Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ucX75Sq6Jwk2_Vxfm1ShLgAwsy4.cer
File:                     ucX75Sq6Jwk2_Vxfm1ShLgAwsy4.cer (raw, json)
Hash identifier:          DwqCIvKwTJYKllgwmE1ntNS4y5V2Jgo9h7kauZgGIS8=
Subject key identifier:   B9:C5:FB:E5:2A:BA:27:09:36:FD:5C:5F:9B:54:A1:2E:00:30:B3:2E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       24A2
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/ucX75Sq6Jwk2_Vxfm1ShLgAwsy4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:46:05 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 327700
                          IP: 41.94.0.0/16
                          IP: 2c0f:f140::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 09 Jun 2024 11:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9378 (0x24a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:46:05 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F364A64DAF/serialNumber=B9C5FBE52ABA270936FD5C5F9B54A12E0030B32E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7e:b5:40:c9:16:0a:96:fb:fb:d7:21:8b:31:
                    2a:e3:8e:67:f3:28:b3:d1:2d:16:dc:21:f0:3e:2f:
                    53:c6:25:b9:b5:fd:f7:c9:ee:38:29:42:df:e0:86:
                    60:88:f2:50:72:2b:df:29:8f:00:2b:de:36:59:aa:
                    be:1d:02:51:0c:a5:78:f9:c9:a5:02:3e:f3:bc:b5:
                    55:cf:64:d4:39:49:fa:24:b6:c6:b1:37:21:c3:16:
                    11:b0:da:34:7c:96:2c:e4:8c:11:51:6d:30:1c:b0:
                    b0:fe:e9:fc:ca:3e:c6:1d:ff:02:0f:01:10:8d:6e:
                    a5:bf:35:4a:fd:e7:fc:25:1a:22:2c:1c:3e:92:58:
                    ae:e9:6b:ae:09:24:8b:c6:05:f8:00:43:60:71:7c:
                    6b:79:d2:b2:41:5f:95:22:e4:a0:52:de:6b:f3:36:
                    8e:83:95:53:96:e7:51:59:e8:60:ce:fa:04:d5:cc:
                    bc:f2:8c:51:b0:79:ed:c0:58:69:88:84:1c:93:49:
                    2e:59:41:1f:88:82:f5:5a:8d:f2:a2:b7:7a:c7:b0:
                    be:b3:80:bb:ab:a4:94:ba:a7:e2:96:c1:31:b1:48:
                    9b:a6:c5:2d:37:c9:11:e8:5e:a1:75:b4:2c:95:c1:
                    d3:d4:14:e5:5e:81:9b:dd:ec:38:d7:52:1e:34:0a:
                    76:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C5:FB:E5:2A:BA:27:09:36:FD:5C:5F:9B:54:A1:2E:00:30:B3:2E
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/ucX75Sq6Jwk2_Vxfm1ShLgAwsy4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327700

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.94.0.0/16
                IPv6:
                  2c0f:f140::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:61:9c:83:77:96:15:2e:96:97:45:cf:88:59:27:b8:43:4d:
         9f:09:25:b4:2f:70:4c:ea:23:96:fc:16:4e:f6:df:73:4b:67:
         97:87:c3:7c:72:bb:13:c0:be:47:7e:d8:23:32:04:8d:9b:30:
         cf:b5:d7:ea:10:f3:dc:fd:58:69:91:67:c9:8c:bd:50:d5:56:
         5b:19:1e:6b:d3:1d:fc:7e:87:9e:74:2d:67:ea:cf:5b:01:1a:
         e5:cb:32:57:36:cf:f4:3a:ab:39:1b:8a:4e:24:dc:d1:70:5a:
         58:7b:de:a4:04:eb:ad:c5:01:81:bc:c0:f6:90:31:eb:60:88:
         42:59:6e:16:ab:c8:20:3c:10:5f:07:52:fc:e3:3f:d3:57:6b:
         e0:20:51:d8:69:d5:91:b1:49:94:df:f2:1e:cc:d2:af:31:75:
         a8:ac:c3:e8:55:db:52:b4:0a:7a:00:38:3c:3a:b9:c7:32:64:
         1d:84:6c:ad:9e:be:f5:04:4b:1f:0a:36:ac:07:a3:ef:cb:af:
         22:5f:4a:b3:dd:f1:56:0e:2d:25:13:33:3c:29:6c:3d:59:23:
         e3:81:3e:3a:a9:90:5f:bd:88:5d:93:d3:b4:f5:78:ab:02:0c:
         fa:8f:ae:2a:4c:9b:ba:ce:06:eb:ac:f0:bb:85:a9:b3:ec:39:
         eb:50:ac:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----