Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer
File:                     BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer (raw, json)
Hash identifier:          1bY/LWpjUEz4TNJbFG0XryMvHG3oC1g3zrRLJvSnwXM=
Subject key identifier:   05:2B:9C:D1:0F:6A:E6:7B:31:27:ED:12:37:24:7E:8A:C4:4B:79:A1
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       0F5F
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 13 Feb 2025 00:45:15 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 213.193.40.0 -- 213.193.63.255
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Apr 2025 13:35:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3935 (0xf5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC
        Validity
            Not Before: Feb 13 00:45:15 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F367678FRI
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:27:6f:e3:2e:19:3e:49:e5:49:52:e9:a0:55:
                    a3:de:54:75:1b:e6:70:41:f7:cf:08:34:bc:cb:8c:
                    b9:b8:31:6f:94:00:8f:78:07:a1:3c:c9:40:68:9e:
                    d7:79:17:16:b9:ef:99:3a:62:92:90:b6:46:ff:61:
                    91:3d:e0:ce:e5:23:10:d1:a3:03:a8:d5:8f:c4:ab:
                    cc:c6:c4:2b:3f:1d:e7:af:14:93:a7:13:8d:0e:c0:
                    65:ba:e4:f7:86:93:57:be:48:e2:9c:1e:cd:87:48:
                    e0:cb:44:65:b3:e2:2f:d6:22:54:32:9b:33:b2:fb:
                    06:86:44:80:4d:e7:a9:e9:82:8a:d0:c0:9e:10:01:
                    f8:40:cc:7e:ef:d5:85:4e:88:cf:20:2e:4c:fe:4c:
                    b6:4c:03:d6:f0:c0:16:23:08:9f:bd:9f:b3:9e:c2:
                    77:74:10:50:c7:16:2d:6f:06:ab:12:90:82:2d:4d:
                    3f:2d:96:83:4e:1e:c5:36:9a:5c:bc:4f:1f:b0:fb:
                    e5:7b:1f:4f:dd:4c:7b:5a:c0:1c:67:b6:77:ef:2d:
                    f5:52:0f:6b:40:c5:0c:2e:8f:50:b9:fb:c7:25:a8:
                    7a:ca:fe:8d:5c:66:0a:6f:e9:d9:00:35:af:8a:cf:
                    c5:7a:32:db:b9:06:13:be:e9:37:2e:09:4b:92:5d:
                    37:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:2B:9C:D1:0F:6A:E6:7B:31:27:ED:12:37:24:7E:8A:C4:4B:79:A1
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.193.40.0-213.193.63.255

    Signature Algorithm: sha256WithRSAEncryption
         bf:c7:ae:78:ba:ec:68:3b:bf:36:09:83:c9:4f:05:a8:cd:24:
         18:04:9c:fa:7f:dd:a4:75:f1:00:37:e4:ee:f9:eb:53:ab:c8:
         fb:02:71:02:ad:8b:cf:33:0c:66:90:8d:8a:b0:bb:8e:55:4f:
         07:83:d7:77:aa:9f:f4:d4:dd:9f:d7:b4:bb:d4:68:a8:fb:8d:
         de:7c:2d:0d:3e:21:df:72:e2:53:11:d1:f6:76:44:58:98:ea:
         89:de:48:a5:32:f0:e4:2b:b3:95:49:d0:64:71:49:5c:34:77:
         6f:4e:8d:d6:25:3e:91:9e:e2:5c:78:16:8d:ab:ec:3f:28:23:
         46:4f:33:2c:9b:43:19:8e:13:7e:2e:09:39:3d:fa:0d:84:32:
         e2:30:c8:45:88:0e:ab:9c:38:4c:19:6e:ad:fc:d5:be:d4:59:
         c2:34:e1:b5:94:08:dd:ca:9e:fb:9c:4d:f0:33:d9:1b:0d:6b:
         95:89:2b:3e:04:2e:e9:e9:82:60:ee:92:08:76:0b:e1:21:a6:
         9c:7a:ca:93:b6:92:cc:b2:b3:5a:fb:06:5d:26:46:5c:a3:95:
         b0:53:41:d9:bd:a4:bb:8e:3b:f0:8f:1a:00:94:c8:36:19:0f:
         47:94:2b:fe:f1:c5:7e:50:58:e5:18:04:8f:1c:9e:a8:d3:6d:
         f5:a4:6e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:08:30 2025 by rpki-client