Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
File:                     og4gZ_DbeD3jcj4jFRfcfp_lutM.cer (raw, json)
Hash identifier:          gJJ8ml7ULyV/RHLILzyBH9ELUqkqgpFZ8syv2gg+ciI=
Subject key identifier:   A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2599
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:38:45 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37182
                          IP: 41.93.0.0/17
                          IP: 2c0f:f2e8::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9625 (0x2599)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:38:45 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:99:6e:c1:cd:f5:ad:c3:32:91:a6:f0:12:e4:
                    78:2c:5a:37:d6:78:43:9b:5f:08:8e:37:6a:57:33:
                    2b:93:6c:c3:44:dd:0e:d6:7c:07:f7:3a:3c:30:d8:
                    0a:dc:a4:30:d9:ba:d0:36:38:b2:24:34:4d:9c:a9:
                    0f:3d:d9:2a:a2:2c:1b:4f:77:74:82:f3:80:23:29:
                    2f:4a:a7:cc:1f:47:2f:29:2d:43:df:c0:6a:97:2a:
                    91:37:2d:37:d2:3c:dd:7a:77:b3:a0:6d:22:ad:cc:
                    e9:ee:eb:79:ee:7b:2c:bf:34:39:47:38:87:36:21:
                    67:90:48:e2:7a:21:c0:7d:42:18:f7:67:d6:02:27:
                    64:80:95:1a:24:30:56:61:a1:e5:b0:6e:cc:df:99:
                    ac:d6:01:f1:48:51:ee:29:b4:11:f4:b2:a7:80:e3:
                    93:f8:8e:67:ad:09:c6:74:59:a6:7d:73:98:04:f8:
                    e5:31:ce:f0:29:59:d0:00:51:7b:e1:0d:c0:b0:b4:
                    b0:e3:8f:f4:4a:7c:5e:98:56:13:dd:85:72:00:36:
                    01:d8:72:87:2a:9b:23:fe:4c:d0:c2:e2:b5:c1:b2:
                    71:91:a7:a2:25:dc:bf:1d:37:5b:ae:7f:26:04:b8:
                    52:e2:93:f7:42:b9:c0:32:48:b2:ca:6c:e5:47:d0:
                    a8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37182

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.0.0/17
                IPv6:
                  2c0f:f2e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:4d:87:4a:f0:87:ed:3f:4d:b7:b7:d2:67:ae:47:68:08:f0:
         1c:72:0d:f9:b1:c4:91:34:4e:3d:8f:1e:c1:12:c4:6d:60:37:
         bb:52:a9:3b:65:54:ef:26:3d:2d:8f:8f:55:e0:6d:3b:91:22:
         0d:c5:46:9f:df:e5:4f:28:b2:5a:b6:a5:6c:e4:94:e1:24:2e:
         55:96:b8:53:04:8f:c6:54:78:1a:0c:af:06:bd:70:00:8c:a0:
         69:c4:3a:61:13:cf:4c:9a:f1:5d:27:5d:dd:c9:55:0c:8e:be:
         18:17:bf:63:78:ac:06:6b:a0:94:c4:ec:11:57:48:bf:c2:d7:
         f6:f5:ec:18:eb:9b:dd:03:cd:34:26:3f:c0:19:8c:7a:bd:2a:
         db:7d:5c:2a:15:60:c3:c6:52:a5:ce:55:7f:3e:6b:7d:98:a2:
         63:9f:42:d7:f6:4a:11:e9:aa:f0:80:84:ad:ff:d5:ec:6e:1f:
         9a:e7:2a:7e:cd:e0:1e:d9:0f:32:01:7d:ba:9b:8b:2f:ad:63:
         5b:f7:39:75:a3:d7:06:0a:6e:8d:5a:30:25:eb:41:0a:b8:5f:
         34:c5:cb:20:95:3a:51:5e:35:26:5f:60:14:4d:c9:79:f2:5a:
         c4:8a:e6:3c:40:a3:2d:e5:b9:51:cc:23:51:e9:59:94:63:5a:
         5e:24:c1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----