Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/wzA4fNIYxMz6UivFNddwdVvPe28.cer
File:                     wzA4fNIYxMz6UivFNddwdVvPe28.cer (raw, json)
Hash identifier:          aR3wmuq4KiLGM69UHi30faOsGtmS0DlHz+sD37SdUno=
Subject key identifier:   C3:30:38:7C:D2:18:C4:CC:FA:52:2B:C5:35:D7:70:75:5B:CF:7B:6F
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       296E
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Fri 01 Mar 2024 11:45:02 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 329032
                          IP: 102.216.176.0/22
                          IP: 2c0f:4680::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10606 (0x296e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Mar  1 11:45:02 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36D591BAF/serialNumber=C330387CD218C4CCFA522BC535D770755BCF7B6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f4:ce:0b:fe:bc:cf:25:ae:ed:6e:88:ac:a1:
                    55:b7:42:aa:b0:eb:60:8f:7c:5b:4e:ee:2d:77:ad:
                    f2:4a:25:7a:a2:61:6c:1c:74:a4:36:32:4f:ac:77:
                    0a:b4:b6:ce:ab:3c:ca:2b:17:bf:5c:ff:a5:3d:56:
                    42:92:29:84:ad:c1:8e:ae:ef:88:dc:8c:aa:82:93:
                    c3:10:7a:6f:93:61:88:8d:03:89:92:aa:43:1f:ec:
                    30:28:4f:ef:18:a4:ae:b6:e7:81:aa:be:0f:a6:ac:
                    ef:c9:dc:bf:ca:90:3e:39:b4:18:fd:d4:cb:64:e0:
                    11:20:49:83:ec:66:86:f0:4f:84:fb:b4:e7:07:ea:
                    af:02:e4:7a:ef:cc:9b:74:ca:6e:3f:58:c3:74:7e:
                    f7:02:e9:4e:31:50:9f:fc:90:40:35:6b:c1:f4:be:
                    b2:70:a2:82:c5:cc:5b:30:b8:7f:ff:3e:2e:e4:6c:
                    d1:af:f9:44:e3:a4:a3:e0:95:fe:0d:79:a8:d4:2f:
                    45:ef:fc:53:d1:91:96:9b:00:c3:cb:64:6c:77:4e:
                    6e:72:0f:73:b4:00:b3:84:92:34:46:1c:cb:46:51:
                    df:22:fb:06:42:b3:97:a1:54:fe:41:a0:85:96:5d:
                    44:8c:32:45:c0:08:db:f9:20:f6:15:7e:6e:e3:56:
                    0e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:30:38:7C:D2:18:C4:CC:FA:52:2B:C5:35:D7:70:75:5B:CF:7B:6F
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329032

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.176.0/22
                IPv6:
                  2c0f:4680::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:62:a0:56:09:07:07:6a:b4:10:2a:66:f3:24:44:44:ff:c9:
         10:02:42:35:da:e0:c4:a0:f6:4f:e2:df:4d:10:20:60:f3:db:
         f2:41:05:dd:19:05:a1:f2:dd:26:3e:2c:3a:38:ca:d0:22:3e:
         e4:02:4f:e9:8a:29:8a:ca:47:b0:df:3c:71:7a:6c:c0:1e:53:
         00:d8:04:39:e9:c2:e9:d8:26:67:b1:e2:ac:57:3c:0e:13:02:
         92:6b:52:f8:7a:fe:b0:c7:7b:7a:6f:2f:f8:0a:fe:6d:1b:b3:
         52:9d:67:4c:aa:83:52:98:cb:18:16:1b:af:7b:8e:cb:cc:56:
         6f:33:fb:60:87:a2:ad:98:69:bc:5e:fd:9f:98:52:40:d2:db:
         18:b2:3e:c0:37:2d:37:f8:68:59:9d:3e:56:e2:f3:02:2e:dd:
         3e:c3:49:96:9c:34:0e:f9:15:70:c1:17:68:c3:3a:2e:93:75:
         3e:05:95:e1:88:3c:0e:4d:db:9c:3b:67:80:05:8c:b8:33:73:
         23:4e:e2:7c:ce:9b:37:b9:42:ce:71:9d:31:b1:dc:21:b4:39:
         a7:78:b3:1b:58:f0:df:76:75:d5:80:72:34:0e:29:4b:6a:c5:
         f2:bd:9d:31:3e:2b:e4:c9:6f:14:22:d6:42:a9:a7:5a:b1:17:
         a8:81:7b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----