Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/WF4wfCBwCWQDd_LGenl7YYBYcwU.cer
File:                     WF4wfCBwCWQDd_LGenl7YYBYcwU.cer (raw, json)
Hash identifier:          Vv56CMZdgmyWhB/2jhpneOj0AV3nhxfS8OXQqtbk79k=
Subject key identifier:   58:5E:30:7C:20:70:09:64:03:77:F2:C6:7A:79:7B:61:80:58:73:05
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2A2F
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F365C439/D1F340D819C111EFB2C7384F017001B1/WF4wfCBwCWQDd_LGenl7YYBYcwU.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F365C439/D1F340D819C111EFB2C7384F017001B1/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Fri 24 May 2024 11:36:20 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328406
                          IP: 102.130.224.0/21
                          IP: 2c0f:ec60::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Oct 2024 00:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10799 (0x2a2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: May 24 11:36:20 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F365C439AF/serialNumber=585E307C207009640377F2C67A797B6180587305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b2:ee:11:e0:99:2c:65:62:67:cc:29:4f:2e:
                    13:95:3b:03:49:72:fd:74:06:f8:0f:39:69:6b:db:
                    56:ac:dd:e9:28:e7:d3:6e:71:dc:ad:b4:b4:84:b9:
                    ed:69:b4:a1:8b:8c:18:ac:c5:68:19:f6:26:66:07:
                    82:22:e9:7a:cb:a3:56:0e:00:0b:55:e3:14:a6:7a:
                    af:86:aa:0d:41:1f:32:36:8d:57:aa:49:2c:59:11:
                    d4:3c:f9:6a:20:4a:91:58:3e:39:d4:4f:7e:c5:8b:
                    03:3d:c6:b7:bc:56:4d:d1:ea:93:4f:70:88:5e:b2:
                    9b:37:0d:8d:89:58:cf:10:21:22:56:6e:3a:8c:18:
                    71:a4:87:5a:ec:fe:d9:d4:3f:e3:4a:f7:fe:f9:38:
                    c0:db:ab:3b:f7:f3:99:37:1f:d2:8c:62:f8:9c:ef:
                    7f:80:9b:f9:10:03:cc:4b:da:db:76:b6:60:89:0a:
                    83:0e:64:3c:c6:1d:fe:d2:ec:76:15:69:b5:4e:5e:
                    f0:4b:04:6c:9c:6f:5e:ad:65:ac:6a:5b:da:c2:1d:
                    35:7c:d4:2b:03:1b:a7:5f:ab:0f:4e:b4:1b:59:6c:
                    71:5d:99:90:f9:32:ea:6a:29:05:a9:57:0a:e7:e7:
                    35:b1:c3:25:de:97:2d:1f:97:38:d7:df:69:41:16:
                    22:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5E:30:7C:20:70:09:64:03:77:F2:C6:7A:79:7B:61:80:58:73:05
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C439/D1F340D819C111EFB2C7384F017001B1/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C439/D1F340D819C111EFB2C7384F017001B1/WF4wfCBwCWQDd_LGenl7YYBYcwU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328406

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.130.224.0/21
                IPv6:
                  2c0f:ec60::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:37:03:38:33:2e:63:41:c9:4f:25:00:fd:20:5b:cf:5e:8c:
         51:a4:70:16:12:3e:d4:15:9e:a7:54:83:90:96:66:42:8c:b2:
         b0:15:c0:27:ed:28:6b:ba:5d:da:ed:fb:93:e7:86:27:40:8e:
         8d:b3:3d:74:48:af:f7:4b:77:d7:de:cf:c0:0c:c4:a6:d0:7d:
         97:c4:04:f0:b7:2c:ac:a3:91:6f:17:37:3b:75:6c:67:4d:ff:
         38:0a:8b:ae:09:e8:ca:a4:48:1c:fe:93:6f:99:9f:3c:af:71:
         29:19:d0:87:c3:11:f7:97:20:26:aa:20:4b:b0:bc:be:83:e5:
         64:99:c8:15:8d:70:d4:2f:7f:a3:58:6b:2c:d7:46:74:3f:7e:
         58:dd:aa:a9:89:fa:5a:55:4a:6e:d8:c3:a1:c4:f0:00:e9:ea:
         69:ef:5e:ed:d4:89:34:14:7d:e4:9e:52:e4:4c:c0:76:f8:62:
         b4:d5:f6:8b:8a:16:c3:c9:ac:c6:ca:d1:7f:bd:d4:8c:6a:ac:
         07:63:65:ef:64:5b:4f:8a:e2:85:23:8d:f6:7a:0c:bb:1f:52:
         1b:72:7d:f3:f7:51:73:ad:1d:58:70:90:1d:b4:62:a5:88:f0:
         59:9f:0e:db:ee:ee:4d:5e:d6:88:06:9e:ca:82:08:42:12:32:
         8d:2c:a7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----