Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/poVzBBtD85x4jvNbdksxjIhJyf4.cer
File:                     poVzBBtD85x4jvNbdksxjIhJyf4.cer (raw, json)
Hash identifier:          krP4mnIYKe0LSbtoAQSusxa6/R56kGsNIQnDMYT/tgE=
Subject key identifier:   A6:85:73:04:1B:43:F3:9C:78:8E:F3:5B:76:4B:31:8C:88:49:C9:FE
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       23E4
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:59:02 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328218
                          IP: 2c0f:f148::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9188 (0x23e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:59:02 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3632159AF/serialNumber=A68573041B43F39C788EF35B764B318C8849C9FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ab:bb:63:3b:34:83:33:b0:56:e9:30:df:3a:
                    20:dc:8a:e5:31:a9:8c:f5:57:67:a1:70:66:02:d0:
                    74:99:7e:b6:e0:d8:35:3a:17:6d:9d:92:eb:d3:fe:
                    ec:0c:76:dc:20:a3:1e:a3:34:7f:f3:6e:16:5f:5f:
                    65:dc:34:07:36:c0:33:1f:a7:dc:01:55:28:31:6c:
                    3e:11:e0:bf:1f:b9:17:ba:a9:95:5c:21:24:6a:cf:
                    a9:bb:71:00:df:f7:13:c9:64:b4:8b:8c:1f:0a:23:
                    a3:54:2c:35:1a:79:03:68:92:47:f0:63:fe:85:d9:
                    4e:c0:b9:17:14:fa:bb:9a:4a:95:8e:87:34:08:15:
                    94:21:53:d1:5e:6d:92:65:68:75:1c:2a:1f:a4:c6:
                    8c:07:40:d9:f1:a9:73:98:9f:0d:2c:54:3b:67:33:
                    b0:12:0b:36:84:d8:f2:f5:dc:fe:9e:28:d5:22:a3:
                    8b:10:b6:db:9d:6b:7d:d5:c5:19:e1:d5:92:22:9b:
                    dd:24:0f:64:3a:15:ff:77:7f:92:e4:6c:a3:97:42:
                    39:09:d8:e3:d9:66:4f:66:24:9d:5c:8e:84:aa:22:
                    67:f5:ec:b9:55:f9:39:b2:c1:6a:72:1f:97:d4:80:
                    67:fd:82:9b:a4:84:93:c7:fc:65:2a:d1:87:5d:39:
                    35:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:85:73:04:1B:43:F3:9C:78:8E:F3:5B:76:4B:31:8C:88:49:C9:FE
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328218

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f148::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:aa:50:e6:c3:9c:19:b8:a6:5a:37:7c:1d:14:77:75:dd:a1:
         fc:59:bd:24:6d:d2:d2:48:f4:90:79:17:f5:57:52:ec:4b:c7:
         b4:57:39:aa:1a:d0:58:e5:11:90:9c:bb:2f:bd:98:6a:5e:cb:
         fb:f1:2e:b3:82:79:3c:67:9a:3c:cf:ee:1c:12:80:a3:93:58:
         64:5e:57:b7:bb:6a:fb:c4:85:d8:b6:cb:27:39:be:11:33:50:
         4b:f5:32:b0:50:a3:88:c4:c6:93:d3:bd:1c:9f:31:01:f0:c2:
         51:aa:ba:ac:ea:76:c6:a1:fd:1c:6a:30:7f:a0:cb:7e:eb:cd:
         0f:65:bf:b9:a3:72:11:7f:5c:69:e3:a2:41:a8:c1:c6:11:f7:
         1a:64:60:e6:99:14:c1:1b:08:d1:58:45:3b:8c:41:f0:16:c2:
         47:c1:5b:fa:8b:9a:69:a1:01:dd:0e:ec:a4:2a:fb:e1:aa:f9:
         57:e8:68:8f:3b:7f:57:5a:d0:c6:c2:78:7c:70:54:6f:d1:e3:
         62:a3:58:41:58:cd:32:6b:99:77:c3:5b:12:40:fe:4c:33:1a:
         0c:32:07:80:34:74:da:e2:7e:d6:a4:84:ce:63:fc:15:cf:d2:
         47:5d:3b:79:a4:f7:42:47:90:96:ba:bd:ea:4c:42:0a:21:60:
         1e:0f:92:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----