Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/OwiJEFfOiidoEQQFlcyqxAjfUaY.cer
File:                     OwiJEFfOiidoEQQFlcyqxAjfUaY.cer (raw, json)
Hash identifier:          9wnd7yU2lQnQEHpI/OztddEj69H0ab5hO991oAwj2yc=
Subject key identifier:   3B:08:89:10:57:CE:8A:27:68:11:04:05:95:CC:AA:C4:08:DF:51:A6
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       25F1
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:51:31 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328970
                          IP: 102.217.188.0/22
                          IP: 2c0f:5b00::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 28 Apr 2024 11:49:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9713 (0x25f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:51:31 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3679CB8AF/serialNumber=3B08891057CE8A276811040595CCAAC408DF51A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5d:66:da:b5:dd:9b:70:6d:a9:71:d5:ca:37:
                    aa:2e:52:7d:95:4e:7f:83:62:99:73:67:5e:e8:19:
                    07:23:09:43:ab:7c:17:0e:12:95:92:1d:7f:1a:f9:
                    82:a0:96:ad:11:9b:95:a5:14:c7:4a:e0:b4:0f:d6:
                    6d:94:c3:27:13:8f:f1:40:64:5c:0a:20:9a:c9:8b:
                    ba:63:00:15:47:59:52:ee:d6:d9:e7:8d:8c:de:71:
                    4f:80:19:e4:d2:68:56:2d:5c:fd:f9:f6:0a:9d:6f:
                    ff:52:53:21:b4:dc:45:92:a8:4c:87:e4:ab:a5:09:
                    58:da:fb:7e:e3:c8:e6:8e:f1:b0:af:48:25:b5:ae:
                    08:29:08:45:aa:bb:11:5e:3b:66:cf:90:06:df:fc:
                    04:b7:dc:3b:d6:d9:f2:7e:7b:46:2a:9a:5b:08:5a:
                    5d:34:bd:55:9a:78:0d:21:4b:50:df:81:1c:8a:41:
                    38:43:85:1e:c3:84:5b:a1:6e:1b:bd:28:bb:8f:fe:
                    cd:11:58:db:d7:bb:0c:8b:c5:c8:28:50:1d:4e:39:
                    fc:9e:cd:27:b9:55:31:75:cd:b0:80:c1:16:f0:17:
                    bf:b4:c0:e4:d8:19:c8:c7:37:ea:80:6f:c0:ff:5f:
                    81:97:0c:64:49:25:87:ec:a7:98:ab:75:46:7a:39:
                    32:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:08:89:10:57:CE:8A:27:68:11:04:05:95:CC:AA:C4:08:DF:51:A6
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328970

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.217.188.0/22
                IPv6:
                  2c0f:5b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:ef:55:9c:2b:52:c1:9c:d7:54:7a:d9:7e:a9:db:6c:5c:c7:
         90:38:fb:1e:fd:f2:ad:7e:b6:19:61:d4:23:fa:07:d8:8b:91:
         a3:9d:7f:ea:7a:bb:54:4b:15:c7:14:ef:ef:6a:b7:11:0f:d8:
         5f:38:5b:58:9f:48:52:7c:83:a4:0f:b6:c2:7b:dd:02:86:8d:
         cb:f0:7f:2c:7a:bb:ed:4e:e8:87:7e:44:12:d4:41:ba:5e:db:
         46:d3:95:8e:1a:7f:e8:a1:9a:a9:fe:9e:1b:eb:d0:4a:e8:78:
         f1:2c:7c:4f:8b:c2:af:74:ef:ab:33:a7:72:45:24:7b:3e:72:
         71:ec:be:4a:31:c5:e7:20:87:66:2f:20:2c:2c:0d:d3:73:66:
         c0:62:3a:0d:f6:d7:52:04:f6:70:73:5e:95:63:42:e2:f8:be:
         de:ce:aa:32:3b:4e:82:32:c0:cc:2a:fa:e4:8e:85:a9:47:0c:
         a4:9c:df:d4:c8:c2:72:1c:7c:41:2c:72:12:75:cd:99:e8:b4:
         f5:bd:6d:72:95:fd:58:df:1e:65:bd:9b:ab:f6:7a:d5:ca:b7:
         58:fa:71:2b:01:cb:68:1e:39:3f:4c:d3:62:de:eb:4c:47:f5:
         4c:17:06:71:27:a3:6f:41:7d:e6:b2:a7:f7:f3:60:f6:b9:e3:
         13:3c:97:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----