Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer
File:                     wMDnGZy4QKJJjB47pWdvngwGKGg.cer (raw, json)
Hash identifier:          sQLCIX5/gdiABdsuNJgzMa/zv1dLyp7ZJ3aW5E5tD7Y=
Subject key identifier:   C0:C0:E7:19:9C:B8:40:A2:49:8C:1E:3B:A5:67:6F:9E:0C:06:28:68
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2AE6
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 24 Jul 2024 06:14:24 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37114
                          IP: 102.213.168.0/22
                          IP: 102.223.76.0/22
                          IP: 2c0f:7b80::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Oct 2024 00:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10982 (0x2ae6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jul 24 06:14:24 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3650F65AF/serialNumber=C0C0E7199CB840A2498C1E3BA5676F9E0C062868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ef:32:e0:aa:53:d2:82:3f:c6:61:d8:08:52:
                    15:96:6e:28:d0:96:63:12:cc:b8:89:00:23:24:76:
                    3f:61:df:ab:be:1c:19:27:cb:60:8d:78:3c:b5:97:
                    da:1e:2d:09:a2:0e:18:ec:17:ef:6a:ae:0d:ff:8b:
                    a7:73:73:8b:59:30:dc:ff:78:51:d6:9a:a0:8b:31:
                    86:96:7f:40:b5:9f:f2:b7:14:dc:dd:ba:c0:15:1b:
                    cc:17:48:3b:58:e8:a3:52:da:18:e4:5c:e8:fb:11:
                    56:70:42:54:b2:cb:31:39:ca:bd:06:e3:ef:96:75:
                    02:c0:3b:48:78:96:90:1f:77:cd:b7:b7:8b:1c:fd:
                    91:55:10:0b:d4:13:84:9d:58:43:92:46:bc:b7:22:
                    f7:8e:d6:77:d1:29:c8:dd:6d:13:b9:ef:90:8b:ca:
                    23:c5:4a:60:91:61:cd:68:d4:7e:4a:71:ba:44:65:
                    c1:37:7c:1b:28:64:43:42:f3:cd:76:08:9b:0a:1c:
                    e4:d4:8d:d1:b4:b6:56:de:e3:bf:61:7d:89:00:27:
                    b7:8d:b1:d9:86:ac:dd:f5:da:4d:e0:ff:7e:ff:dd:
                    8c:c0:33:8f:d9:55:e8:e6:50:71:62:12:9c:1c:c7:
                    85:3e:4f:3c:e9:aa:b3:7c:58:50:b3:61:09:7b:45:
                    8f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C0:E7:19:9C:B8:40:A2:49:8C:1E:3B:A5:67:6F:9E:0C:06:28:68
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37114

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.213.168.0/22
                  102.223.76.0/22
                IPv6:
                  2c0f:7b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:0c:bf:33:a5:dc:ef:29:91:b8:3a:e2:de:11:fe:4d:a3:a1:
         2a:fe:9a:28:30:66:30:4a:2f:97:6d:bd:63:18:79:22:75:f4:
         e7:0e:35:ab:82:45:a2:83:fa:66:b5:ad:30:0d:ec:ef:73:ef:
         c6:59:c9:40:ad:a3:03:3c:44:1e:24:51:8c:df:41:50:4c:a7:
         0f:c3:20:1d:9d:bc:50:46:a3:94:fc:6d:20:45:d3:9e:ac:7f:
         79:b5:68:26:d4:30:d3:44:78:5f:a3:c6:0e:ea:4f:34:83:48:
         28:ee:c5:86:fd:52:e8:e8:a0:f4:7d:92:36:5f:1f:e4:c3:97:
         a5:1e:ee:b1:a7:77:ab:78:86:6c:64:5e:3b:b1:94:9f:54:09:
         8a:88:90:f0:b7:cc:f8:66:62:8e:53:5a:2e:b3:fe:39:8a:67:
         0e:1e:94:2e:38:a1:94:a2:ca:7e:79:ba:69:49:49:fd:d1:3d:
         55:38:95:e4:f7:77:d7:54:16:6c:c7:73:90:91:42:32:50:0b:
         c3:ad:a4:3e:6c:99:48:87:e4:d3:08:90:84:34:bb:c2:61:65:
         c7:42:97:a5:94:8a:c8:14:79:87:a5:7d:65:43:6e:a5:79:a1:
         6b:c9:30:ca:8b:ab:e1:38:ea:d2:4a:7d:12:c3:29:53:4c:71:
         b6:3e:4c:e4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----