Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer
File:                     XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer (raw, json)
Hash identifier:          wISBDfG12aBP3vhFJNdKJeQ00wBtF6gW8eMcXPWYGV0=
Subject key identifier:   5C:0E:8F:1E:8B:90:FD:D2:94:B5:4D:57:30:90:13:FC:5A:06:A3:5B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2B0B
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Tue 06 Aug 2024 09:08:18 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 329266
                          IP: 102.212.0.0/22
                          IP: 2c0f:4740::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Oct 2024 00:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11019 (0x2b0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Aug  6 09:08:18 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3627065AF/serialNumber=5C0E8F1E8B90FDD294B54D57309013FC5A06A35B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:48:01:50:c7:b0:35:37:53:9c:86:9b:0d:f5:
                    c2:9d:72:98:fa:f1:6e:53:e2:08:a0:d3:61:28:b8:
                    15:6e:0b:50:d1:26:3f:a9:7b:00:09:77:2c:0f:f0:
                    d4:28:d7:84:90:c9:f3:b8:e6:67:1a:93:f7:ea:2c:
                    32:7e:da:42:60:30:52:3d:b4:9a:17:d9:dd:02:68:
                    04:08:6d:66:e6:52:80:18:89:45:d5:a7:d5:fa:49:
                    f4:6a:2b:0a:98:1b:27:84:9f:27:c3:76:a3:34:fb:
                    a4:f7:ab:2f:c6:d0:3e:db:89:df:fa:e4:d0:03:d9:
                    ad:d5:95:0f:f8:ed:06:9d:23:dc:c9:01:60:a1:e0:
                    ce:d5:31:d4:3a:15:74:e6:2e:c9:f4:90:fe:4a:21:
                    f5:4d:8b:87:f3:3e:2d:da:40:dd:f9:6f:bd:37:9f:
                    6b:bf:41:7f:35:77:32:8b:38:a5:ca:07:e6:19:1d:
                    f7:4b:d5:46:88:3b:8c:9b:4d:20:3a:81:80:46:5f:
                    ca:d4:17:23:fa:58:a7:f3:58:84:4d:4a:b5:b8:52:
                    53:a2:57:0b:2f:97:5e:2e:83:07:ed:c1:ee:82:2b:
                    a6:fd:96:68:38:9d:1d:66:fb:57:3a:a0:42:26:65:
                    d5:27:82:de:b1:26:7e:a0:65:61:fd:b1:66:d5:c1:
                    fc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0E:8F:1E:8B:90:FD:D2:94:B5:4D:57:30:90:13:FC:5A:06:A3:5B
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329266

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.0.0/22
                IPv6:
                  2c0f:4740::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:34:5b:98:7b:32:76:a7:d3:2f:aa:99:1d:36:fe:8e:ee:b8:
         4c:a6:6f:89:b7:39:3e:d2:7f:9c:f3:01:30:7d:1a:a2:aa:d9:
         0c:d6:bf:e2:32:a6:74:74:f3:86:58:24:c2:2d:47:da:aa:03:
         74:e0:2e:7a:33:04:4f:b6:cd:62:6c:13:35:6c:23:9b:85:37:
         cd:be:45:e1:7b:f4:fa:0c:22:c2:e0:eb:91:34:ae:68:89:fe:
         2b:be:02:8a:3a:fd:2d:f8:f2:37:bd:76:25:69:10:bb:99:e1:
         5a:ec:31:00:b4:f9:6f:9e:1c:46:3a:98:1a:ed:e8:4d:a9:1f:
         ed:7f:8e:6f:9b:54:96:34:a9:ea:5d:27:ab:40:4a:4d:58:4a:
         d4:22:79:17:b0:dd:c6:d5:b3:15:c7:d7:1a:83:8e:cb:77:cb:
         23:de:e1:ac:3b:49:e3:00:94:ec:dc:58:7c:74:df:fa:5e:58:
         5f:b9:fe:02:01:5e:97:d8:5b:41:76:23:6d:30:52:2a:ca:63:
         b8:9b:a8:e2:71:a1:62:dd:69:78:1d:0f:06:ad:01:ed:06:51:
         7a:81:14:93:f2:a4:52:f7:76:76:a9:51:79:df:6c:1b:72:46:
         74:40:94:d2:e5:01:7e:ab:30:da:18:24:28:47:49:04:6e:53:
         80:65:f5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----