Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/V00kEnto5oHJEhRaMMayIbP4KlA.cer
File:                     V00kEnto5oHJEhRaMMayIbP4KlA.cer (raw, json)
Hash identifier:          escU7dPk5SzPdZtYtnHtvVUQnTL9PLlToE8717S9N/8=
Subject key identifier:   57:4D:24:12:7B:68:E6:81:C9:12:14:5A:30:C6:B2:21:B3:F8:2A:50
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       286B
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/V00kEnto5oHJEhRaMMayIbP4KlA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:26:27 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 329121
                          IP: 102.214.232.0/22
                          IP: 2c0f:7080::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 05:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10347 (0x286b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:26:27 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36EE1C1AF/serialNumber=574D24127B68E681C912145A30C6B221B3F82A50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:80:15:4a:a6:63:e0:21:02:a4:07:b2:3b:00:
                    e5:71:bc:09:83:4a:a2:b9:b3:76:34:6a:88:66:06:
                    6a:5b:52:4e:ba:e7:02:fa:36:0e:a2:c1:4b:bf:1c:
                    3a:9b:1e:00:56:3a:ca:0a:38:c3:4f:3a:66:b3:58:
                    08:62:0b:ac:d9:d6:0d:9b:41:3f:37:9b:1e:6b:fa:
                    2f:ae:6f:4c:c1:c4:97:b6:b1:a3:35:14:45:bc:c7:
                    a0:8e:8c:c6:b6:2d:4a:97:00:af:c9:6e:0b:c0:2a:
                    bc:b5:3b:89:07:5d:98:52:5f:3f:1e:96:cc:b6:24:
                    6d:11:66:ed:40:fe:ac:36:69:de:45:2f:a9:ec:27:
                    a9:15:7c:17:6b:ff:20:bf:d5:47:ab:8d:43:39:d2:
                    8a:df:d7:c7:a7:12:11:f8:df:54:4a:85:d2:c2:ce:
                    ea:79:37:db:f7:40:35:99:b9:6d:fc:33:59:e3:19:
                    cb:8a:fc:8c:5d:48:df:87:b4:62:22:ae:9e:e2:45:
                    3d:58:12:0b:74:03:cc:62:50:94:df:3e:55:d6:93:
                    ea:91:20:8d:b4:b2:77:87:e4:40:ce:06:55:8f:4d:
                    c9:8b:3d:b3:9f:a5:82:be:49:74:e4:7c:34:31:8d:
                    f6:fd:5d:c6:2e:41:3b:d5:e7:62:29:2b:fd:1e:b7:
                    92:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:4D:24:12:7B:68:E6:81:C9:12:14:5A:30:C6:B2:21:B3:F8:2A:50
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/V00kEnto5oHJEhRaMMayIbP4KlA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329121

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.214.232.0/22
                IPv6:
                  2c0f:7080::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:af:41:d6:2e:f7:85:e7:05:f5:5f:c9:8f:3d:4b:41:ad:63:
         a7:e0:9b:57:c8:dc:00:84:4a:d3:f6:3d:15:a1:5a:cd:12:9e:
         f2:72:5e:ad:17:30:e6:49:3c:b0:39:4b:31:67:fd:2b:1c:98:
         cd:cb:5a:1f:f6:6a:3f:27:0d:02:f8:66:91:19:0f:94:4a:05:
         4c:d0:5f:03:fb:d0:32:ea:07:dd:0f:af:64:44:cd:55:21:29:
         b9:b5:4c:7b:d4:fe:28:42:62:83:4a:21:2d:40:0a:bd:ec:2b:
         07:b1:b0:19:0a:47:dc:d2:66:ab:c5:75:8f:8c:87:3e:f5:8b:
         dd:e2:d5:a9:18:6c:36:7a:a6:64:6a:92:96:75:9a:ba:40:bc:
         fe:68:de:68:02:a5:37:26:d3:ac:6d:a6:6f:08:ef:f2:82:0a:
         eb:0e:4d:28:fc:f2:f8:3a:8a:27:5d:df:b8:d5:ad:1d:38:c2:
         d3:71:46:81:db:81:d7:d6:50:51:b2:e9:26:ff:8c:c6:8b:85:
         08:f3:c4:6d:68:e0:d7:9b:8f:93:31:b5:08:9b:2f:5d:f3:99:
         70:99:b1:bf:c6:c2:63:79:c3:86:61:05:79:53:9d:4b:e8:98:
         bb:d4:90:db:3a:a6:96:f7:8b:31:fb:64:28:e6:50:e3:7a:ad:
         30:c9:b7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----