Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/wHB55RdWBYiNm-R2f3wr_ZcU4Cc.cer
File:                     wHB55RdWBYiNm-R2f3wr_ZcU4Cc.cer (raw, json)
Hash identifier:          I7OWjB//UGNqeGx8NuZkqw0w3GYzJbwd+aqvsS1rC+Y=
Subject key identifier:   C0:70:79:E5:17:56:05:88:8D:9B:E4:76:7F:7C:2B:FD:97:14:E0:27
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       256B
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F366553A/859681AC703711E9878A505EF8AEA228/wHB55RdWBYiNm-R2f3wr_ZcU4Cc.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F366553A/859681AC703711E9878A505EF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:32:21 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328441
                          IP: 102.68.24.0/21
                          IP: 2c0f:ecf8::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Apr 2024 00:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9579 (0x256b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:32:21 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F366553AAF/serialNumber=C07079E5175605888D9BE4767F7C2BFD9714E027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9b:b8:db:d7:43:8d:4e:ff:c7:42:1f:84:f8:
                    36:34:28:61:63:b3:c1:54:b1:00:7f:00:a8:a4:83:
                    2c:5a:8c:19:c4:3f:27:33:69:a1:da:28:cf:47:db:
                    00:72:1a:14:34:b3:37:d4:be:48:34:32:c8:71:81:
                    91:0f:95:71:c3:b7:95:30:7b:92:6b:a1:4e:45:db:
                    f1:58:30:85:99:9f:95:29:bd:2e:6f:55:e6:ff:ea:
                    25:21:4e:b8:98:68:8e:43:d3:03:68:06:76:1c:69:
                    a7:de:95:f4:ee:09:af:25:d9:b0:f0:6b:35:88:c4:
                    70:de:dd:e2:78:0e:6b:0d:45:27:70:1c:ae:59:47:
                    ae:ae:34:73:d4:12:07:be:77:21:46:73:63:f8:90:
                    2b:ad:06:dd:51:d6:12:34:b9:80:fc:cd:f6:09:72:
                    e5:aa:d2:ae:97:92:be:44:ff:6f:b9:6e:96:ef:e4:
                    cc:b3:75:86:66:17:3b:0d:d6:8a:cf:5d:55:b8:c1:
                    d3:cc:fa:61:2f:cc:b5:06:42:ce:cc:4b:51:b7:b6:
                    4e:bc:04:2a:46:bb:c6:16:c7:e2:ab:2f:a9:c0:05:
                    cd:25:b1:30:d1:bb:f7:ac:4d:53:4a:cb:a7:50:16:
                    49:f3:7b:ae:ad:cb:56:24:d6:70:ce:f3:89:c6:63:
                    29:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:70:79:E5:17:56:05:88:8D:9B:E4:76:7F:7C:2B:FD:97:14:E0:27
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366553A/859681AC703711E9878A505EF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366553A/859681AC703711E9878A505EF8AEA228/wHB55RdWBYiNm-R2f3wr_ZcU4Cc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328441

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.68.24.0/21
                IPv6:
                  2c0f:ecf8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:91:7f:77:77:4e:e9:6f:b8:38:17:70:02:24:94:09:6e:07:
         ed:a9:f2:0b:fa:8e:79:61:fa:0d:a9:81:e5:da:6c:8c:e9:43:
         31:ab:be:0f:2e:e1:dc:3c:4a:b2:ff:39:08:43:52:34:d2:11:
         27:38:b0:69:09:d5:40:04:44:c1:5e:ea:fc:00:88:09:7a:47:
         58:d1:ed:5f:2c:59:6d:a0:32:33:d6:9c:4e:50:4e:70:f3:c8:
         7f:29:67:ba:b5:ef:48:35:51:e8:e9:c2:bf:67:69:9c:8e:51:
         c2:7e:21:2a:1d:98:b1:6f:03:5e:a5:63:36:23:f1:51:55:4c:
         82:1a:6e:99:d7:7a:67:18:36:f4:9c:41:82:26:b0:fa:3f:54:
         f5:09:71:ed:f2:9b:7b:fc:f2:4c:34:93:33:6c:2c:9e:77:af:
         00:0c:23:97:fa:18:48:9f:97:6c:7c:91:4e:f2:8a:8b:bb:c9:
         74:b7:65:7c:61:51:98:db:9f:4f:c1:b8:fb:1d:99:0c:41:45:
         c0:5f:f0:e8:d7:b8:9a:98:8e:d4:47:58:a5:c2:0c:41:91:94:
         80:b4:c0:17:59:6d:bc:a6:ff:c5:84:c8:a8:4a:0d:ab:5a:80:
         ea:48:c2:40:57:fb:22:da:93:52:83:66:b3:63:35:c6:4f:86:
         93:60:ce:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----