Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/8qncFw2PMqBEwa8QUgRdbU4kIus.cer
File:                     8qncFw2PMqBEwa8QUgRdbU4kIus.cer (raw, json)
Hash identifier:          Sd9HSWNHgoVdRg8bakxyIW+U1DqKGXqGQjJXNDuwAzg=
Subject key identifier:   F2:A9:DC:17:0D:8F:32:A0:44:C1:AF:10:52:04:5D:6D:4E:24:22:EB
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       0E46
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 24 Jul 2024 06:15:03 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 212.96.16.0/20

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Oct 2024 00:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3654 (0xe46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
        Validity
            Not Before: Jul 24 06:15:03 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3650F65RI/serialNumber=F2A9DC170D8F32A044C1AF1052045D6D4E2422EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:74:26:a6:03:97:a3:a5:c1:41:e4:5e:91:80:
                    2b:20:89:b9:55:2b:52:61:4b:c9:41:d5:b6:60:4b:
                    00:c7:dc:18:a5:f4:f0:b1:2b:fa:1b:3e:46:33:47:
                    62:3b:35:a3:ee:e4:9d:1c:80:e6:10:97:fe:0c:2c:
                    a5:4f:27:c3:2b:07:95:db:28:ef:4c:d2:6c:43:6b:
                    52:59:3d:83:5e:c3:95:0f:78:04:fc:3f:97:87:58:
                    01:ad:a9:d3:2a:6d:4a:00:40:a2:62:87:9a:c6:7a:
                    86:fe:f0:fa:67:09:2b:94:d3:30:b0:eb:4b:f6:8e:
                    b9:66:2a:69:dc:4c:e6:cd:cd:59:68:3c:82:09:03:
                    ee:04:07:b1:9f:56:e8:1f:02:b1:6b:47:a7:57:29:
                    2d:35:bf:87:c4:98:98:96:a4:74:6c:6b:9a:93:0e:
                    d4:00:19:81:b5:58:fd:05:df:8d:57:70:ff:f8:56:
                    50:03:2c:01:0c:d1:02:be:8a:4e:27:51:4b:7c:5a:
                    cb:9e:32:7f:0f:d1:8f:ab:37:d7:58:1f:0b:36:03:
                    5d:27:2f:95:07:18:d5:41:62:d0:99:04:6c:36:30:
                    a3:98:f1:a6:3d:2e:f7:77:e8:28:d0:f1:94:4c:c6:
                    8b:4c:5b:a8:d6:3d:18:74:ef:12:e1:7b:1a:94:95:
                    0c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A9:DC:17:0D:8F:32:A0:44:C1:AF:10:52:04:5D:6D:4E:24:22:EB
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.96.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         59:f0:7c:12:75:27:4d:b2:9c:6d:70:d8:e4:31:5b:62:2d:67:
         00:5d:c2:68:8e:63:ea:ee:0c:84:15:6f:83:4a:81:c0:c2:85:
         26:09:a8:47:9e:ff:c0:84:4c:6d:f9:9b:a6:ed:23:7a:62:87:
         da:53:30:f4:1a:29:24:89:5a:dd:d5:20:21:57:80:6b:50:0f:
         64:75:85:c8:c6:d6:48:38:a4:e9:cd:d2:eb:22:96:4d:b3:8f:
         2b:4a:b1:84:ec:43:11:d1:ba:1f:bb:5a:b6:64:29:1f:20:09:
         08:4c:4b:60:4d:a2:68:ab:b4:fe:d0:02:00:d6:24:11:fc:d0:
         a4:26:9f:b0:04:8f:ba:0a:c3:f2:91:e3:21:d1:7a:47:ec:5f:
         9d:45:66:93:f9:9c:7a:39:a9:60:a3:6c:b7:2c:cd:1c:58:74:
         4b:b1:56:f5:2b:6d:76:8f:22:8c:b2:bb:91:1c:ab:7b:3b:25:
         96:b8:bc:ab:1c:29:31:8e:7b:bd:42:ab:18:56:29:05:18:5e:
         76:8d:8a:98:c9:6e:88:44:39:0e:51:3b:c2:c8:36:f3:98:52:
         c7:09:de:90:ad:c3:05:45:60:f6:7c:ca:9e:63:7f:9a:6e:86:
         8a:db:9f:7a:ea:1b:ca:4e:69:15:e1:46:53:3d:bb:13:9b:cc:
         56:0e:72:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----