Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
File:                     gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer (raw, json)
Hash identifier:          hI4N3dTfF+fHQmZNHtR2R/H3ZxVGkIanOXZD2umGGaM=
Subject key identifier:   80:D4:35:BB:C7:70:94:E8:5B:7B:F3:08:25:80:D1:27:B9:10:77:9E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2958
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 19 Feb 2024 08:30:35 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328331
                          IP: 102.135.168.0/21
                          IP: 2c0f:eb78::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10584 (0x2958)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Feb 19 08:30:35 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3654AD1AF/serialNumber=80D435BBC77094E85B7BF3082580D127B910779E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:df:4c:81:2c:00:5c:04:05:d7:d0:19:e2:9e:
                    25:da:86:f3:8e:70:5f:f6:32:21:2d:2e:ef:ab:7a:
                    d1:97:2c:11:c1:3d:17:2e:8a:eb:83:38:de:29:78:
                    e3:2f:6c:da:fd:42:ff:8b:19:07:59:58:ca:30:90:
                    ec:d9:36:f0:6b:0a:01:92:24:e5:33:ef:9b:f7:d4:
                    99:b4:6e:44:ae:6d:d6:23:e6:31:d2:96:f9:c7:bc:
                    d2:00:b9:6b:e3:20:97:57:3c:35:0a:cd:f8:4a:81:
                    78:e2:ab:47:21:0d:83:da:b8:9f:cc:0e:ed:73:90:
                    ca:71:3b:5e:55:96:6a:66:34:c7:21:97:b9:e2:6c:
                    94:98:d8:ac:ef:97:77:f1:86:28:94:cf:e0:fd:06:
                    53:bf:13:61:e6:c2:32:b3:9f:23:25:12:19:7f:5c:
                    98:ad:d4:85:ef:6f:cc:ae:79:c3:61:6a:7a:75:a1:
                    6f:b7:b7:0b:34:30:ad:fb:8e:1a:5e:a1:ab:4d:1e:
                    d4:72:2c:10:e9:4f:ea:e8:bc:15:77:82:91:ea:39:
                    e1:08:b2:aa:dc:a9:2a:9c:1b:d9:42:ea:0b:44:9f:
                    a4:cf:69:a0:ad:b5:c3:f8:06:19:de:50:38:de:09:
                    5c:a9:19:9e:72:e9:65:74:81:75:37:3b:84:5b:a1:
                    ce:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D4:35:BB:C7:70:94:E8:5B:7B:F3:08:25:80:D1:27:B9:10:77:9E
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328331

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.168.0/21
                IPv6:
                  2c0f:eb78::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:f5:22:6d:46:35:43:7b:98:6f:01:d1:46:e8:cf:43:1d:ca:
         12:d9:58:70:3e:eb:6f:28:10:ac:4f:91:0b:36:e4:d2:89:90:
         5e:2a:0b:da:87:a7:76:9f:54:70:87:a1:a4:99:39:d1:3f:cb:
         db:d0:f5:a0:b6:b3:c8:de:1b:7d:6c:b4:17:1d:a0:ea:10:39:
         b6:54:c0:ca:ae:6c:f7:2b:4a:18:65:a1:3a:05:95:fc:e2:54:
         02:84:fc:eb:3e:6b:ff:8b:a2:8f:81:07:7b:ba:98:96:7f:36:
         69:b9:4d:bc:c3:33:4d:01:01:ff:6a:9b:a9:03:74:29:a9:24:
         70:c4:c7:fd:cc:f8:3f:bb:b5:f3:b0:e5:5c:41:bf:6d:c7:58:
         47:10:3d:d9:4c:d8:05:a7:71:7d:30:53:06:77:ab:f0:78:39:
         a8:67:9f:b6:4c:f1:55:ac:0e:45:d7:c7:58:3b:7f:9c:24:54:
         87:f8:46:ce:db:07:0e:44:87:9d:20:81:ee:68:91:b6:a1:d0:
         94:40:ea:57:77:2a:e4:ef:34:de:63:fc:3a:c3:ee:7b:db:ad:
         9d:c1:7a:6c:0c:81:60:2a:1d:84:24:a4:ee:10:e6:4e:f6:b5:
         b2:85:03:ce:33:3e:74:37:ed:02:cd:0e:94:d4:53:0d:d4:40:
         0a:95:b4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----