Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/V1CM30lSOjgTPpe8DBv0p6NfZ6Q.cer
File:                     V1CM30lSOjgTPpe8DBv0p6NfZ6Q.cer (raw, json)
Hash identifier:          dW8lEZFmSr9tRdtayeeUSFzjz6EbZbLuLH5u2t13eOQ=
Subject key identifier:   57:50:8C:DF:49:52:3A:38:13:3E:97:BC:0C:1B:F4:A7:A3:5F:67:A4
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       25A9
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F366E94B/61E32A7E27B411EE92E3412B4AD9E6FC/V1CM30lSOjgTPpe8DBv0p6NfZ6Q.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F366E94B/61E32A7E27B411EE92E3412B4AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:41:00 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 329247
                          IP: 102.212.24.0/22
                          IP: 2c0f:4340::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9641 (0x25a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:41:00 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F366E94BAF/serialNumber=57508CDF49523A38133E97BC0C1BF4A7A35F67A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:25:5f:d3:69:bd:e1:33:ec:b6:7c:ce:48:b9:
                    f2:11:c9:8b:06:21:0d:9a:ac:7b:2a:fd:d8:19:85:
                    c6:78:21:1b:b4:71:85:05:f9:8c:bf:d7:7a:51:fb:
                    71:49:ea:98:a0:d6:20:fd:c1:04:6e:9b:5b:dd:70:
                    00:7c:91:d1:61:ad:26:eb:02:66:c3:88:4d:74:b5:
                    dc:b5:b7:5d:4c:ac:a8:93:f5:f9:17:e1:0b:88:a0:
                    f3:6a:cc:0b:66:11:77:d8:96:e1:40:49:aa:02:16:
                    89:9c:25:ad:93:d9:6c:43:70:72:5d:23:2d:54:e1:
                    c0:41:7b:68:8a:6c:bc:46:90:05:fa:0c:36:9f:9e:
                    57:ac:16:cc:69:71:21:03:16:a5:44:1f:91:ec:fe:
                    11:b4:6a:db:19:52:21:ba:c1:62:ae:2b:ec:92:08:
                    15:46:10:c9:74:85:33:85:70:7c:5a:05:8b:54:e4:
                    35:ca:c4:98:5f:46:65:a5:32:2a:c9:a7:f0:e1:96:
                    25:05:ce:5b:6a:e6:de:e0:e8:54:76:0b:5e:94:cd:
                    db:2d:1c:0e:8e:a1:3b:39:b1:54:db:2f:6c:fb:ee:
                    32:93:f8:ea:c5:f5:01:f7:70:77:07:90:46:63:9e:
                    6e:99:74:18:49:9f:a3:61:fe:09:1d:96:5e:8e:b0:
                    7f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:50:8C:DF:49:52:3A:38:13:3E:97:BC:0C:1B:F4:A7:A3:5F:67:A4
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366E94B/61E32A7E27B411EE92E3412B4AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366E94B/61E32A7E27B411EE92E3412B4AD9E6FC/V1CM30lSOjgTPpe8DBv0p6NfZ6Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329247

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.24.0/22
                IPv6:
                  2c0f:4340::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:3e:40:c2:ee:ad:3b:19:39:28:b2:c7:ba:34:6d:b0:25:db:
         c1:97:06:e0:ff:b7:40:6a:7c:14:69:66:56:ad:3c:22:73:7a:
         34:0b:d2:b3:79:a7:05:ff:8f:b8:64:0f:68:40:30:45:2d:3f:
         e4:51:dc:c0:b5:88:4e:eb:05:0e:b9:1e:6a:14:fa:88:92:4d:
         63:54:7c:e0:98:c1:43:4e:28:a8:6c:9f:7b:de:e6:6d:92:61:
         2c:5d:85:77:1a:6c:cd:4d:bd:c8:56:40:8d:8d:35:4e:f5:84:
         e2:54:6f:44:ae:d3:7e:63:54:0a:38:0a:f3:78:24:6b:d3:c1:
         24:bf:1a:13:9c:07:a5:a9:82:9c:60:bb:97:5f:27:97:93:cc:
         c7:37:cb:1e:e6:6c:fb:ea:cd:d4:ba:ac:16:fa:e6:ed:95:2d:
         a0:9b:9d:da:f1:14:79:cc:9c:2b:71:a0:50:83:57:df:1b:d8:
         a7:a5:54:38:b4:3a:d6:4c:0e:1a:99:dc:cb:0e:86:51:ca:7f:
         5b:c6:61:14:75:66:2b:7c:fd:bb:82:05:85:e3:1b:50:83:44:
         10:8f:24:09:00:02:18:57:b5:b8:0c:49:f9:cf:57:d3:62:6b:
         4c:33:b5:de:85:9f:24:22:3d:27:75:0d:64:99:bb:03:1d:61:
         90:ca:a6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----