Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/muu9NJ1kyzF42IIOBBzyKn9pnok.cer
File:                     muu9NJ1kyzF42IIOBBzyKn9pnok.cer (raw, json)
Hash identifier:          D91G9hMfhkVYVqdDQlsiC6uIgtv3lZNwRHz0nFYIUt0=
Subject key identifier:   9A:EB:BD:34:9D:64:CB:31:78:D8:82:0E:04:1C:F2:2A:7F:69:9E:89
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       25AC
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F366EFDF/AC0DD8BEC3A811EB8F648912F8AEA228/muu9NJ1kyzF42IIOBBzyKn9pnok.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F366EFDF/AC0DD8BEC3A811EB8F648912F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:41:22 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 2001:43f8:1470::/48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9644 (0x25ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:41:22 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F366EFDFAF/serialNumber=9AEBBD349D64CB3178D8820E041CF22A7F699E89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d5:b4:88:33:cc:20:8a:e5:14:fe:e5:f9:73:
                    98:19:97:c8:ac:e5:c1:f5:41:b6:fb:0b:d4:b0:3f:
                    6b:9d:0b:8c:a5:8a:7f:9f:16:92:22:f0:17:61:6c:
                    88:0e:58:d1:c8:26:ea:18:1d:a2:bd:95:68:b2:eb:
                    47:af:82:78:d6:2d:7a:9a:5d:f9:50:3a:7e:d5:65:
                    e2:ae:33:16:5a:b3:c0:09:6d:a8:49:a0:87:f9:a9:
                    94:e2:09:ff:bf:6e:2d:32:79:b9:fd:e4:41:ac:f6:
                    14:e8:06:6f:80:58:ae:72:b9:29:ea:e4:b3:8f:6a:
                    dd:11:d6:0b:4d:a3:de:36:91:ed:fc:6e:c4:d3:94:
                    a8:27:7c:cc:78:83:ff:08:09:64:08:a8:08:48:d6:
                    7b:eb:d7:ab:5c:d3:13:c2:52:c6:dd:49:da:23:94:
                    ab:58:58:a9:43:e9:67:fb:da:5d:ef:4b:a8:45:38:
                    1b:3b:4c:a4:3c:73:7c:eb:5e:35:1c:f2:62:4b:d0:
                    0f:bb:ab:11:38:4b:59:71:77:97:5b:04:f5:af:3e:
                    76:ed:0f:a7:8d:68:d9:2f:24:23:e3:fa:b5:9b:20:
                    1c:c3:57:8b:66:ae:bb:ce:08:ba:aa:37:56:21:dc:
                    71:a9:36:3a:46:d5:b7:d0:bf:74:d9:c4:89:e0:77:
                    4a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EB:BD:34:9D:64:CB:31:78:D8:82:0E:04:1C:F2:2A:7F:69:9E:89
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366EFDF/AC0DD8BEC3A811EB8F648912F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366EFDF/AC0DD8BEC3A811EB8F648912F8AEA228/muu9NJ1kyzF42IIOBBzyKn9pnok.mft

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:1470::/48

    Signature Algorithm: sha256WithRSAEncryption
         c2:fc:26:54:8a:13:c0:4b:16:7d:d2:99:8c:d9:b9:27:f2:f2:
         ff:c8:7c:91:39:3c:3b:28:5f:2b:ed:e5:6f:c9:26:f3:b0:38:
         a1:bf:38:61:d0:55:d3:99:4e:c2:c7:fa:1e:30:34:77:a2:69:
         fb:7d:a2:ce:0f:f7:08:9a:9b:8a:ed:29:63:5e:22:5d:0e:fa:
         c0:5a:90:e2:12:5e:47:dd:91:d5:3d:c2:45:7f:8d:dc:ce:23:
         0e:6f:4e:76:0d:9d:25:f8:1e:7e:97:9c:f0:34:15:4e:eb:22:
         3a:0b:02:0f:b0:28:ca:8f:df:15:5c:d9:1c:58:d4:fe:28:6f:
         51:d4:4a:59:b5:c1:1c:22:4e:ac:d5:0c:07:5a:38:fe:7d:da:
         5c:b2:aa:3c:b3:ec:9a:0b:85:90:03:94:f5:0a:57:4e:3c:8d:
         b2:5b:84:2e:28:4d:2e:bf:35:8d:50:9c:bf:11:cd:25:21:13:
         ce:b1:f0:3e:bc:36:20:ed:2b:64:0c:71:9d:eb:a4:7a:6d:65:
         ea:83:3e:23:d3:dd:cc:b8:be:46:7e:f3:15:5f:f2:51:63:d8:
         90:d3:18:4b:91:2e:85:e4:e9:36:09:ae:bd:a2:a0:db:6f:1d:
         88:b7:ae:f9:79:ef:0c:de:4e:ed:78:53:eb:16:c5:22:82:87:
         f0:cd:52:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----