Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
File:                     ui_9XON8AcbtlPuVw1jXCimNyXQ.cer (raw, json)
Hash identifier:          TtV0cVU8eWYYZYGpwK/8ZtyTkjQ5L5l10owjgIik62c=
Subject key identifier:   BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2B5D
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Fri 30 Aug 2024 00:02:26 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 329371
                          IP: 102.209.144.0/22
                          IP: 2c0f:ac0::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11101 (0x2b5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Aug 30 00:02:26 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3679680AF/serialNumber=BA2FFD5CE37C01C6ED94FB95C358D70A298DC974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2f:7b:00:8d:de:40:b7:f9:a6:6c:8f:f8:3e:
                    84:e4:88:63:10:84:43:57:b7:8d:3f:da:24:33:71:
                    66:dd:04:1c:84:ac:5a:8c:fa:d0:9f:23:97:7c:0e:
                    bc:d6:28:c0:1b:5a:e8:64:1c:e4:a1:49:db:bd:63:
                    2d:2a:ee:88:3a:00:5c:f9:f1:07:77:f1:59:38:7b:
                    f4:8e:f9:fd:f2:b3:51:b0:70:50:98:05:9e:90:61:
                    8f:0f:62:74:d8:5f:44:07:55:ee:49:b4:92:02:dc:
                    9c:b2:9b:27:c5:09:29:3e:17:bb:60:45:df:6f:99:
                    e1:fd:3c:70:ba:6b:e0:5f:40:ae:6d:fc:b8:52:ca:
                    85:04:38:06:fa:b2:9d:ec:5f:7c:e5:d6:85:75:69:
                    94:2b:ec:46:a5:1e:2c:f3:e2:3a:f2:5f:1c:6f:97:
                    b4:ae:77:4f:fe:c9:86:74:38:8c:e3:02:ce:fa:1d:
                    7f:66:77:d5:4c:43:a0:7f:52:98:8d:51:a2:17:08:
                    62:66:45:7b:b4:8c:2c:64:12:07:30:81:35:d9:51:
                    18:a4:51:37:b4:10:c2:3f:e0:57:58:da:de:fc:e3:
                    23:f3:7e:31:60:92:44:39:f5:4e:8a:78:4a:4d:09:
                    9a:29:00:ea:82:d1:58:97:b0:9d:83:73:58:e8:8e:
                    a3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329371

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.209.144.0/22
                IPv6:
                  2c0f:ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:4b:87:93:0d:f5:07:a2:b2:e0:a9:f7:fa:39:96:68:92:3c:
         00:d2:7c:69:cb:34:10:6b:1b:1e:65:12:6e:66:18:50:07:30:
         c2:df:1c:69:e8:91:4e:7b:32:03:5d:22:d9:c7:9f:2a:05:e0:
         ef:6a:d9:40:0e:c6:54:ab:24:54:83:74:fb:d4:20:97:83:fc:
         45:09:97:eb:4f:2a:86:48:6e:d2:52:1b:b4:ba:23:60:40:8b:
         7b:30:56:ab:28:ec:50:c7:1b:14:d4:10:f7:a8:e6:20:3a:54:
         c8:75:e1:84:38:91:49:61:99:d1:37:35:7f:cb:29:c3:b4:80:
         62:ae:5e:b9:02:48:da:83:95:58:b7:27:d6:f4:c5:4a:a9:59:
         71:c6:3a:e4:08:a0:65:a2:2a:55:8d:1c:61:52:f3:cc:74:65:
         31:39:b8:4e:d5:2e:02:fb:a4:ef:9f:f0:0c:43:65:9d:41:23:
         a8:b3:6c:3d:c6:68:da:54:e0:6c:e6:74:a4:20:2c:2b:aa:1e:
         14:bb:c7:8c:42:db:e3:b0:c4:25:ca:f0:70:be:90:f4:7b:33:
         c4:f6:5e:b1:bf:e8:d7:4d:1f:db:26:83:58:aa:23:4f:e7:c8:
         96:78:2f:b6:4b:58:e7:4a:b6:2e:83:f0:28:91:da:97:4c:c1:
         7d:5f:8e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----