Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/vHR1D-UFgvG9gwTH5tPLbHU1KTU.cer
File:                     vHR1D-UFgvG9gwTH5tPLbHU1KTU.cer (raw, json)
Hash identifier:          iFr5OgV7uS840DpAtPQA+9jM7duBAbXjzTxb7b+FGug=
Subject key identifier:   BC:74:75:0F:E5:05:82:F1:BD:83:04:C7:E6:D3:CB:6C:75:35:29:35
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       246E
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/vHR1D-UFgvG9gwTH5tPLbHU1KTU.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:34:19 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 327700
                          IP: 41.94.0.0/16
                          IP: 2c0f:f140::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 05:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9326 (0x246e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:34:19 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F364A64DAF/serialNumber=BC74750FE50582F1BD8304C7E6D3CB6C75352935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:72:60:fc:d5:2c:a6:af:42:73:f4:5e:c6:06:
                    9a:d8:ea:74:68:5b:38:3f:ae:48:1c:69:df:19:64:
                    43:b6:6a:ae:62:62:fc:e4:c3:53:13:5d:33:26:3b:
                    2b:10:73:e3:b4:0a:bd:1a:39:50:56:0e:5c:b4:b8:
                    f1:7e:00:96:0f:da:a0:ce:55:6d:f4:94:3f:45:08:
                    34:a3:5e:53:7c:fe:bd:35:9d:d1:3b:2a:2b:1e:26:
                    e0:8e:d4:f0:fb:24:b5:3e:7c:64:b6:47:f7:25:09:
                    92:16:56:a3:cb:a7:16:22:88:70:13:97:0d:b7:d6:
                    12:02:1a:51:f5:42:82:5a:1a:b8:6b:3e:e1:09:c0:
                    10:5c:f8:be:61:a6:15:b8:c5:7b:04:a7:ca:1a:38:
                    00:3a:1f:a5:a8:c3:77:c4:11:e6:bb:a6:68:2e:b8:
                    a9:55:09:c6:be:47:60:f6:bb:6c:dd:4f:e5:f2:10:
                    22:0f:e9:34:72:3a:d5:84:b4:b6:21:f5:06:b3:33:
                    1c:67:6a:d2:b2:6f:c3:e6:74:3f:2e:5e:94:63:70:
                    1c:1b:6e:6b:fe:a2:b1:6a:53:04:51:18:84:1c:2e:
                    ce:1a:ba:37:eb:41:c0:e5:d8:fd:f2:60:a9:37:79:
                    30:a2:32:8f:57:48:ea:47:fa:e8:af:08:d7:a0:33:
                    0a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:74:75:0F:E5:05:82:F1:BD:83:04:C7:E6:D3:CB:6C:75:35:29:35
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/vHR1D-UFgvG9gwTH5tPLbHU1KTU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327700

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.94.0.0/16
                IPv6:
                  2c0f:f140::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:39:e0:c6:4f:8c:26:d2:15:a4:7a:6c:29:47:cc:ff:13:8e:
         c6:21:44:36:ed:8b:23:9a:7b:42:f8:10:91:7b:3b:d2:ab:04:
         21:44:4d:a6:8f:86:18:1f:1f:f5:1d:9b:58:88:c0:aa:fc:e3:
         96:69:d3:3b:c4:bd:2b:bb:58:7f:cb:db:85:7f:78:2f:a7:c7:
         40:3e:25:6c:1a:5e:fd:16:bf:19:db:a9:c6:1c:4c:b0:38:29:
         60:e2:43:53:0b:b9:10:c4:5a:79:20:51:24:a3:8e:ee:1c:f7:
         96:12:1d:af:bf:2f:f0:14:4a:58:bb:14:e8:00:8b:49:d6:93:
         32:7e:da:46:a9:42:d7:f6:fd:7e:15:49:f2:9d:88:08:06:c8:
         e0:aa:31:d2:9f:77:f6:cc:f7:5e:0e:3a:f6:a7:a9:53:1b:4d:
         35:3a:1d:91:bc:17:01:a9:2d:91:2b:0d:86:50:e2:27:af:6a:
         fc:3a:43:db:df:a3:3d:7d:91:10:ea:02:3b:82:75:e2:ca:d0:
         56:50:f7:12:0e:ee:56:a1:19:12:8e:33:47:eb:3c:bd:f5:ab:
         87:86:ae:96:64:1d:de:cb:d4:65:91:8e:5c:7e:9a:69:4e:72:
         43:7e:5d:27:7a:23:35:b4:f5:84:b3:15:4d:14:39:ee:be:b7:
         7a:01:5e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----