Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/M3RPEtwtkNArK4aFUwjsHAeEk8w.cer
File:                     M3RPEtwtkNArK4aFUwjsHAeEk8w.cer (raw, json)
Hash identifier:          la3bfSfRptzMb+Wpu21xCyxt8nN93iB4ieal2lE3rvE=
Subject key identifier:   33:74:4F:12:DC:2D:90:D0:2B:2B:86:85:53:08:EC:1C:07:84:93:CC
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       243E
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36693F7/8CBF554CF9E811E783E1D143F8AEA228/M3RPEtwtkNArK4aFUwjsHAeEk8w.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36693F7/8CBF554CF9E811E783E1D143F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:21:43 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37568
                          IP: 196.220.96.0/19
                          IP: 2001:43f8:10b0::/48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Apr 2024 00:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9278 (0x243e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:21:43 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36693F7AF/serialNumber=33744F12DC2D90D02B2B86855308EC1C078493CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a3:ba:a1:03:2e:a0:5a:7a:47:c7:94:ec:4d:
                    8a:d9:f9:67:90:2a:99:d1:bd:91:70:8a:99:b5:10:
                    81:df:36:d0:fb:02:26:2d:33:ea:2a:6a:82:ae:68:
                    bc:b4:e6:1f:67:a4:06:8b:7f:ba:81:a7:dd:e8:23:
                    e8:bc:e8:04:c0:9d:0f:31:68:f5:2a:3c:6d:cb:af:
                    38:c6:d4:e5:1a:0d:81:19:e5:c8:2d:33:1c:a3:01:
                    ba:f9:db:3c:1f:34:3d:7d:71:74:d2:e2:71:14:1d:
                    24:3e:9f:18:34:e3:66:ac:48:50:29:69:79:6d:75:
                    78:4a:0a:79:8b:3c:ad:be:af:ac:3b:2c:40:83:50:
                    0e:ce:3f:67:ac:2c:44:d1:33:65:89:df:d5:16:5c:
                    82:55:eb:e7:16:15:b6:db:7d:c6:15:c8:65:d0:12:
                    63:75:64:f4:30:a7:83:62:5c:52:16:48:1e:49:48:
                    ab:f1:a4:d5:c3:f6:7b:a0:0f:64:da:34:aa:00:89:
                    c9:5f:c1:67:2e:c8:56:d4:c6:37:19:29:c1:1b:d4:
                    7f:a5:c7:e5:e0:01:b4:71:4c:f6:b1:dc:8a:c4:1a:
                    26:6b:80:ae:bc:f0:f3:3f:8d:14:5e:d4:40:8c:f6:
                    48:ba:fd:be:c8:75:01:4b:80:27:68:58:d2:76:26:
                    ca:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:74:4F:12:DC:2D:90:D0:2B:2B:86:85:53:08:EC:1C:07:84:93:CC
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36693F7/8CBF554CF9E811E783E1D143F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36693F7/8CBF554CF9E811E783E1D143F8AEA228/M3RPEtwtkNArK4aFUwjsHAeEk8w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37568

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.220.96.0/19
                IPv6:
                  2001:43f8:10b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:5a:eb:74:92:d6:c5:5d:91:61:7a:08:a8:ef:0a:2a:63:1f:
         4b:38:67:96:d3:f6:ba:dc:34:de:48:03:b8:0f:82:87:d4:df:
         bb:d1:70:a2:67:67:45:93:0b:6c:7a:ca:e3:0e:0f:f5:cd:b3:
         3d:a5:15:78:4e:54:84:89:1b:b5:e8:c7:bc:7d:75:b8:8c:46:
         4f:f7:26:5f:54:e6:70:df:65:4a:5b:75:38:1f:29:ee:1e:eb:
         dd:c7:7b:0b:ed:d5:a6:80:44:42:4d:68:d8:73:bf:18:3a:2b:
         69:92:39:09:c8:da:d3:54:c4:af:68:f6:01:60:a0:50:c3:52:
         5b:f3:8b:8c:32:18:c5:ae:2f:ce:a3:d5:65:a5:b2:c3:49:88:
         1f:1d:83:11:97:fc:a0:02:00:ce:57:59:37:6e:4b:26:d2:67:
         ab:a0:e7:33:51:32:f0:2e:ab:f5:90:e8:78:8a:c4:1b:e3:09:
         86:6b:18:11:d3:d7:58:ee:9b:fb:84:c1:72:e3:ac:34:ae:ae:
         f7:eb:b5:e3:f1:17:1f:b3:64:e2:b8:4c:56:45:68:96:cb:9d:
         38:bb:bf:67:ab:11:e5:8e:99:22:86:05:09:3f:bc:4d:3f:6d:
         c5:b2:e9:2f:64:f2:57:cb:67:79:24:b3:8e:e7:21:47:36:8b:
         c3:77:e9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----