Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/OWwPhpQzsq7UaQo9SIguHVwbaZg.cer
File:                     OWwPhpQzsq7UaQo9SIguHVwbaZg.cer (raw, json)
Hash identifier:          b+Xx2dC2ZL5gJGL/+5mBKGG2jrOKUL+/5akzimCiA08=
Subject key identifier:   39:6C:0F:86:94:33:B2:AE:D4:69:0A:3D:48:88:2E:1D:5C:1B:69:98
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2472
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/OWwPhpQzsq7UaQo9SIguHVwbaZg.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:35:05 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 327700
                          IP: 41.94.0.0/16
                          IP: 2c0f:f140::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 05:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9330 (0x2472)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:35:05 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F364A64DAF/serialNumber=396C0F869433B2AED4690A3D48882E1D5C1B6998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ae:ca:2a:57:ea:a0:95:ea:26:c0:67:55:59:
                    2b:e0:ae:c9:e4:ea:ca:c9:b9:e2:9f:b4:02:0e:31:
                    61:04:97:d4:03:52:eb:3a:da:18:54:ea:d7:aa:9d:
                    65:01:37:46:5c:24:e4:b6:eb:68:fc:cb:dc:23:e7:
                    a8:65:0c:b1:72:4f:b2:30:b7:ab:db:34:c8:82:a7:
                    3c:bd:9a:c7:2d:71:07:b8:a5:46:4b:97:b4:84:cc:
                    ab:23:16:65:72:95:c5:e4:b5:4e:4f:a8:2d:4e:1c:
                    7c:73:f5:4b:b3:a6:6b:43:83:e2:1c:12:0d:a0:c9:
                    51:cf:c5:12:fd:03:f1:22:90:3a:9f:6b:cf:a7:e4:
                    6d:3d:1e:c5:7d:a5:03:de:4f:b8:b6:bc:ef:2a:e2:
                    3c:ce:2c:4c:a0:3e:37:1e:fa:78:42:af:20:45:60:
                    78:78:a4:a5:5a:eb:da:e2:d6:eb:81:02:bb:79:40:
                    2f:c9:3b:f9:f2:d8:a3:b6:27:7e:d6:79:d7:0c:b1:
                    a0:01:f2:15:6d:0f:63:9b:53:fa:a5:73:98:11:4d:
                    d7:50:a0:a0:2a:b7:b1:5c:4d:3e:ab:ca:69:b4:2e:
                    e9:f9:a9:7d:74:09:c6:df:13:d8:f9:f9:2e:80:56:
                    2f:43:40:45:1f:b5:51:43:20:16:4b:b0:8c:41:71:
                    95:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6C:0F:86:94:33:B2:AE:D4:69:0A:3D:48:88:2E:1D:5C:1B:69:98
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/OWwPhpQzsq7UaQo9SIguHVwbaZg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327700

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.94.0.0/16
                IPv6:
                  2c0f:f140::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:46:b2:0b:6a:74:11:30:63:ef:cf:40:f1:d9:03:91:f3:ca:
         3f:84:02:ea:69:e2:25:63:16:ff:b4:13:36:5f:c1:84:b3:53:
         fe:68:45:af:70:1a:43:31:56:28:42:9b:11:6f:a1:85:54:14:
         36:41:75:b4:b9:f6:5c:b8:f3:21:17:27:bb:ce:b6:c3:40:a4:
         48:82:72:99:0c:c4:ab:d2:44:cb:b3:d8:1b:d6:53:3e:88:e9:
         5d:a9:58:3f:8b:80:4d:51:55:16:4c:21:bb:0f:0f:77:83:96:
         ae:86:c9:dc:1b:bb:ba:14:4f:03:31:47:b0:95:ba:61:46:da:
         8c:32:30:a0:11:66:62:57:5e:95:49:22:83:62:10:06:7f:94:
         80:72:9b:2a:38:29:b7:db:9b:f3:ee:cf:74:1f:2b:78:6e:e1:
         1e:e8:e7:14:0c:79:c7:9a:15:ec:af:89:5a:05:c5:06:c2:a7:
         13:b9:e5:53:ae:f6:5b:a1:39:0d:e7:39:06:72:a9:39:de:81:
         b7:d2:ad:d0:02:15:cf:51:1d:9a:8e:a5:20:db:d4:90:2b:d5:
         3f:97:47:ba:6b:ec:07:40:77:fe:54:cc:f9:e9:30:d2:51:a3:
         f9:13:79:23:c6:ec:21:38:0d:74:12:aa:86:15:32:16:b6:6b:
         f5:6b:2a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----