Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/n1zGQpNoeQW6tHWMmF3HaD8QWv8.cer
File:                     n1zGQpNoeQW6tHWMmF3HaD8QWv8.cer (raw, json)
Hash identifier:          ZTpE/ML4FVnwcd9XMQEWVFSpGMhqXfnMxROetH/qH00=
Subject key identifier:   9F:5C:C6:42:93:68:79:05:BA:B4:75:8C:98:5D:C7:68:3F:10:5A:FF
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       27F0
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/n1zGQpNoeQW6tHWMmF3HaD8QWv8.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:08:32 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 329029
                          IP: 102.215.32.0/22
                          IP: 2c0f:6c80::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Apr 2024 00:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10224 (0x27f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:08:32 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36D8C86AF/serialNumber=9F5CC64293687905BAB4758C985DC7683F105AFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:01:f1:54:71:cb:27:ed:70:db:b5:d7:16:fb:
                    28:87:7c:03:1f:0e:82:e3:71:64:15:c0:ed:36:b7:
                    1e:ec:4c:17:31:41:92:7b:b2:33:6c:13:d7:41:dd:
                    64:89:ea:cf:61:c9:c8:47:ea:e3:a5:6e:12:ca:2d:
                    22:2c:ab:18:4a:2e:a6:a0:ec:c0:27:50:a7:71:de:
                    a1:3b:2c:03:df:c9:a7:9b:b8:9a:04:ce:a6:0d:81:
                    1a:cb:61:36:e0:f2:1d:1a:da:e5:6b:ff:28:91:1f:
                    14:d6:dd:9f:3d:9c:30:df:7a:14:34:1f:5a:44:d8:
                    e6:51:b0:d4:1f:da:7c:4b:a8:48:44:e7:e2:5d:be:
                    5d:04:15:58:7f:82:b9:13:fa:a1:bd:c7:b2:02:27:
                    1f:ea:c0:cf:c4:06:05:66:bd:05:18:9e:d0:cb:d8:
                    da:ac:be:94:e6:78:63:67:18:d9:d5:46:ad:26:bd:
                    9c:1b:83:12:ab:08:50:80:6b:13:e8:d7:7a:50:29:
                    70:36:bd:3b:46:55:c3:ba:27:70:aa:7a:c3:f4:c4:
                    22:9c:0f:c7:71:80:2e:fe:2d:23:b9:f8:7b:8d:65:
                    56:c7:17:76:23:06:97:76:c2:4d:83:9d:f8:a8:a8:
                    98:ae:2a:2c:26:94:d4:b4:8f:61:eb:cd:db:89:6e:
                    2a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5C:C6:42:93:68:79:05:BA:B4:75:8C:98:5D:C7:68:3F:10:5A:FF
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/n1zGQpNoeQW6tHWMmF3HaD8QWv8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329029

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.215.32.0/22
                IPv6:
                  2c0f:6c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:3e:ec:91:12:b8:59:f4:ce:98:89:5b:24:5f:ad:60:09:80:
         22:92:fe:57:97:d7:7a:9b:9d:0e:30:f7:48:e4:ff:26:8d:35:
         87:cd:d6:94:8e:48:cd:96:8a:9c:23:5e:f9:c1:98:d6:86:48:
         68:13:7c:0b:9f:2d:bc:6c:b3:7e:ed:4c:ed:73:95:89:1f:09:
         fa:2a:bb:2d:16:a9:1a:ad:64:47:4b:97:99:f7:f6:9a:c0:cb:
         ae:ee:54:4a:84:c9:3d:88:14:de:c8:6d:a6:69:89:db:3f:90:
         fb:fe:01:7d:27:ac:f6:a5:26:29:e3:66:e7:c5:b2:0d:76:fc:
         84:da:5b:f5:5d:4c:3b:2f:32:49:12:9b:a4:44:9d:4c:dc:81:
         45:b0:35:a2:37:e2:05:41:a6:3e:ca:aa:5b:4f:1b:99:27:ad:
         2e:00:dd:d2:d2:4f:db:c3:7e:02:38:89:05:63:f1:60:4e:75:
         5e:23:bc:2a:82:33:fd:9f:4e:b2:7b:1a:09:50:0e:ca:e6:25:
         ad:79:a4:f2:70:ad:33:a5:74:b3:9d:c8:70:17:cd:11:ee:8f:
         c2:39:dd:73:ff:2e:f1:6d:7b:85:24:05:da:33:60:0b:da:1b:
         40:dd:c7:69:4a:7f:bb:00:d8:44:0f:e4:b5:42:78:82:3f:5b:
         68:b6:34:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----