Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.cer
File:                     Rjx68zvS8Ur9TSo0XZwxgXx4c3w.cer (raw, json)
Hash identifier:          ub331z6JYaznat1HnCM0MKnEu4TpxEgE88LMGnPSq0g=
Subject key identifier:   46:3C:7A:F3:3B:D2:F1:4A:FD:4D:2A:34:5D:9C:31:81:7C:78:73:7C
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3528
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Fri 30 May 2025 16:11:40 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 327947
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Jun 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13608 (0x3528)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: May 30 16:11:40 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36C29E6AF, serialNumber=463C7AF33BD2F14AFD4D2A345D9C31817C78737C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f2:f8:ca:92:24:11:8e:04:1d:22:09:48:cf:
                    12:68:66:e1:98:d4:98:0c:b9:9d:ec:b5:f2:96:6f:
                    d0:6a:7e:71:12:cf:c6:9c:23:b1:b7:27:ef:ba:8f:
                    74:d8:a7:dc:1c:2c:d1:bd:8f:17:15:87:25:0e:d6:
                    59:18:b2:55:a5:2e:40:11:35:0f:8b:d4:19:a1:df:
                    40:ca:73:bb:3a:f7:04:73:a0:32:96:fb:f6:5d:d5:
                    5b:b8:ce:08:78:e2:87:a5:ae:14:16:42:29:2b:ac:
                    1a:e2:60:fd:2e:21:86:bf:29:92:ec:6d:70:57:b5:
                    1f:86:f7:1f:fa:0e:64:03:90:d8:ee:57:8a:62:eb:
                    ee:67:74:4f:44:e8:bd:9d:b8:db:d7:1d:31:e0:68:
                    60:89:61:2d:8b:a4:a7:6d:1c:07:a7:33:93:8e:19:
                    b8:68:2a:00:ae:fc:cf:7a:ee:0f:a3:6c:b8:75:bc:
                    a3:0d:2a:57:7f:3c:8e:9f:18:ed:ac:fc:10:16:d3:
                    e8:8d:88:a7:b2:92:2b:14:dd:8e:58:97:00:4f:40:
                    36:92:2d:7e:f0:62:d6:8e:aa:9f:a7:58:33:f1:c1:
                    b4:29:c6:6e:05:39:01:fa:c1:dc:71:46:38:74:2e:
                    2a:52:4c:1f:0a:d5:34:78:b9:b6:93:46:e5:69:4b:
                    69:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:3C:7A:F3:3B:D2:F1:4A:FD:4D:2A:34:5D:9C:31:81:7C:78:73:7C
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327947

    Signature Algorithm: sha256WithRSAEncryption
         1b:56:54:46:2c:21:d4:c3:78:21:fa:09:f1:ea:c3:9f:e4:a6:
         c7:84:b5:d0:ec:2d:1d:c7:86:a3:a2:17:05:4e:44:7b:bf:b1:
         d9:cb:69:00:ea:e0:1b:7d:9d:8f:31:d3:6e:e4:e5:d4:2d:e9:
         28:08:00:2a:dc:62:f7:40:c1:7a:1f:55:cd:e0:b3:78:4f:2c:
         57:13:fe:bf:a7:7f:c0:0d:08:fe:98:72:57:a6:fa:45:b5:ed:
         68:97:15:85:ec:29:bc:95:f9:70:0b:fb:0d:e2:32:b9:cb:98:
         19:aa:09:ac:67:24:eb:de:52:46:97:ef:0c:c6:fa:37:37:77:
         1d:d5:9d:f2:38:de:7d:77:f9:8b:71:23:ea:9d:66:44:fb:09:
         8f:a0:51:b3:03:18:92:96:73:f2:7a:37:19:4f:6c:43:a7:a1:
         30:a2:1d:5e:33:9a:0b:9c:a4:61:d0:53:3b:83:96:a0:b2:0b:
         37:3a:25:a4:17:d1:31:5c:61:09:ad:ba:c0:e1:07:a1:a0:e0:
         61:27:4f:ec:92:25:01:da:5d:7d:aa:a6:99:c9:29:93:18:0e:
         68:b2:06:fc:e7:13:c8:84:85:ce:ce:c0:b8:e8:ee:79:52:bc:
         22:c6:ae:3e:e5:dd:7d:33:15:da:2e:5a:f2:2a:e2:9e:db:72:
         d2:bd:28:c3
-----BEGIN CERTIFICATE-----
MIIF9TCCBN2gAwIBAgICNSgwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTA1MzAxNjExNDBaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkMyOUU2QUYxMTAvBgNVBAUTKDQ2M0M3QUYzM0JEMkYxNEFGRDREMkEz
NDVEOUMzMTgxN0M3ODczN0MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCh8vjKkiQRjgQdIglIzxJoZuGY1JgMuZ3stfKWb9BqfnESz8acI7G3J++6j3TY
p9wcLNG9jxcVhyUO1lkYslWlLkARNQ+L1Bmh30DKc7s69wRzoDKW+/Zd1Vu4zgh4
4oelrhQWQikrrBriYP0uIYa/KZLsbXBXtR+G9x/6DmQDkNjuV4pi6+5ndE9E6L2d
uNvXHTHgaGCJYS2LpKdtHAenM5OOGbhoKgCu/M967g+jbLh1vKMNKld/PI6fGO2s
/BAW0+iNiKeykisU3Y5YlwBPQDaSLX7wYtaOqp+nWDPxwbQpxm4FOQH6wdxxRjh0
LipSTB8K1TR4ubaTRuVpS2n3AgMBAAGjggLqMIIC5jAdBgNVHQ4EFgQURjx68zvS
8Ur9TSo0XZwxgXx4c3wwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZDMjlFNi9CRDQ1Nzg5RTNENzAx
MUYwOEZCMjkyRDNEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QzI5RTYvQkQ0NTc4OUUzRDcwMTFGMDhGQjI5MkQzREFFNEVDOUMvUmp4Njh6
dlM4VXI5VFNvMFhad3hnWHg0YzN3Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFAQswDQYJKoZIhvcNAQELBQADggEBABtWVEYsIdTDeCH6CfHqw5/kpseEtdDs
LR3HhqOiFwVORHu/sdnLaQDq4Bt9nY8x027k5dQt6SgIACrcYvdAwXofVc3gs3hP
LFcT/r+nf8ANCP6Yclem+kW17WiXFYXsKbyV+XAL+w3iMrnLmBmqCaxnJOveUkaX
7wzG+jc3dx3VnfI43n13+YtxI+qdZkT7CY+gUbMDGJKWc/J6NxlPbEOnoTCiHV4z
mgucpGHQUzuDlqCyCzc6JaQX0TFcYQmtusDhB6Gg4GEnT+ySJQHaXX2qppnJKZMY
DmiyBvznE8iEhc7OwLjo7nlSvCLGrj7l3X0zFdouWvIq4p7bctK9KMM=
-----END CERTIFICATE-----