Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer
File:                     ai026HfXJSbET24AT680-ZBPIxE.cer (raw, json)
Hash identifier:          o6VVpYnunQvfr3YSFMXoSKJ/NQn5J65dPMnxF8StoEU=
Subject key identifier:   6A:2D:36:E8:77:D7:25:26:C4:4F:6E:00:4F:AF:34:F9:90:4F:23:11
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2718
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:35:18 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 21003

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10008 (0x2718)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:35:18 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36A991DAF/serialNumber=6A2D36E877D72526C44F6E004FAF34F9904F2311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8d:f6:4b:49:3e:20:34:d5:f9:44:c6:37:1e:
                    d3:00:c2:13:e7:3a:34:06:6f:81:4e:51:b5:8c:c5:
                    9e:36:8d:1e:96:47:50:39:2d:ea:c5:70:f3:a9:83:
                    03:f5:a2:dc:84:78:4f:ff:e6:8b:04:7b:d9:4f:85:
                    ab:ad:d6:d5:5d:b7:21:c8:09:3f:0d:ae:64:90:03:
                    b2:3f:8a:f8:27:23:51:bd:15:ea:2a:8c:49:3b:b8:
                    43:2e:f0:8e:c6:7f:24:dc:9b:d7:c2:fe:e9:c1:12:
                    57:25:61:ef:7d:a3:36:85:6b:bb:c6:56:d4:d7:4a:
                    84:63:b6:54:0f:8d:e1:76:d6:ae:b1:35:0e:f7:2b:
                    8a:c4:1a:4e:5b:ed:c1:bf:3d:4d:1e:69:e7:b3:6d:
                    29:a3:e6:76:31:8f:a7:33:52:02:3c:bd:c5:0b:91:
                    7f:cb:a7:35:bd:e2:53:8c:50:8a:e6:a2:99:b0:4f:
                    59:c0:3a:0b:4c:30:dc:7c:24:6e:4d:4d:e5:39:58:
                    52:60:90:9c:95:ba:37:c5:bc:5b:f5:d1:18:44:a9:
                    a4:b5:f9:34:4f:9b:ee:14:89:91:6d:7a:49:9d:60:
                    e4:a2:2d:c0:ce:dd:57:96:70:89:f5:61:66:6b:a1:
                    5e:a4:10:84:b9:fd:0c:cc:54:42:77:9b:46:a3:4f:
                    b2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2D:36:E8:77:D7:25:26:C4:4F:6E:00:4F:AF:34:F9:90:4F:23:11
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21003

    Signature Algorithm: sha256WithRSAEncryption
         47:b7:68:36:f6:2a:1a:f3:ca:1d:7e:37:98:72:b1:ad:5e:45:
         74:4b:6e:97:51:9c:36:13:67:82:e3:66:90:fa:55:1d:54:46:
         4e:ba:d3:94:85:bf:b2:d1:a4:d9:50:b0:dd:c4:f3:b1:b5:9a:
         0c:64:b8:27:d6:a2:05:29:07:7f:39:a1:2c:7f:55:64:3a:9c:
         a1:95:a8:d1:26:ed:be:e9:89:75:ce:cd:54:86:d5:e1:c4:65:
         cf:e8:80:5b:9e:47:70:e9:0a:0f:85:5d:38:21:db:23:e8:cb:
         b5:86:7a:9d:3e:bf:93:65:c2:fc:3d:33:9d:cd:62:fb:72:fc:
         d5:d1:12:c0:55:9b:ec:25:42:13:d2:32:92:76:de:2a:9c:de:
         09:76:36:89:dc:b7:81:35:cc:a8:a9:f1:83:35:14:b6:8b:e1:
         0d:78:a9:5e:ac:e6:b4:21:91:f9:25:b4:95:c8:df:13:38:68:
         de:c3:9d:4c:e4:41:b3:ba:86:5d:05:4d:ef:75:6f:74:ec:48:
         28:2c:76:a0:06:08:d0:6a:9c:3b:0c:ab:d1:2d:d2:df:ba:62:
         c5:66:6e:69:f7:2e:92:20:b0:1d:11:69:d0:92:ec:1c:57:e0:
         27:bf:6b:d0:be:f8:27:a5:c8:eb:e9:ad:33:53:48:8b:00:da:
         29:aa:6d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----