Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/VCiBspPW4uKh8hlSyLwDISbuu8k.cer
File:                     VCiBspPW4uKh8hlSyLwDISbuu8k.cer (raw, json)
Hash identifier:          SZ0G94pJwR7JKuvllOZcT8yjSntz2rrUno3PKmS39Vs=
Subject key identifier:   54:28:81:B2:93:D6:E2:E2:A1:F2:19:52:C8:BC:03:21:26:EE:BB:C9
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       0D58
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/VCiBspPW4uKh8hlSyLwDISbuu8k.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:31:15 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 213.154.64.0/19

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:30:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3416 (0xd58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
        Validity
            Not Before: Jan  1 00:31:15 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36B52A6RI/serialNumber=542881B293D6E2E2A1F21952C8BC032126EEBBC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:98:19:e9:cc:72:0c:3d:c8:7d:25:c5:3c:c6:
                    77:30:98:7e:b0:99:ea:45:d1:54:2a:36:fd:d8:a5:
                    1b:4b:59:5f:00:64:2e:5f:2b:1e:3e:fe:da:5e:95:
                    af:cd:9a:85:e8:34:df:a6:72:10:35:ed:c7:f1:f0:
                    d7:cb:13:cf:16:f3:1a:97:d1:dc:d7:35:86:01:df:
                    9e:d6:3e:e9:97:e4:2b:2a:73:7e:07:bc:b0:db:0c:
                    7d:1b:10:1e:7b:14:12:25:34:28:0d:4f:43:68:58:
                    8b:09:75:45:81:90:08:95:e1:9b:c2:18:1b:0b:c6:
                    33:8b:7c:76:49:a0:78:47:59:cb:5a:3b:75:bf:df:
                    fe:3a:8e:0a:d3:0f:a6:ff:fa:5a:14:db:7b:7e:f6:
                    db:fb:d6:71:aa:c3:f0:59:6a:d9:42:5e:ab:40:37:
                    6a:96:dd:0c:3f:0f:07:3c:9f:8c:76:ae:53:b4:11:
                    96:20:9f:66:df:63:0e:a1:c5:e4:9f:c4:e3:6c:5e:
                    be:6c:a5:40:86:3f:e1:63:68:49:e6:38:03:21:5a:
                    1d:e9:9f:eb:b1:8e:fd:65:8a:85:4d:a1:09:cd:e9:
                    29:10:aa:7f:d5:36:84:75:f0:32:be:5b:c4:32:b6:
                    97:be:ee:b3:5f:4e:09:f3:f5:9a:52:89:72:9d:e1:
                    95:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:28:81:B2:93:D6:E2:E2:A1:F2:19:52:C8:BC:03:21:26:EE:BB:C9
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/VCiBspPW4uKh8hlSyLwDISbuu8k.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.154.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b6:b7:c8:f7:ec:dc:57:d3:db:2c:11:a1:cb:bb:6a:5a:64:43:
         71:5e:66:5b:37:99:f2:f0:ef:0e:1f:6e:b9:1d:5f:a2:23:7e:
         ea:f8:3e:5d:09:36:f7:05:34:4d:0b:8d:0a:1b:2d:f9:4c:29:
         e7:af:98:96:89:41:90:41:f4:0c:79:49:f4:b5:58:cd:ef:06:
         da:4b:47:c0:e1:42:8f:01:75:af:1c:33:92:97:0e:81:7b:2c:
         b3:76:ff:ef:c6:73:42:c0:ed:52:41:50:e1:9a:48:53:bb:d8:
         e1:85:3a:12:c9:4e:6a:85:cd:15:9d:a1:8d:fb:a7:e3:68:35:
         1a:10:26:53:27:32:5d:ca:48:e9:30:95:03:f7:b3:bc:78:64:
         1b:b4:20:14:aa:16:19:4f:d7:53:4e:fe:e6:8f:5a:2d:57:5c:
         78:11:91:dc:d4:f7:3c:74:7e:e3:55:33:c5:d1:b8:60:33:27:
         a3:f0:a8:61:a7:dd:fa:af:9e:a3:0a:4b:d6:19:15:8e:f3:ea:
         d2:c5:16:39:88:9c:c7:ec:89:47:f3:1a:42:c1:52:b8:5b:1f:
         d8:eb:8d:f9:ee:b2:d4:1c:0f:b4:8f:7a:6d:d5:c6:d2:83:35:
         b3:ba:ef:d3:cd:9e:92:e8:93:df:30:61:18:62:1c:c9:ae:f7:
         30:3a:6c:31
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICDVgwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNUklQ
RVRPQUZSSU5JQzExMC8GA1UEBRMoN0Y3QUMxODA4OTc5ODNFMjlFOTM3QzBBMTg3
ODAzQzA3Mjc1NTU0NTAeFw0yNDAxMDEwMDMxMTVaFw0yNTAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNkI1MkE2UkkxMTAvBgNVBAUTKDU0Mjg4MUIyOTNENkUyRTJB
MUYyMTk1MkM4QkMwMzIxMjZFRUJCQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDCmBnpzHIMPch9JcU8xncwmH6wmepF0VQqNv3YpRtLWV8AZC5fKx4+
/tpela/NmoXoNN+mchA17cfx8NfLE88W8xqX0dzXNYYB357WPumX5Csqc34HvLDb
DH0bEB57FBIlNCgNT0NoWIsJdUWBkAiV4ZvCGBsLxjOLfHZJoHhHWctaO3W/3/46
jgrTD6b/+loU23t+9tv71nGqw/BZatlCXqtAN2qW3Qw/Dwc8n4x2rlO0EZYgn2bf
Yw6hxeSfxONsXr5spUCGP+FjaEnmOAMhWh3pn+uxjv1lioVNoQnN6SkQqn/VNoR1
8DK+W8Qytpe+7rNfTgnz9ZpSiXKd4ZUhAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
VCiBspPW4uKh8hlSyLwDISbuu8kwHwYDVR0jBBgwFoAUf3rBgIl5g+Kek3wKGHgD
wHJ1VUUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvcmlw
ZS9mM3JCZ0lsNWctS2VrM3dLR0hnRHdISjFWVVUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvcmlwZS10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkI1MkE2Lzk4MjU0
MzU2NkZGRDExRTlBQ0M2RUIzNEY4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZCNTJBNi85ODI1NDM1NjZGRkQxMUU5QUNDNkVCMzRGOEFFQTIy
OC9WQ2lCc3BQVzR1S2g4aGxTeUx3RElTYnV1OGsubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQF1ZpAMA0GCSqGSIb3DQEBCwUAA4IBAQC2t8j37NxX09ss
EaHLu2paZENxXmZbN5ny8O8OH265HV+iI37q+D5dCTb3BTRNC40KGy35TCnnr5iW
iUGQQfQMeUn0tVjN7wbaS0fA4UKPAXWvHDOSlw6Beyyzdv/vxnNCwO1SQVDhmkhT
u9jhhToSyU5qhc0VnaGN+6fjaDUaECZTJzJdykjpMJUD97O8eGQbtCAUqhYZT9dT
Tv7mj1otV1x4EZHc1Pc8dH7jVTPF0bhgMyej8Khhp936r56jCkvWGRWO8+rSxRY5
iJzH7IlH8xpCwVK4Wx/Y64357rLUHA+0j3pt1cbSgzWzuu/TzZ6S6JPfMGEYYhzJ
rvcwOmwx
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:54 2024 by rpki-client on console-ams.rpki-client.org