Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/raqDyPrHZBJHp5Zon6Z89Tizvqw.cer
File:                     raqDyPrHZBJHp5Zon6Z89Tizvqw.cer (raw, json)
Hash identifier:          9CxQOKTRAA5tD1v2k2cpr3BcfD/NT36+ETjsgJzvb1o=
Subject key identifier:   AD:AA:83:C8:FA:C7:64:12:47:A7:96:68:9F:A6:7C:F5:38:B3:BE:AC
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       245D
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/raqDyPrHZBJHp5Zon6Z89Tizvqw.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:29:19 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 327700
                          IP: 41.94.0.0/16
                          IP: 2c0f:f140::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Apr 2024 00:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9309 (0x245d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:29:19 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F364A64DAF/serialNumber=ADAA83C8FAC7641247A796689FA67CF538B3BEAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:33:2e:84:f8:87:4c:8c:40:b1:18:e6:d5:48:
                    a1:aa:e6:48:90:3e:a3:28:70:ee:62:0d:62:53:ac:
                    bf:14:52:0e:e2:aa:90:5e:9d:3c:3e:22:23:da:51:
                    1d:3b:5b:3c:69:9d:d5:ab:9d:5b:02:6f:bd:23:f0:
                    e4:b2:c7:83:c2:92:55:72:10:10:af:e7:83:3a:4a:
                    03:ff:41:a4:6c:55:d3:81:c1:a7:e7:fc:10:e0:e8:
                    0e:52:2f:14:4c:bd:81:f2:4f:93:7b:4e:62:e4:1c:
                    4e:98:ac:b2:fd:3c:b9:1f:ef:c6:d1:df:a0:86:af:
                    a2:63:9d:b2:c8:37:f4:33:1e:3e:72:5d:e5:86:41:
                    a4:c3:9d:61:94:b0:d6:3d:14:46:92:08:77:2f:ca:
                    62:7f:cd:93:6b:0e:63:9d:74:32:04:34:eb:da:21:
                    02:db:15:f8:ac:33:9e:3d:42:70:af:04:01:2d:a2:
                    5a:b0:e8:95:55:a1:de:ad:8e:c9:b2:8d:1f:3c:8a:
                    d5:f9:38:cb:86:25:b7:fe:2e:01:6f:2c:c1:b9:f3:
                    ef:e5:3f:fb:c2:a9:94:c2:7a:9c:0a:9d:71:ad:cb:
                    69:63:59:8a:6f:d2:8e:94:ed:ae:da:77:56:f0:28:
                    f5:51:88:5f:19:19:9f:ba:d4:7b:33:1e:ee:6b:b8:
                    7c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AA:83:C8:FA:C7:64:12:47:A7:96:68:9F:A6:7C:F5:38:B3:BE:AC
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/raqDyPrHZBJHp5Zon6Z89Tizvqw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327700

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.94.0.0/16
                IPv6:
                  2c0f:f140::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:cd:1b:88:89:be:19:9e:4f:09:c9:ee:89:48:98:d4:33:da:
         ff:2d:43:f4:5a:13:79:9c:e9:a9:36:c9:94:2d:39:43:52:31:
         05:f3:7d:d3:25:37:93:0f:72:fb:b3:38:ed:ff:f5:2c:0f:32:
         21:34:12:44:53:22:fe:f5:0d:ef:17:94:d8:55:4b:ab:1f:5c:
         8f:36:44:db:a3:29:9c:47:33:58:e2:bd:21:23:a7:c5:03:82:
         8c:3a:c5:f9:eb:7f:7b:d0:19:a2:bc:6d:17:68:54:52:96:61:
         e7:dd:0c:a5:b2:0e:15:ec:2b:06:14:dd:ca:cd:f3:79:d5:e5:
         be:20:54:6c:78:32:b8:27:ac:53:06:de:f6:43:ac:bd:e1:a2:
         84:71:71:0f:f9:55:08:b3:14:8c:69:4d:9b:62:ba:21:a4:cf:
         a9:66:ca:dd:42:80:cd:53:87:62:de:15:3c:9b:ad:48:6e:c2:
         82:ab:9a:ba:62:3f:d7:90:c6:4d:fb:ad:52:f7:6a:f2:78:a1:
         10:d5:bf:28:16:c2:8b:26:69:93:7c:fa:23:ae:0e:6b:91:b6:
         d5:3d:f4:49:41:c6:f1:7c:cf:cd:a0:b0:81:c1:65:59:06:17:
         6b:75:04:5f:68:bd:60:dc:76:f8:14:e6:6c:52:15:f3:ab:52:
         fa:96:82:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----