Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/zjU-BgcibJUeYP1ogM7M-5jSvEg.cer
File:                     zjU-BgcibJUeYP1ogM7M-5jSvEg.cer (raw, json)
Hash identifier:          KYh+x/ELawcA7zisfv70jwH2UflTApMlNDVi1KJZyD8=
Subject key identifier:   CE:35:3E:06:07:22:6C:95:1E:60:FD:68:80:CE:CC:FB:98:D2:BC:48
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       23CB
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:53:05 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 329095
                          IP: 102.215.99.0/24
                          IP: 2c0f:940::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9163 (0x23cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:53:05 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F362EFF3AF/serialNumber=CE353E0607226C951E60FD6880CECCFB98D2BC48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ea:22:a5:ed:38:6e:e3:a3:1d:16:b4:e2:f4:
                    24:45:9e:78:f4:80:b7:83:89:30:a5:aa:dc:e9:93:
                    0b:6c:35:29:d6:3a:5b:fd:dc:d5:ca:b4:ab:4e:42:
                    55:d3:d2:9e:83:03:e1:c5:8e:eb:5e:51:e1:71:d2:
                    7f:cf:cf:9a:6c:41:d1:9d:6a:82:54:83:53:bd:f4:
                    4c:2c:08:b1:dd:db:a7:fa:3d:44:b2:15:89:d5:53:
                    9e:5e:94:53:ca:9e:10:96:fe:7a:fb:12:f7:ff:14:
                    31:11:18:89:34:56:85:1e:5f:64:cb:02:5e:f0:76:
                    f5:80:a5:00:b7:cd:85:0b:37:0f:a2:e8:69:2e:f0:
                    aa:0a:b9:fc:fd:34:c9:5b:be:49:ed:03:8f:0c:c8:
                    99:ee:ee:3a:d0:78:4d:3f:eb:8f:ec:05:6d:06:ac:
                    78:55:c2:bf:f9:a4:ee:e6:5f:8f:53:c6:de:52:53:
                    79:06:ed:36:f6:be:b9:2b:5f:d7:47:2c:fb:f8:ef:
                    1d:99:8e:a8:55:7a:3f:b2:1a:e4:5b:77:a4:5c:81:
                    6d:68:35:e4:89:28:a0:d7:44:56:68:92:8b:35:d6:
                    16:3d:0e:03:3c:58:b0:87:68:82:54:4e:79:8f:e8:
                    d6:90:71:d7:a6:fd:7e:f1:99:d4:91:1c:f1:63:3e:
                    b3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:35:3E:06:07:22:6C:95:1E:60:FD:68:80:CE:CC:FB:98:D2:BC:48
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329095

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.215.99.0/24
                IPv6:
                  2c0f:940::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:5c:d7:3b:8e:86:4c:e0:7f:3a:25:73:6d:d2:f9:55:c7:6d:
         38:6d:0b:06:79:f6:78:ce:2b:ac:9e:66:b5:98:9a:3c:76:5c:
         75:7e:62:a1:27:f7:c1:e3:f1:be:9b:74:2e:bb:90:10:7e:76:
         a3:80:49:00:bd:0f:1f:7e:cc:59:ca:5c:8b:54:ff:ad:5f:a9:
         f5:c7:76:ea:2c:bb:bf:11:3e:74:c3:9f:04:60:7e:ff:b6:e2:
         a2:3d:99:fe:60:47:6a:3e:2d:e0:2f:c0:03:ac:0b:57:58:9a:
         94:6b:fb:95:dc:a9:2c:34:3e:2d:f1:48:e1:17:05:0e:1d:16:
         2b:27:87:7e:7a:e4:39:70:f0:b9:b1:e5:9c:cf:5f:34:87:b6:
         71:82:8f:50:d9:a4:6d:42:c4:d6:fd:c5:8d:32:02:35:00:2c:
         66:7d:77:a5:0c:33:31:ad:78:29:db:ff:92:d2:19:97:1d:28:
         b6:cd:d9:e7:af:42:f7:70:a0:7b:d9:0d:d5:4c:f2:fc:69:27:
         e5:f7:30:88:c5:c8:1d:16:83:be:a0:5a:2d:31:b0:89:b3:b3:
         70:d4:5c:4d:1f:4f:66:9d:d6:22:26:c5:ba:4c:8f:cd:18:0d:
         a4:8d:43:ff:86:e2:d6:84:46:93:de:5b:45:b6:12:c3:79:55:
         45:a5:e0:02
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICI8swDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAxMDEwMDUzMDVaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjJFRkYzQUYxMTAvBgNVBAUTKENFMzUzRTA2MDcyMjZDOTUxRTYwRkQ2
ODgwQ0VDQ0ZCOThEMkJDNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDn6iKl7Thu46MdFrTi9CRFnnj0gLeDiTClqtzpkwtsNSnWOlv93NXKtKtOQlXT
0p6DA+HFjuteUeFx0n/Pz5psQdGdaoJUg1O99EwsCLHd26f6PUSyFYnVU55elFPK
nhCW/nr7Evf/FDERGIk0VoUeX2TLAl7wdvWApQC3zYULNw+i6Gku8KoKufz9NMlb
vkntA48MyJnu7jrQeE0/64/sBW0GrHhVwr/5pO7mX49Txt5SU3kG7Tb2vrkrX9dH
LPv47x2ZjqhVej+yGuRbd6RcgW1oNeSJKKDXRFZokos11hY9DgM8WLCHaIJUTnmP
6NaQcdem/X7xmdSRHPFjPrNZAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUzjU+Bgci
bJUeYP1ogM7M+5jSvEgwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYyRUZGMy9BQzA4NTY0NkY1QjUx
MUVEQTc1Q0FGNDk0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MkVGRjMvQUMwODU2NDZGNUI1MTFFREE3NUNBRjQ5NEFEOUU2RkMvempVLUJn
Y2liSlVlWVAxb2dNN00tNWpTdkVnLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBYcwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBABm12MwDQQCAAIwBwMF
ACwPCUAwDQYJKoZIhvcNAQELBQADggEBAJlc1zuOhkzgfzolc23S+VXHbThtCwZ5
9njOK6yeZrWYmjx2XHV+YqEn98Hj8b6bdC67kBB+dqOASQC9Dx9+zFnKXItU/61f
qfXHduosu78RPnTDnwRgfv+24qI9mf5gR2o+LeAvwAOsC1dYmpRr+5XcqSw0Pi3x
SOEXBQ4dFisnh3565Dlw8Lmx5ZzPXzSHtnGCj1DZpG1CxNb9xY0yAjUALGZ9d6UM
MzGteCnb/5LSGZcdKLbN2eevQvdwoHvZDdVM8vxpJ+X3MIjFyB0Wg76gWi0xsImz
s3DUXE0fT2ad1iImxbpMj80YDaSNQ/+G4taERpPeW0W2EsN5VUWl4AI=
-----END CERTIFICATE-----