Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/pZcz3KUuEYvmm3dYljNX3ajFFCg.cer
File:                     pZcz3KUuEYvmm3dYljNX3ajFFCg.cer (raw, json)
Hash identifier:          6VECIqh3Cq0iJ7eJrh4r+XgyQNYmUSVllrwOV68Lo+Q=
Subject key identifier:   A5:97:33:DC:A5:2E:11:8B:E6:9B:77:58:96:33:57:DD:A8:C5:14:28
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2729
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/pZcz3KUuEYvmm3dYljNX3ajFFCg.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:37:54 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 16800

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10025 (0x2729)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:37:54 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36AC63AAF/serialNumber=A59733DCA52E118BE69B7758963357DDA8C51428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:55:f4:c8:ae:1f:2d:43:87:b3:5d:10:91:c9:
                    16:28:93:ab:9b:99:12:fa:f0:87:5f:e4:1a:79:7f:
                    c2:1d:69:70:68:06:9d:60:9a:a8:a3:44:32:aa:0f:
                    df:84:8c:d0:ca:43:a1:d9:6b:46:68:f6:72:fd:4c:
                    4e:a6:ae:41:ad:eb:c8:5a:09:65:06:0f:cf:8e:64:
                    94:6e:12:87:db:c9:a7:4c:e8:c0:05:a1:e1:38:cd:
                    d7:70:47:27:7d:52:c2:48:5e:12:82:2e:4f:2d:b3:
                    0e:47:a5:34:ba:52:0e:a2:69:21:9d:08:64:6a:0f:
                    68:38:48:4e:21:ad:03:c3:72:b9:07:88:93:91:80:
                    6c:0e:20:1c:c8:84:19:15:ec:6d:d0:a7:6e:36:e4:
                    df:36:f8:2e:0e:08:c4:90:73:6f:6a:a5:12:29:65:
                    1d:71:ec:ac:37:18:ef:ad:d8:7f:27:79:75:38:fd:
                    f0:95:49:a9:9a:c8:96:1c:e5:1f:b1:58:ff:f6:7c:
                    4f:98:a3:fd:06:b6:37:72:42:e8:6e:a0:3c:40:e7:
                    a8:2f:51:84:eb:6e:91:a6:e3:a4:e8:c6:4c:ca:03:
                    37:08:45:15:1a:27:d5:76:d4:a9:29:0f:63:41:1c:
                    54:7f:1e:35:df:47:b7:88:bf:04:1a:03:31:00:70:
                    89:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:97:33:DC:A5:2E:11:8B:E6:9B:77:58:96:33:57:DD:A8:C5:14:28
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/pZcz3KUuEYvmm3dYljNX3ajFFCg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16800

    Signature Algorithm: sha256WithRSAEncryption
         21:75:a4:df:57:12:a6:3e:20:39:33:cc:22:26:ba:91:34:e4:
         e1:5f:e9:df:26:bd:f8:db:db:3e:f0:77:86:5c:3a:55:9a:93:
         61:59:d4:0a:15:7b:19:f7:3a:8c:b0:6e:fc:42:68:3d:91:81:
         47:3c:a1:19:fd:7b:20:63:7b:9e:e6:a9:e8:e7:db:e3:00:b0:
         be:77:8e:58:65:fc:3b:6a:58:72:60:f4:40:6d:18:b1:fe:18:
         51:a4:8d:41:1b:68:3f:a1:3b:11:73:1f:6f:bf:6e:dd:41:0c:
         f7:5f:d4:e8:e6:a6:05:42:29:88:de:b0:ec:f3:64:32:fb:00:
         88:99:e4:af:c5:3d:36:96:1d:c5:31:1c:9b:36:f6:95:08:53:
         a9:1f:4d:1a:53:ee:2c:03:9a:55:ea:78:7a:5b:fe:c0:f6:2b:
         88:5f:71:7f:79:ff:26:e7:d5:6b:e8:e7:c2:53:9b:49:f6:b0:
         da:6f:f8:07:d0:7a:e5:82:3b:6f:9a:09:82:df:84:f7:2d:00:
         75:f7:48:26:da:33:79:e4:6e:84:4a:f5:20:df:49:4f:bb:d2:
         6f:67:4c:a1:7b:9b:e6:6b:e6:69:f0:ed:44:56:17:d5:32:fb:
         fc:21:15:a3:2e:9d:67:d9:9b:4d:60:d6:94:6b:9c:82:81:d7:
         bc:87:fe:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----