Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer
File:                     BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer (raw, json)
Hash identifier:          IhfigofNQ834mJLFh2xTb1D9V+VE8vcLw1ZagrTIZdQ=
Subject key identifier:   05:2B:9C:D1:0F:6A:E6:7B:31:27:ED:12:37:24:7E:8A:C4:4B:79:A1
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       0E6E
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 28 Aug 2024 07:02:38 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 213.193.32.0/19

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:30:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3694 (0xe6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
        Validity
            Not Before: Aug 28 07:02:38 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F367678FRI/serialNumber=052B9CD10F6AE67B3127ED1237247E8AC44B79A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:27:6f:e3:2e:19:3e:49:e5:49:52:e9:a0:55:
                    a3:de:54:75:1b:e6:70:41:f7:cf:08:34:bc:cb:8c:
                    b9:b8:31:6f:94:00:8f:78:07:a1:3c:c9:40:68:9e:
                    d7:79:17:16:b9:ef:99:3a:62:92:90:b6:46:ff:61:
                    91:3d:e0:ce:e5:23:10:d1:a3:03:a8:d5:8f:c4:ab:
                    cc:c6:c4:2b:3f:1d:e7:af:14:93:a7:13:8d:0e:c0:
                    65:ba:e4:f7:86:93:57:be:48:e2:9c:1e:cd:87:48:
                    e0:cb:44:65:b3:e2:2f:d6:22:54:32:9b:33:b2:fb:
                    06:86:44:80:4d:e7:a9:e9:82:8a:d0:c0:9e:10:01:
                    f8:40:cc:7e:ef:d5:85:4e:88:cf:20:2e:4c:fe:4c:
                    b6:4c:03:d6:f0:c0:16:23:08:9f:bd:9f:b3:9e:c2:
                    77:74:10:50:c7:16:2d:6f:06:ab:12:90:82:2d:4d:
                    3f:2d:96:83:4e:1e:c5:36:9a:5c:bc:4f:1f:b0:fb:
                    e5:7b:1f:4f:dd:4c:7b:5a:c0:1c:67:b6:77:ef:2d:
                    f5:52:0f:6b:40:c5:0c:2e:8f:50:b9:fb:c7:25:a8:
                    7a:ca:fe:8d:5c:66:0a:6f:e9:d9:00:35:af:8a:cf:
                    c5:7a:32:db:b9:06:13:be:e9:37:2e:09:4b:92:5d:
                    37:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:2B:9C:D1:0F:6A:E6:7B:31:27:ED:12:37:24:7E:8A:C4:4B:79:A1
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.193.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         36:2d:8b:09:c4:ac:e5:d8:5a:df:c1:b6:b8:5c:a5:17:db:c0:
         ce:e1:d9:dc:0e:fc:e9:98:bc:8b:4a:1c:82:6d:6d:14:ac:1e:
         ca:9e:f0:97:db:7d:18:14:7b:94:5d:b5:16:3a:58:b1:a8:f5:
         d3:9d:5c:15:1d:c7:de:06:16:da:45:c6:8d:91:7d:9c:97:06:
         1a:aa:58:ca:b1:c0:e0:65:02:4e:ef:20:41:01:78:db:28:5f:
         cd:b5:c5:c5:bf:0f:ac:ca:1b:ca:9f:c2:38:dc:e0:5a:d4:5e:
         1e:3d:84:cd:cc:49:52:60:1f:ee:f0:df:14:b3:02:f1:b5:6b:
         e5:5a:b8:fb:5e:3e:fa:dd:d7:c6:10:86:5b:aa:af:cc:50:85:
         ae:cd:38:3f:6e:4e:c7:58:0c:5b:89:28:0f:4c:26:c1:62:57:
         25:a8:39:a0:aa:28:6d:3e:cc:cf:68:89:92:94:62:e6:e8:02:
         10:db:f8:67:68:da:46:e2:b9:60:b0:37:ec:72:d5:27:ec:11:
         8c:36:66:46:6f:d2:cd:5c:06:ff:64:e6:07:41:57:98:42:37:
         33:27:42:44:6b:50:b7:79:59:17:6d:30:23:34:e8:1b:2c:a6:
         f3:c3:8d:78:d8:be:21:ff:1e:1f:3b:92:33:12:d1:27:23:52:
         a0:cd:18:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:54 2024 by rpki-client on console-ams.rpki-client.org