Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer
File:                     5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer (raw, json)
Hash identifier:          KwKI+Uwca3T6GiUKa7aLAvKLLGQV1Sd3b0vSM2REP40=
Subject key identifier:   E6:90:FB:65:6B:8D:7D:0F:0F:67:6D:9D:12:7A:32:DF:8D:3A:6D:85
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       0D5E
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:33:07 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 62.173.32.0/19

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:25:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3422 (0xd5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
        Validity
            Not Before: Jan  1 00:33:07 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36CC8EBRI/serialNumber=E690FB656B8D7D0F0F676D9D127A32DF8D3A6D85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:71:bd:cf:bf:05:da:f0:41:18:c5:d7:4c:0d:
                    1f:95:2b:74:a3:32:be:3f:ee:72:e1:6f:af:81:9f:
                    22:30:67:b9:77:7e:1c:cf:35:af:63:75:fa:41:c9:
                    66:8c:4f:f9:b0:dc:04:e6:e2:02:c4:1d:e5:7d:68:
                    30:fb:c8:e7:28:da:9f:34:f7:4a:52:b9:6e:90:f6:
                    04:9e:02:1e:e5:29:5c:c1:17:91:dc:e5:1d:c4:72:
                    41:38:6d:15:00:90:bd:bc:3a:9e:aa:11:90:31:09:
                    f4:0f:18:1a:27:87:70:f9:7a:c2:ff:ae:f7:5c:01:
                    d4:24:bf:ef:1a:71:57:55:54:53:25:da:e5:fe:67:
                    45:d3:e5:3b:c9:ab:48:e9:3f:35:31:18:a0:0c:20:
                    d0:10:aa:88:9b:49:06:f8:77:0b:ed:eb:7a:11:c4:
                    97:39:53:21:b4:95:6d:83:aa:43:ba:22:f5:1b:04:
                    2f:da:b9:3c:11:d1:31:84:78:1c:8e:e6:88:78:74:
                    c9:a2:cc:32:dd:2b:f0:be:60:9b:cd:df:57:6f:b4:
                    4d:97:58:7c:eb:a3:ba:d7:1b:18:5d:97:1c:09:b4:
                    26:c5:b3:f3:bf:8c:98:7a:05:73:30:a5:f6:5b:8e:
                    e2:8e:1d:f5:84:4e:d0:30:25:08:6f:e6:7e:01:04:
                    d7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:90:FB:65:6B:8D:7D:0F:0F:67:6D:9D:12:7A:32:DF:8D:3A:6D:85
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.173.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7d:78:03:49:01:ce:dc:34:9f:c0:ad:d8:54:15:78:52:7b:80:
         45:f3:d5:04:70:a2:57:dc:ba:66:bb:8b:f3:bf:06:2b:40:05:
         3a:69:4c:44:35:83:db:ee:56:14:f6:84:8c:90:c2:1f:b3:0e:
         52:db:d2:c0:0b:6b:fd:3f:47:43:9d:de:df:c7:82:d5:1f:1b:
         64:61:97:6d:7c:10:c9:6f:26:d4:f9:81:3d:0b:14:5b:60:47:
         76:9c:5b:5e:80:30:9f:6d:dd:5d:57:8a:e6:01:ac:36:d5:e3:
         06:95:96:45:11:09:a6:c7:15:02:06:e8:65:4e:62:66:8b:34:
         27:18:9b:31:50:b2:f0:b8:eb:cf:4c:88:17:53:2b:91:b5:df:
         2c:b0:64:8e:5e:93:14:46:78:f0:84:82:0a:85:c9:61:f0:c6:
         f4:eb:50:c4:cb:86:ee:20:d5:ba:7e:e7:54:c1:13:3c:11:44:
         ad:58:00:9f:9a:c8:cc:d7:b9:6b:ed:1f:3c:6c:d9:90:a8:80:
         56:64:c6:dc:ea:23:bb:f1:57:8f:0e:33:44:9a:00:19:c3:1f:
         0d:aa:3a:18:c1:ad:24:4a:ae:80:3c:fb:9a:a7:5f:2d:dc:b8:
         5e:0a:85:01:fb:81:71:07:e5:42:ab:d4:c2:11:d8:14:b6:42:
         ba:11:84:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 02:00:58 2024 by rpki-client on console-ams.rpki-client.org