Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ePCj07rEmhSIR2PZN9PKGSCVOxU.cer
File:                     ePCj07rEmhSIR2PZN9PKGSCVOxU.cer (raw, json)
Hash identifier:          3gJDxWgg6/YpHnUxP3+WkHVEjOkardfKjCswAimNf98=
Subject key identifier:   78:F0:A3:D3:BA:C4:9A:14:88:47:63:D9:37:D3:CA:19:20:95:3B:15
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2A74
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/ePCj07rEmhSIR2PZN9PKGSCVOxU.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 12 Jun 2024 09:30:51 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328503
                          IP: 102.67.32.0/20

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Oct 2024 00:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10868 (0x2a74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jun 12 09:30:51 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36FF74CAF/serialNumber=78F0A3D3BAC49A14884763D937D3CA1920953B15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:21:db:c4:59:da:9a:1b:31:6b:c0:7e:a7:b9:
                    e3:f8:c1:d0:eb:e3:cc:b3:63:b5:2c:4d:e3:38:87:
                    61:4d:4f:84:8b:96:66:a8:f1:dc:19:11:d2:d3:16:
                    01:ff:01:4b:03:8c:b5:03:9e:24:cb:fe:28:a0:4f:
                    4c:9c:50:3c:cd:61:21:a3:22:fe:d4:f8:6d:d0:98:
                    aa:ed:9c:eb:50:6b:db:4a:98:4c:e1:99:da:96:94:
                    0b:13:a6:57:56:7f:23:50:79:ba:86:c4:9e:f7:86:
                    a0:1f:8e:06:f2:b3:2c:f5:1b:ae:89:34:8c:3a:f8:
                    23:3b:67:37:b9:fa:95:f3:0c:ab:b1:5c:af:e1:b3:
                    a6:d5:56:4d:31:1d:80:18:c2:c0:84:c2:ef:64:ad:
                    40:a4:bc:a3:ca:2a:1b:98:99:46:21:ef:e3:84:0a:
                    94:d7:47:69:84:fb:07:b5:40:41:93:8c:f2:c0:76:
                    e6:22:06:ad:25:81:e5:c4:fc:ab:6a:ea:0a:c2:63:
                    c4:19:5f:d4:53:c5:00:54:e0:6c:9f:71:86:f1:18:
                    37:4c:49:45:33:8d:d5:7b:fc:f5:69:2d:31:2c:e7:
                    7d:18:90:30:8a:5d:35:c2:b9:4d:e6:54:35:1b:ad:
                    d5:a1:c6:4d:29:bd:fb:68:55:f5:96:80:c3:cc:fa:
                    65:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F0:A3:D3:BA:C4:9A:14:88:47:63:D9:37:D3:CA:19:20:95:3B:15
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/ePCj07rEmhSIR2PZN9PKGSCVOxU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328503

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.67.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         84:1c:20:60:29:6e:33:0e:e5:48:59:d4:93:c2:66:9e:ee:ad:
         ba:2e:4c:f2:5d:ff:0b:0d:6f:52:68:ce:16:5f:78:85:56:a4:
         ac:89:f3:93:b9:aa:4b:87:7a:ff:d6:82:1f:75:f0:d1:08:ec:
         2c:24:7a:43:98:c7:5a:9f:f3:61:fd:b1:c9:c8:eb:c6:3a:14:
         ed:8a:50:4b:d5:5d:d7:eb:8f:1e:54:b7:8a:ff:22:6e:87:ec:
         55:2e:d4:19:e2:c6:c0:8c:2f:78:53:6d:92:a3:82:4d:b7:55:
         5d:40:c7:aa:5c:0d:c9:14:98:74:89:44:11:0c:de:d1:6d:12:
         6a:b8:b6:60:4e:8b:6c:68:3e:2b:cf:a8:45:27:0d:fe:e7:ac:
         81:c5:0c:c6:5c:6b:23:37:df:78:ff:62:7c:7d:11:49:f2:6a:
         1e:53:09:0c:b4:76:f3:9f:c7:3a:0c:72:bb:a9:52:20:29:22:
         4c:f8:b5:a7:97:45:58:51:d2:1e:3a:d6:6e:ff:0a:62:48:e3:
         11:18:cb:bf:06:41:59:65:56:db:c8:a1:fa:ba:a7:47:a8:12:
         df:bc:21:3c:4d:5a:d0:d6:bb:6a:ca:85:63:97:36:db:6e:b1:
         17:4f:0b:45:9d:ef:5d:9d:eb:a6:94:fc:60:e5:93:19:5a:fc:
         20:64:2f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----