Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Ucrn50ZIe9_A5k_UwTk3OnakGcQ.cer
File:                     Ucrn50ZIe9_A5k_UwTk3OnakGcQ.cer (raw, json)
Hash identifier:          N5l6BllvZo07RIGColjFIgYpMaedisuk2y0nSchmkSg=
Subject key identifier:   51:CA:E7:E7:46:48:7B:DF:C0:E6:4F:D4:C1:39:37:3A:76:A4:19:C4
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       249F
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/Ucrn50ZIe9_A5k_UwTk3OnakGcQ.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:45:44 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 327700
                          IP: 41.94.0.0/16
                          IP: 2c0f:f140::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 09 Jun 2024 11:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9375 (0x249f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:45:44 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F364A64DAF/serialNumber=51CAE7E746487BDFC0E64FD4C139373A76A419C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1f:a2:e4:2d:db:4b:d9:42:fd:16:12:9a:2c:
                    d8:0c:54:78:90:5f:01:b5:ee:6d:7e:7b:67:b9:e6:
                    22:bf:a2:5b:84:03:05:52:8c:19:b3:b2:5b:97:85:
                    af:06:56:d6:05:3d:15:82:80:4c:0f:1f:d6:1b:47:
                    11:69:c3:ba:22:8d:8f:92:9e:1c:01:73:6a:9a:b6:
                    bd:e1:b6:ca:75:d7:93:2a:5f:a5:9b:ad:4f:08:fa:
                    46:73:1b:bd:91:06:c2:e6:45:4c:ba:92:b8:96:9c:
                    18:9e:f8:8a:03:5f:f9:bd:b5:89:1a:aa:33:0a:73:
                    a5:bf:df:8a:f5:e7:c0:e3:07:3a:3c:42:b0:ad:3a:
                    9f:c5:34:30:3d:7f:8a:09:e7:ba:74:91:91:29:b4:
                    ee:62:63:e2:09:20:9d:24:b2:1d:57:8d:08:15:9f:
                    b7:91:69:29:62:6f:dd:84:72:f1:9c:61:3e:f1:a2:
                    57:b8:19:07:25:a3:d4:8f:db:84:98:85:45:98:93:
                    9e:ba:d3:7b:06:c3:92:5a:34:07:58:0b:7b:0d:60:
                    b3:98:cd:c5:5d:03:30:ac:12:8c:c7:78:de:77:88:
                    d1:82:e8:0e:c6:88:32:b1:a3:c8:8e:fa:a8:36:6f:
                    3c:9b:7d:8e:20:f4:57:f9:4b:75:0e:c3:dd:c1:ec:
                    37:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:CA:E7:E7:46:48:7B:DF:C0:E6:4F:D4:C1:39:37:3A:76:A4:19:C4
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/Ucrn50ZIe9_A5k_UwTk3OnakGcQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327700

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.94.0.0/16
                IPv6:
                  2c0f:f140::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:d6:94:ae:7d:67:3b:ab:b8:73:6d:d5:24:77:fe:0f:2a:68:
         ef:28:e0:6f:26:a2:4f:45:0e:c2:12:09:cf:07:27:4c:71:45:
         f6:11:e2:0b:91:44:1f:1d:97:30:2a:9e:72:81:2e:3d:19:d6:
         2e:93:43:5e:e9:24:e6:54:39:c9:7f:6f:fa:6d:62:25:33:a2:
         9b:1e:2d:7f:64:4a:a5:42:c9:5d:1d:db:bf:78:b9:54:fc:6d:
         c7:c1:0c:fc:01:e0:8a:65:33:d4:e0:7f:89:92:19:1b:78:21:
         97:60:ad:32:54:88:bc:f4:68:76:cd:8c:c2:08:5f:48:21:a3:
         d4:56:49:54:5b:33:c3:e9:23:f3:2f:c4:f9:be:60:81:97:17:
         f1:c3:dd:06:50:11:53:20:21:b6:08:6c:f2:52:d6:46:ea:10:
         c4:e9:3f:11:07:b9:01:b7:86:d0:f0:63:98:e3:04:d1:5d:65:
         4b:8c:17:ec:01:8f:e9:ef:5d:ce:28:0a:f4:1c:11:fe:03:12:
         f9:a1:8e:36:09:14:09:58:ea:11:5d:f7:2f:9c:4c:8e:3a:d7:
         b3:f4:d4:3b:fb:8e:1e:0e:65:35:82:16:15:fd:7f:fb:5f:fb:
         9f:8a:64:a7:54:fd:31:f2:04:92:68:df:f2:1c:72:0f:4d:ec:
         ca:9a:56:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----