Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/jBUV8AcSOqM-zM9-1c_7FaxzBI4.cer
File:                     jBUV8AcSOqM-zM9-1c_7FaxzBI4.cer (raw, json)
Hash identifier:          Q57Esku1Tf5rwD2/9LB0WneXodP/vLisp2P+SUsIuYg=
Subject key identifier:   8C:15:15:F0:07:12:3A:A3:3E:CC:CF:7E:D5:CF:FB:15:AC:73:04:8E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       246A
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/jBUV8AcSOqM-zM9-1c_7FaxzBI4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:32:55 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 327700
                          IP: 41.94.0.0/16
                          IP: 2c0f:f140::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9322 (0x246a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:32:55 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F364A64DAF/serialNumber=8C1515F007123AA33ECCCF7ED5CFFB15AC73048E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:da:da:8e:c9:fb:bf:4a:44:0d:21:e5:95:78:
                    54:ff:3c:52:7e:c1:79:7f:73:a5:80:d1:e9:4b:bb:
                    11:89:9f:c9:1a:89:84:af:18:d1:c8:6f:f0:8f:6d:
                    94:6a:2c:c4:4e:2c:61:14:24:83:a2:13:65:6f:f3:
                    25:35:9f:79:0e:e3:34:bc:98:02:c1:1e:e5:91:6b:
                    01:34:d4:fa:3e:16:6a:ae:c3:75:87:cd:22:ca:58:
                    d7:d8:72:26:54:8f:e5:80:6e:ba:04:c9:00:8b:f2:
                    b4:4e:fd:e0:5b:ce:eb:42:14:ff:4a:99:51:43:62:
                    17:75:b0:ec:07:09:35:32:ae:48:00:41:20:76:fc:
                    fe:86:7b:4b:ac:d1:65:b5:2c:2d:b6:01:71:9b:5d:
                    2e:97:f4:f9:d2:04:5c:f9:ab:25:3c:87:35:d0:69:
                    36:91:ff:5b:e9:42:5a:68:62:52:0c:f8:5f:b4:22:
                    81:8d:94:97:b1:c4:ea:40:6b:05:da:96:d8:5c:51:
                    75:73:84:3c:52:43:66:45:74:8a:c3:0e:64:d4:96:
                    28:0b:2c:b6:9d:d1:cb:a6:b1:65:f4:bd:52:55:df:
                    16:5e:b6:8d:15:ea:91:25:18:43:73:d7:50:bc:36:
                    45:cb:26:6a:64:8e:fa:b5:86:3f:59:9c:9c:b3:8f:
                    a2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:15:15:F0:07:12:3A:A3:3E:CC:CF:7E:D5:CF:FB:15:AC:73:04:8E
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/jBUV8AcSOqM-zM9-1c_7FaxzBI4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327700

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.94.0.0/16
                IPv6:
                  2c0f:f140::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:3e:f9:48:77:35:91:ec:8b:ef:14:92:5e:89:9b:9b:bd:a8:
         6f:40:c6:64:2a:8e:2a:fa:b2:0b:0f:d4:5c:ee:52:4d:2d:df:
         79:fb:c2:6f:e5:a3:20:00:cf:33:40:f7:29:d5:3a:5e:09:bd:
         53:b8:89:7b:4e:e8:12:8c:89:3e:20:54:03:8b:4e:61:36:8f:
         e4:17:4b:86:c5:ff:9f:19:a0:a8:3a:af:29:94:7e:e5:a5:16:
         e3:21:79:12:81:25:f7:c1:34:6b:4a:5e:ba:ee:27:99:60:66:
         3d:da:c4:85:ea:07:f3:e7:36:73:b2:d7:6e:46:0f:4a:1c:a1:
         6b:de:df:2c:17:3a:00:dd:4e:50:43:80:f6:9e:40:fd:4c:2c:
         1c:9e:80:b1:79:ed:92:0b:c0:8c:3e:bd:08:1c:48:a6:91:b1:
         5a:69:47:83:a2:ee:2d:8d:69:99:6d:33:17:49:34:60:c7:bf:
         c5:b2:f0:9b:cf:49:20:33:8c:23:c8:4f:6d:23:91:65:d0:f4:
         fc:7f:02:d7:ad:d8:26:3e:6b:30:ee:5d:d2:f6:56:03:56:3b:
         a9:3d:74:cf:5d:41:5a:19:cf:e6:65:03:04:b7:a1:db:0c:46:
         ad:52:22:4c:0e:c2:ff:e5:bd:09:bc:9e:ef:45:48:84:3a:5b:
         f2:94:2a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----