Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/X-MxcqYILFSryRHxn1edSf2AmBQ.cer
File:                     X-MxcqYILFSryRHxn1edSf2AmBQ.cer (raw, json)
Hash identifier:          d/QAH1hlIVSoElASoB4MEoer1ZA0pG/6fk5wMpq/uv8=
Subject key identifier:   5F:E3:31:72:A6:08:2C:54:AB:C9:11:F1:9F:57:9D:49:FD:80:98:14
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       266F
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:09:24 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328839
                          IP: 102.220.68.0/22
                          IP: 2c0f:4600::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Apr 2024 00:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9839 (0x266f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:09:24 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3690793AF/serialNumber=5FE33172A6082C54ABC911F19F579D49FD809814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:13:ea:e6:29:dd:da:cf:e3:8c:24:8d:2e:9b:
                    fa:a8:f0:82:0b:e5:6e:5f:87:cc:fe:ac:70:a3:aa:
                    8f:88:cb:d7:70:08:c2:45:81:52:2c:65:29:58:78:
                    bd:c9:5f:d8:c6:b1:1a:be:39:0d:2f:6f:9f:3c:c3:
                    0c:8a:6b:a2:67:a3:5d:3a:bc:53:5b:eb:51:27:86:
                    01:b1:a4:0a:b3:b8:39:05:39:99:b9:bf:ee:ab:1c:
                    5b:09:ef:23:20:12:2c:d4:08:ae:d6:af:3a:cc:3f:
                    04:c4:60:59:03:fc:08:65:82:76:6c:c6:3d:2a:5d:
                    08:40:37:ad:df:6a:a4:bb:d7:35:ac:df:29:ea:c8:
                    e8:60:76:d0:08:11:77:d6:27:3b:01:38:ba:81:8c:
                    5c:c5:7a:27:09:84:55:55:d2:b3:34:c7:d7:7a:d4:
                    5b:92:5a:d5:e3:fc:ac:9a:cf:ca:57:a5:30:99:fe:
                    e1:6c:65:1a:29:82:26:da:1f:a9:20:87:95:ed:e7:
                    68:99:b6:6f:b9:6a:50:9b:b8:96:53:ab:8c:be:59:
                    8e:6b:15:97:4f:99:c3:36:81:1f:9f:d1:a2:e1:d9:
                    72:1d:cb:15:e4:ab:21:ff:49:ec:0d:59:8f:0b:93:
                    e0:b1:3f:29:d7:4b:ba:19:ed:83:45:9f:34:de:c3:
                    5c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E3:31:72:A6:08:2C:54:AB:C9:11:F1:9F:57:9D:49:FD:80:98:14
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328839

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.220.68.0/22
                IPv6:
                  2c0f:4600::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:8d:27:2a:be:46:a8:45:0d:3e:02:dc:9e:d2:a3:d8:58:5d:
         7e:e8:19:95:5f:7a:8a:e3:6c:5c:fe:67:3b:cc:95:5f:9c:c4:
         7c:ed:19:5a:37:bb:e9:cd:e0:de:b0:7e:f3:b4:94:b6:e2:1f:
         31:f6:98:8f:30:cd:81:c8:cb:af:ef:a9:c9:5a:70:39:b8:ff:
         55:59:4e:8f:91:4a:ee:36:87:2c:ea:d3:a7:5d:52:e5:38:a6:
         78:e8:67:e3:23:c5:bb:b6:ff:e7:e3:59:3f:66:a3:1e:dc:7b:
         06:3d:d3:ce:4d:ab:cb:de:0a:37:a0:52:f7:52:8f:8e:c1:ef:
         74:c1:c1:70:2e:d5:7a:85:a7:a0:b6:1c:30:14:c4:ea:56:8e:
         53:bf:80:5f:b7:23:89:e9:c0:f9:94:3d:b6:59:a1:2e:aa:02:
         e0:38:7c:de:da:f8:20:d9:8c:00:4d:af:a4:67:72:8e:94:69:
         d3:26:d6:e5:63:a1:f7:c6:9e:25:c4:cf:94:e5:d1:10:d8:73:
         88:6b:60:64:b1:11:6d:12:8d:a5:2d:5f:b2:f7:4f:fd:4b:1e:
         3a:eb:65:e9:fb:7b:ab:fa:a4:b0:e9:9c:5d:93:b5:dd:24:f5:
         ec:94:6a:a3:21:24:08:d6:11:7b:93:25:e1:3d:ea:c2:02:4b:
         76:19:0f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----