Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/d0EtfMEFPOGdN5zMYAe5JaHnTKE.cer
File:                     d0EtfMEFPOGdN5zMYAe5JaHnTKE.cer (raw, json)
Hash identifier:          CBbVBQEJUvu+wLkDTDNMJlKzwnSKfEg5im0hW6aK604=
Subject key identifier:   77:41:2D:7C:C1:05:3C:E1:9D:37:9C:CC:60:07:B9:25:A1:E7:4C:A1
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       261E
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/7B5474960EA911EE99CD2B764AD9E6FC/d0EtfMEFPOGdN5zMYAe5JaHnTKE.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/7B5474960EA911EE99CD2B764AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:58:01 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 41.209.0.0/18
                          IP: 2001:4368::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9758 (0x261e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:58:01 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F367FC8BAF/serialNumber=77412D7CC1053CE19D379CCC6007B925A1E74CA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:dd:78:19:bd:c5:d4:f2:5f:fa:65:69:ca:f9:
                    c3:95:22:b6:17:3a:4c:6d:d3:64:4d:e8:8b:3a:75:
                    fc:80:68:26:d6:51:63:34:53:33:c1:31:e0:1c:26:
                    cc:53:52:ff:8d:2a:a7:b8:ce:6f:65:98:f4:37:a2:
                    e2:c4:f1:94:06:9f:04:72:b1:e2:32:a0:95:e0:4b:
                    2f:f8:3b:57:cb:31:69:03:ef:a1:f6:b1:b2:82:7b:
                    8a:04:52:4d:ac:e3:51:aa:53:d1:3a:35:eb:75:19:
                    ff:35:5d:bf:6c:fc:fd:f3:fe:23:d5:ab:3c:19:2c:
                    6d:93:78:ab:63:d5:8f:5f:57:da:5a:9d:2b:1c:a8:
                    bf:72:88:f6:d3:8d:2c:82:6b:e2:39:67:c2:6b:c5:
                    97:95:2e:6c:b3:f8:ec:5f:7c:ae:82:36:81:9c:7a:
                    5d:3e:d5:52:8d:ad:26:e0:d9:55:29:a4:d7:7c:e7:
                    4e:ae:25:7b:00:46:be:47:3e:8f:cb:07:0e:a2:0d:
                    1a:ae:2f:11:7e:0b:59:95:7d:ba:3b:5f:b8:37:a4:
                    8e:06:32:40:f1:e6:1d:c8:ae:0d:74:53:d3:68:02:
                    b9:9c:c2:cf:50:26:33:b4:26:64:6c:23:4f:fc:32:
                    34:ee:77:79:be:91:53:1f:21:c9:05:3d:8e:1f:79:
                    87:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:41:2D:7C:C1:05:3C:E1:9D:37:9C:CC:60:07:B9:25:A1:E7:4C:A1
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/7B5474960EA911EE99CD2B764AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/7B5474960EA911EE99CD2B764AD9E6FC/d0EtfMEFPOGdN5zMYAe5JaHnTKE.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.209.0.0/18
                IPv6:
                  2001:4368::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:5e:ea:1e:e7:22:f4:47:35:5e:28:2a:bd:e5:73:9d:8c:c3:
         b9:30:9e:ca:26:06:7b:31:cb:69:f5:1b:6e:5c:3b:a4:c8:14:
         3e:40:9b:c9:a7:2a:ec:65:5b:ab:40:10:b7:98:11:e7:b8:b9:
         a1:73:2b:d6:a9:e6:7e:b9:d2:df:de:df:78:1c:c4:90:0d:9d:
         64:d2:e0:b9:07:58:2c:46:f9:a0:7f:8b:d3:a7:8a:5b:c3:eb:
         43:20:61:8b:28:b2:80:b5:f2:b0:66:b0:10:37:6b:3b:c2:f4:
         0e:3c:f5:0b:41:ee:d4:11:56:33:2b:68:26:23:ec:8b:bd:d8:
         fa:3f:f4:24:1f:ef:57:00:dc:05:8d:7d:b0:ca:b2:48:48:cf:
         6b:23:dc:7c:e8:1d:7f:af:1c:d2:ce:32:8d:80:e6:bc:43:4b:
         7b:7a:77:32:ce:7d:f6:52:40:1e:e9:0b:e3:83:c1:57:bd:5d:
         82:ee:7d:83:05:7e:bc:90:cc:a1:85:12:3d:64:b1:5a:18:59:
         04:20:ad:07:ac:b2:f3:22:21:fe:4e:cf:83:8c:00:7d:6f:59:
         55:b3:e4:bf:5f:6a:da:b8:ad:1f:d1:a2:7d:13:8e:a2:eb:df:
         a8:1f:d1:6a:7b:cb:00:51:a8:4b:37:9a:00:80:79:45:8f:ea:
         2d:f1:2b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----