Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/xA-V6X2DLw9XbRPuNa6z11pdMNQ.cer
File:                     xA-V6X2DLw9XbRPuNa6z11pdMNQ.cer (raw, json)
Hash identifier:          w98lRDbpV2Y9VQfHUixZekRxCJbQrcEoo0Tlg3rfyRM=
Subject key identifier:   C4:0F:95:E9:7D:83:2F:0F:57:6D:13:EE:35:AE:B3:D7:5A:5D:30:D4
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2414
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/xA-V6X2DLw9XbRPuNa6z11pdMNQ.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:11:29 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 327892
                          IP: 102.22.32.0/19
                          IP: 2c0f:f478::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 05:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9236 (0x2414)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:11:29 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F363C3E1AF/serialNumber=C40F95E97D832F0F576D13EE35AEB3D75A5D30D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0d:cb:96:24:1f:4d:2d:ea:f2:b9:53:d6:8e:
                    48:69:39:d4:ee:55:4d:5f:2b:81:50:d0:37:79:a1:
                    da:28:93:e7:6a:ec:34:ba:a6:b5:9e:4f:c5:e8:a3:
                    7e:96:e0:37:65:9c:08:1e:da:99:d6:75:85:05:56:
                    c2:53:04:d4:a1:f8:a4:f5:fd:8a:ef:f0:0b:2f:a7:
                    3d:ee:2e:9a:c3:81:c1:ba:70:31:c9:75:ea:10:a4:
                    c7:4e:76:9b:c9:fc:ff:74:77:8d:c6:71:7e:db:8d:
                    10:1b:a0:a1:d8:64:ef:41:a2:c4:01:d3:57:2c:f6:
                    2a:bf:6c:69:8b:b7:2d:bf:95:6c:2f:fc:61:ab:fe:
                    3f:d5:66:89:30:83:17:b0:67:49:99:64:00:6c:f0:
                    0b:1c:5a:e2:02:f8:20:18:21:d6:e3:fa:9c:86:09:
                    5f:c6:f8:eb:b4:3a:00:fa:39:e2:56:21:a6:20:63:
                    bd:cf:cd:a3:12:90:36:96:0a:a2:db:a5:ef:a0:e2:
                    8f:2f:72:cd:8e:c1:9f:8a:fd:3d:2c:fc:fd:26:c7:
                    05:ef:37:7d:70:35:f7:85:e5:45:c4:8c:57:ee:d5:
                    d2:7b:68:7f:ec:67:2c:ad:4e:b1:30:6f:36:70:0c:
                    b2:5f:8e:3e:88:b1:f1:94:5f:49:e9:b2:2d:69:1e:
                    b3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0F:95:E9:7D:83:2F:0F:57:6D:13:EE:35:AE:B3:D7:5A:5D:30:D4
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/xA-V6X2DLw9XbRPuNa6z11pdMNQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327892

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.22.32.0/19
                IPv6:
                  2c0f:f478::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:ed:3c:c5:05:83:b6:5a:51:a6:39:25:80:40:4f:37:ca:1b:
         fa:5b:7e:eb:9f:65:f5:75:32:07:ec:94:22:88:ba:f7:0c:55:
         00:ca:3b:64:37:95:42:9c:4d:d8:3f:01:37:1c:7b:bf:33:17:
         f5:19:c4:91:b1:9e:6c:35:16:cf:78:f6:ef:8f:ba:f6:c6:e4:
         3d:11:3f:b8:ff:35:a3:5a:d6:8b:89:70:55:f1:e3:2f:9f:e7:
         d6:0a:8e:f3:08:54:32:90:cd:59:99:5d:cf:a3:90:b9:8d:72:
         81:18:f8:66:be:57:c1:d2:47:2d:25:10:bf:99:33:c2:86:f7:
         22:df:ee:28:39:c4:0e:5d:44:44:2e:f1:53:53:93:fb:55:64:
         30:a7:bf:f4:b1:03:3a:93:e0:b6:48:d7:6e:a8:b1:d6:04:ab:
         18:80:cb:9d:95:f0:c8:89:c2:b0:cc:d6:e0:da:a0:18:84:c6:
         42:72:8d:ec:a8:67:c1:cf:d2:23:6b:1d:f8:60:2d:1a:ed:a9:
         b6:14:8f:14:77:2d:9a:1f:72:37:10:63:d3:42:a8:b4:79:25:
         b9:36:43:e4:d8:e2:8b:8c:72:78:f5:e6:3e:59:0d:5a:65:2c:
         20:6a:52:19:a0:5c:bd:d9:d8:2d:34:a5:1b:02:c9:08:8b:0a:
         8a:d1:f4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----