4=
Subject key identifier:   0E:B2:E6:6D:6C:12:2B:F3:FE:A8:3B:6C:BB:7B:8C:AE:AE:11:C3:0E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       23FF
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36382ED/61760B4E051B11EE8D1A0E1E4AD9E6FC/DrLmbWwSK_P-qDtsu3uMrq4Rww4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36382ED/61760B4E051B11EE8D1A0E1E4AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:06:07 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328030
                          IP: 196.41.81.0/24
                          IP: 2001:43f8:c70::/48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9215 (0x23ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:06:07 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36382EDAF/serialNumber=0EB2E66D6C122BF3FEA83B6CBB7B8CAEAE11C30E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:eb:fd:d4:ce:5a:81:9e:9c:4e:2f:1b:dc:39:
                    97:77:79:74:8e:22:b5:20:99:52:12:fb:84:1b:4f:
                    48:4c:d2:db:e4:d0:18:ce:de:d6:59:ba:b4:e4:0c:
                    25:2a:d1:4f:0f:7a:25:4f:ce:97:18:13:aa:9a:de:
                    d3:8b:16:de:6a:52:15:50:58:2a:06:eb:01:c4:56:
                    7e:7e:4d:58:18:7c:ed:9f:1d:7c:08:e4:ae:dc:b3:
                    10:87:57:9b:c2:36:0b:b7:28:ce:25:95:8c:74:c1:
                    9a:8d:c0:f3:ce:16:c1:5a:15:00:27:ce:aa:4f:7d:
                    65:19:11:45:96:db:9c:bd:de:57:f8:7e:9f:68:27:
                    c5:f0:dd:ff:18:55:e6:b4:55:4e:cc:cc:5c:23:2e:
                    3c:1c:f6:3d:ac:c8:0d:72:97:0b:aa:76:43:88:f4:
                    85:31:59:29:eb:4f:64:eb:40:51:ae:ad:a3:f0:91:
                    36:76:96:aa:cb:86:31:35:20:23:b1:83:98:a1:8b:
                    ee:27:d1:cc:1a:ae:f2:4d:cc:24:53:d5:fc:80:8b:
                    c1:ea:a6:0d:bb:aa:c3:c0:95:f3:ab:a4:66:72:36:
                    0c:16:06:30:1c:61:e7:57:1f:f9:b7:8c:a9:8f:84:
                    9a:8a:c9:c3:c9:d3:de:8c:f0:6f:32:6d:67:7a:59:
                    5d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B2:E6:6D:6C:12:2B:F3:FE:A8:3B:6C:BB:7B:8C:AE:AE:11:C3:0E
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36382ED/61760B4E051B11EE8D1A0E1E4AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36382ED/61760B4E051B11EE8D1A0E1E4AD9E6FC/DrLmbWwSK_P-qDtsu3uMrq4Rww4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328030

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.41.81.0/24
                IPv6:
                  2001:43f8:c70::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:39:fb:e3:ab:fa:7c:db:88:90:85:1c:75:cc:9f:88:cd:18:
         42:35:21:58:2b:98:18:ec:92:33:06:41:40:1c:ae:d9:a2:a5:
         e0:f5:d5:62:ca:a1:85:68:a2:a7:04:4e:23:bb:d1:0f:4c:55:
         8f:8b:95:2a:1c:3c:5c:aa:7c:30:3d:73:20:a0:21:fc:5e:ae:
         13:7f:05:7a:40:f5:35:fc:1a:e1:f8:4a:78:15:71:87:76:d3:
         1f:d0:a6:63:36:44:e7:f8:3c:fb:67:c9:80:67:a9:8e:9f:47:
         52:18:21:c0:9c:08:a1:e9:5e:b7:e8:50:49:ce:1c:c4:b0:3f:
         e5:ee:20:ef:66:33:81:b8:c7:96:86:eb:f9:f4:d0:c2:5e:9e:
         b8:d1:3f:e2:40:fb:d5:9b:ae:d2:23:30:a1:dc:cb:e4:66:00:
         d1:5b:46:c7:06:4e:a3:70:fa:44:29:47:71:53:5f:b0:e1:6e:
         88:2d:74:2c:80:78:a5:43:4d:8a:b9:fc:9f:f4:1f:e0:c8:4e:
         82:fb:7e:43:16:8e:e2:85:84:f4:17:11:ed:34:2b:a8:78:ce:
         37:4d:ca:73:a6:04:8a:6e:c9:ac:4d:68:a0:45:58:a1:62:40:
         04:d1:39:83:31:2a:9c:14:9d:a8:c8:b2:4b:a2:58:bf:26:16:
         dc:5f:ad:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----