Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.cer
File:                     OZ0E8RaOZZdtGtbo7MXAFBR4HtU.cer (raw, json)
Hash identifier:          /ol5nSLt1b4Yc2js+fpNQWBr9gVCb+VJeuA600SLmpc=
Subject key identifier:   39:9D:04:F1:16:8E:65:97:6D:1A:D6:E8:EC:C5:C0:14:14:78:1E:D5
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2535
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/377530C4DAAE11ECA024B6D3F1222468/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/377530C4DAAE11ECA024B6D3F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:22:36 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328164
                          IP: 102.36.248.0/22
                          IP: 2c0f:ebe8::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 28 Apr 2024 11:49:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9525 (0x2535)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:22:36 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F365E0EFAF/serialNumber=399D04F1168E65976D1AD6E8ECC5C01414781ED5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9a:2f:13:ab:e6:4e:ec:f2:ac:4b:ac:6d:a8:
                    87:e5:80:c1:7f:98:ad:42:3f:22:85:5a:56:35:de:
                    a2:4c:4e:e4:56:e4:ef:f1:21:e4:12:7e:1e:dc:b3:
                    bf:56:e5:0b:2b:3b:c4:a4:00:0d:87:1f:c8:33:0e:
                    8d:86:27:d6:40:f6:c9:e1:e7:60:8b:5a:97:68:77:
                    ca:fb:5c:09:10:28:e4:68:66:1b:bd:5b:42:e1:53:
                    d0:90:be:f0:78:ce:77:cd:aa:80:54:b0:fb:25:95:
                    51:ab:a3:2d:e5:47:ae:60:29:59:4a:aa:18:dd:f2:
                    43:43:c9:50:cb:05:6c:c9:48:9d:91:47:fa:3f:5d:
                    2e:7d:6e:15:4a:20:af:53:e9:e7:97:2f:76:86:a2:
                    28:f9:71:5a:10:9c:eb:d4:98:68:4f:be:eb:b2:8e:
                    45:8a:37:a8:4f:85:ff:b6:5e:53:5d:14:e2:fc:f0:
                    e8:9d:5f:99:8a:31:85:e7:29:11:d7:fb:a9:a2:da:
                    c4:0c:0e:1f:a9:bc:cb:44:f3:99:31:d6:e6:0c:38:
                    61:a4:4f:46:25:93:ae:ca:e7:45:35:1b:5f:37:6b:
                    11:c5:09:7c:17:e5:4c:53:69:c8:72:ea:e8:1e:42:
                    52:d1:a9:61:4a:7c:50:45:c0:b2:83:2c:ff:06:d3:
                    b4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9D:04:F1:16:8E:65:97:6D:1A:D6:E8:EC:C5:C0:14:14:78:1E:D5
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/377530C4DAAE11ECA024B6D3F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/377530C4DAAE11ECA024B6D3F1222468/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328164

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.36.248.0/22
                IPv6:
                  2c0f:ebe8::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:2f:18:05:20:20:f6:82:19:70:17:a3:bd:90:4d:e5:2a:4c:
         17:e2:51:e9:cc:97:24:84:72:36:d7:a9:fb:eb:ee:bc:fa:0d:
         2c:1c:2b:d4:35:b9:ba:f5:a3:f6:ff:36:1f:0d:63:42:9c:b9:
         3b:fc:8b:86:09:2a:71:13:33:fa:58:7e:36:09:52:62:2c:fe:
         63:07:f0:08:07:b3:7a:42:79:e3:91:4e:02:0b:9c:96:50:2d:
         a5:ed:e4:f2:b1:c1:a7:d8:ca:ff:5b:6e:d4:0f:4a:0f:7a:86:
         e5:34:ad:07:a0:3b:9c:71:86:7d:77:ff:22:5d:19:5f:9b:ad:
         4c:e6:6f:15:8c:9c:86:fe:48:d6:55:a2:80:c2:fb:fe:81:47:
         1f:7f:a1:c3:96:5d:65:d9:0f:0c:ee:a7:25:f4:12:39:28:9c:
         71:4c:cf:5e:22:9b:dd:a7:b0:80:d0:09:47:23:54:10:ad:4e:
         76:96:d3:1a:f9:3f:1c:ef:6d:ff:1a:54:2b:16:65:06:69:4e:
         57:f2:5a:6b:21:39:94:27:42:14:dd:35:b1:0f:e2:2d:f1:03:
         2e:b3:57:2f:88:a1:55:fa:e8:fd:00:00:52:8b:88:e7:20:30:
         68:c6:f6:3b:18:56:6a:86:98:d8:00:f6:2d:16:51:d6:c1:b7:
         fc:92:53:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----