Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/w5oyQHtL2W4oN2DHFVcm5tDXGZw.cer
File:                     w5oyQHtL2W4oN2DHFVcm5tDXGZw.cer (raw, json)
Hash identifier:          XfFucMpYbassvfWBf2h4z8SppUHVtUD+DD1rQMzElWo=
Subject key identifier:   C3:9A:32:40:7B:4B:D9:6E:28:37:60:C7:15:57:26:E6:D0:D7:19:9C
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2662
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36897F5/A52F56649BB011EBA8A3CC35F8AEA228/w5oyQHtL2W4oN2DHFVcm5tDXGZw.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36897F5/A52F56649BB011EBA8A3CC35F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:07:24 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328133
                          IP: 196.251.152.0/22
                          IP: 2c0f:f018::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Apr 2024 07:20:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9826 (0x2662)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:07:24 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36897F5AF/serialNumber=C39A32407B4BD96E283760C7155726E6D0D7199C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:69:a6:ee:d5:ef:16:cb:a0:8b:ee:ce:9f:50:
                    41:d6:5e:73:01:e4:2b:1a:4f:1d:58:49:69:77:05:
                    b6:76:bb:6e:06:2c:9f:3e:d9:a8:49:5d:06:7d:58:
                    c7:82:0d:ab:87:b0:44:f6:5a:4c:46:81:17:fc:85:
                    c7:13:b7:79:63:5f:b1:5e:38:33:ae:fe:25:76:3a:
                    f5:2e:d2:f2:3a:b6:a0:e6:33:6e:0c:e7:77:69:40:
                    df:66:22:90:53:da:d7:8e:3f:45:ed:92:6a:d8:b1:
                    22:ff:70:d7:25:08:06:b2:42:67:e8:f0:03:fa:ab:
                    9f:d9:52:99:ea:3c:79:9c:96:d1:9b:ab:11:19:b0:
                    1e:c6:99:cb:2b:ab:ad:92:52:0c:a9:aa:eb:3b:58:
                    72:24:4a:94:15:d2:8d:2d:1a:de:c4:e7:fb:7d:fe:
                    22:03:66:3b:86:1f:49:dd:75:ae:f3:f5:56:af:a3:
                    c7:d1:8d:91:5d:22:68:58:8d:c4:1d:bd:02:b8:1b:
                    53:0c:ad:b6:55:20:35:ce:74:5e:2a:6c:31:bd:dc:
                    b7:b2:fe:f5:fd:0d:8b:86:c5:99:66:32:5e:f1:7d:
                    0c:fa:f1:cc:48:67:8e:18:e3:51:ab:e6:bc:eb:66:
                    c7:d2:64:da:05:cc:e9:6b:a5:c5:ff:93:63:f5:84:
                    47:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9A:32:40:7B:4B:D9:6E:28:37:60:C7:15:57:26:E6:D0:D7:19:9C
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36897F5/A52F56649BB011EBA8A3CC35F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36897F5/A52F56649BB011EBA8A3CC35F8AEA228/w5oyQHtL2W4oN2DHFVcm5tDXGZw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328133

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.152.0/22
                IPv6:
                  2c0f:f018::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:17:61:18:63:06:8b:03:e7:6e:44:98:4d:9a:b0:3d:a4:05:
         1a:e6:be:8e:e4:53:6f:65:6d:b6:93:0b:7a:07:fa:d0:af:d4:
         63:bc:56:e9:7c:ed:1b:11:4b:c2:9e:c1:ea:6d:5e:2d:ee:bd:
         48:74:52:a5:e8:14:86:bf:86:53:3b:1a:67:63:3f:6e:07:eb:
         c8:6c:94:d3:5b:d6:00:b7:bf:f6:e4:a2:63:96:e6:ee:78:9e:
         12:1f:03:c2:7d:cf:bf:59:5e:6e:10:e4:38:34:8f:00:5c:1a:
         fd:9d:cb:7f:c4:54:f3:8c:7f:36:53:f2:15:37:58:32:9e:81:
         70:c4:0f:bb:dd:c4:b2:70:6d:89:e6:66:0d:8a:fe:f0:4e:e8:
         b7:8b:c5:de:03:1f:c4:c9:54:6e:dd:d9:48:4b:f0:1a:5b:1b:
         9c:8d:de:90:54:b4:63:ae:9e:09:c7:07:76:19:d2:66:68:a3:
         6b:ee:62:b9:9a:48:39:f7:0e:7c:4c:b1:56:87:d4:0d:d4:12:
         a0:0f:b3:3e:e0:80:bd:3d:7e:3b:28:a3:ff:c7:44:b9:7d:62:
         05:c6:c5:28:b5:22:28:5b:f7:ad:4c:f1:78:96:19:49:8c:23:
         a2:1d:7c:a9:49:de:44:b8:8c:18:31:70:a3:12:a1:7c:1a:45:
         55:42:99:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----