Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.cer
File:                     fHr4YJtvvVa8wCRM0y1g_-hfnuQ.cer (raw, json)
Hash identifier:          e7p+i9ADsaBIUewYToZmCu9wtawzzt2oLmf2OL0HBNE=
Subject key identifier:   7C:7A:F8:60:9B:6F:BD:56:BC:C0:24:4C:D3:2D:60:FF:E8:5F:9E:E4
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       267D
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:11:24 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 102.223.64.0/22
                          IP: 2c0f:e870::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 05:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9853 (0x267d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:11:24 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3691DC2AF/serialNumber=7C7AF8609B6FBD56BCC0244CD32D60FFE85F9EE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ff:04:19:c9:36:a2:02:62:42:e5:c9:00:02:
                    76:c2:18:3e:de:bb:ca:69:8d:8b:7b:8d:e1:1b:7b:
                    c1:e0:af:00:52:10:05:5f:96:66:8a:11:72:6c:d6:
                    75:0f:d6:f1:3b:61:37:ba:bd:a6:3a:24:71:7e:c8:
                    60:a9:c3:b5:cd:69:ea:88:f7:16:c8:b1:bd:a4:70:
                    ee:e8:38:b5:75:df:9b:13:db:f8:14:5c:b3:16:f2:
                    29:3d:be:a6:96:e7:35:ef:dc:78:0a:d1:8a:5e:9f:
                    d5:64:78:fb:ad:4b:71:83:b9:ef:e3:5c:41:12:c7:
                    d1:13:f2:97:ba:73:c6:0e:88:3f:e3:e9:ca:ff:5a:
                    2b:00:91:2d:6e:09:12:fa:f2:c2:12:f0:f1:30:14:
                    19:97:41:97:ee:30:96:6f:d7:4a:eb:bd:26:e2:88:
                    0b:8d:73:12:d5:c5:c6:82:ae:4e:ba:ac:ed:22:d8:
                    ed:03:0e:61:db:2f:3b:a8:35:e1:bb:a6:3d:76:d0:
                    ba:26:92:f8:9f:e0:ba:98:b3:ab:68:aa:60:63:a9:
                    c8:ce:ef:88:56:75:d2:a0:29:ea:26:ff:2a:43:7a:
                    8c:7e:17:12:e3:73:97:43:d7:fe:e1:73:9c:bf:0d:
                    26:79:de:02:9c:40:ce:4d:9b:77:7b:19:a0:ea:e9:
                    a9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:7A:F8:60:9B:6F:BD:56:BC:C0:24:4C:D3:2D:60:FF:E8:5F:9E:E4
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.223.64.0/22
                IPv6:
                  2c0f:e870::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:1a:86:45:08:43:11:3c:e0:cc:3c:03:a3:98:a0:cd:b5:a1:
         65:47:4d:7a:bb:8b:82:4a:03:d4:6e:df:72:cc:b5:15:85:8c:
         23:a0:04:de:47:bb:af:df:8e:55:c0:83:19:56:d9:f7:97:4d:
         23:d9:dd:da:33:2f:fe:75:38:7a:ce:83:96:7d:72:39:95:49:
         90:f5:41:39:b0:9c:7d:65:a5:55:ea:80:14:f0:08:ed:f8:12:
         b5:7f:b7:c1:b2:91:ba:73:01:dc:e8:bb:18:fb:a9:00:8c:cd:
         eb:87:85:30:b1:76:57:a8:b5:06:27:1b:83:42:da:ed:d8:e5:
         ac:52:a4:fd:d6:9e:1e:0f:c1:57:39:d2:a3:0e:8d:ae:fd:15:
         15:3a:0e:8b:d8:72:9c:99:b7:5c:0c:4c:a7:c4:d3:1a:a0:bc:
         f4:08:f7:05:0a:ff:ea:2e:aa:f7:56:58:bd:b5:a1:ad:70:e6:
         99:c6:ad:f3:02:d9:2f:60:01:87:de:a3:4b:64:2b:dc:6c:b7:
         a3:2e:1a:32:eb:80:b6:c3:2a:09:e9:bd:82:73:b6:60:a0:83:
         96:be:aa:f6:06:20:24:4e:5e:95:71:ee:93:8c:8e:11:cf:a7:
         46:2f:bd:97:ca:49:49:25:50:40:c1:3c:35:76:8c:82:30:83:
         b9:30:f8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----