Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/ZbPoGBw9qNHWQehKRcjvgjndfqc.cer
File:                     ZbPoGBw9qNHWQehKRcjvgjndfqc.cer (raw, json)
Hash identifier:          eXd9nIhluI9Jdj09NbPEWfGFgxExkkadHBM5y2Fu00I=
Subject key identifier:   65:B3:E8:18:1C:3D:A8:D1:D6:41:E8:4A:45:C8:EF:82:39:DD:7E:A7
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       0D48
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:27:39 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 81.91.224.0/20

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 10 May 2024 00:25:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3400 (0xd48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
        Validity
            Not Before: Jan  1 00:27:39 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F367B8D1RI/serialNumber=65B3E8181C3DA8D1D641E84A45C8EF8239DD7EA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bc:7f:1b:76:24:45:4e:36:57:f3:1f:3b:76:
                    b3:13:bb:e9:f1:f0:61:58:69:85:2d:24:c8:45:62:
                    ed:ab:36:3c:78:5e:f1:e1:31:d2:40:95:d0:54:f3:
                    6e:6b:71:89:e9:b8:98:44:24:b2:41:1c:06:4c:88:
                    ff:55:a6:0e:d5:b6:32:51:ad:84:98:37:ef:73:00:
                    6e:a4:c6:0e:dc:4b:72:9b:cc:43:1c:54:b8:51:c3:
                    f1:2a:d9:0f:c8:13:06:c5:e3:cb:e2:3b:3e:14:ae:
                    a4:16:28:78:21:3d:36:31:cd:fe:90:13:a4:86:0e:
                    5b:01:78:3f:36:0b:5f:50:88:2e:8b:0e:4f:cd:e7:
                    18:59:5e:35:d1:e3:f2:47:b9:7e:4e:3a:6f:b4:09:
                    3e:90:4d:3c:b8:6e:61:9b:ce:13:bd:ed:03:90:83:
                    d6:c9:66:b8:e9:3d:73:ba:79:95:f1:c6:83:eb:dc:
                    c8:7f:d9:de:6d:a2:b3:b8:8c:cf:6c:bf:44:fa:d8:
                    07:1e:ef:1c:2d:24:86:2e:4b:68:49:5b:4c:f3:53:
                    27:ec:7d:07:d4:41:f5:60:c7:26:d1:51:6c:86:43:
                    20:d6:13:90:f6:d1:ab:5b:e6:cd:eb:27:ad:cf:cc:
                    00:89:18:38:69:1e:9c:99:49:c0:83:64:1a:d9:97:
                    ee:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B3:E8:18:1C:3D:A8:D1:D6:41:E8:4A:45:C8:EF:82:39:DD:7E:A7
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.91.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         83:85:ef:e9:3d:00:dd:83:8a:f8:dc:c1:82:9c:68:aa:22:fa:
         7f:96:a0:7a:10:c2:54:97:49:a6:94:ac:11:0b:7e:e2:fc:61:
         cc:3f:d0:47:d8:54:b5:82:0b:c5:6e:25:ea:dc:cd:77:b1:91:
         7f:fa:6f:f9:aa:60:17:1f:96:b6:cf:01:7d:96:c8:21:f1:f7:
         ce:f5:41:4f:26:82:e4:8a:dd:05:d1:f7:09:58:b4:c9:95:19:
         e6:11:33:82:92:ae:33:21:6c:47:08:26:a9:b0:a2:06:61:d4:
         d2:8e:43:ba:5b:f9:92:e8:15:69:1b:85:7b:b8:1d:59:a0:95:
         20:60:88:bd:87:4b:b4:38:56:f1:3f:a6:4f:bb:4c:1b:98:1e:
         2b:13:64:a8:93:43:18:94:d7:9f:e2:9a:8f:fa:43:13:5e:d7:
         c8:a3:7d:c2:4a:44:b7:20:d3:de:c7:22:6d:c1:9b:ac:9f:50:
         c2:f8:5c:29:09:2a:24:9c:25:19:6a:06:b0:14:98:3b:f6:29:
         03:08:dc:b9:60:a9:ce:19:fa:e9:66:ed:1b:72:51:1c:25:7c:
         16:95:16:34:af:58:08:67:1e:30:ed:be:cb:70:ee:98:df:85:
         56:e2:a8:c3:b8:b9:51:82:22:38:4c:c6:00:80:ef:bb:45:f1:
         b3:0a:99:fa
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICDUgwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNUklQ
RVRPQUZSSU5JQzExMC8GA1UEBRMoN0Y3QUMxODA4OTc5ODNFMjlFOTM3QzBBMTg3
ODAzQzA3Mjc1NTU0NTAeFw0yNDAxMDEwMDI3MzlaFw0yNTAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNjdCOEQxUkkxMTAvBgNVBAUTKDY1QjNFODE4MUMzREE4RDFE
NjQxRTg0QTQ1QzhFRjgyMzlERDdFQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDJvH8bdiRFTjZX8x87drMTu+nx8GFYaYUtJMhFYu2rNjx4XvHhMdJA
ldBU825rcYnpuJhEJLJBHAZMiP9Vpg7VtjJRrYSYN+9zAG6kxg7cS3KbzEMcVLhR
w/Eq2Q/IEwbF48viOz4UrqQWKHghPTYxzf6QE6SGDlsBeD82C19QiC6LDk/N5xhZ
XjXR4/JHuX5OOm+0CT6QTTy4bmGbzhO97QOQg9bJZrjpPXO6eZXxxoPr3Mh/2d5t
orO4jM9sv0T62Ace7xwtJIYuS2hJW0zzUyfsfQfUQfVgxybRUWyGQyDWE5D20atb
5s3rJ63PzACJGDhpHpyZScCDZBrZl+7lAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
ZbPoGBw9qNHWQehKRcjvgjndfqcwHwYDVR0jBBgwFoAUf3rBgIl5g+Kek3wKGHgD
wHJ1VUUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvcmlw
ZS9mM3JCZ0lsNWctS2VrM3dLR0hnRHdISjFWVVUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvcmlwZS10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjdCOEQxLzJGNjlF
OEMyMjFGMDExRUU4NjQ2OTcwRjRBRDlFNkZDLzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzY3QjhEMS8yRjY5RThDMjIxRjAxMUVFODY0Njk3MEY0QUQ5RTZG
Qy9aYlBvR0J3OXFOSFdRZWhLUmNqdmdqbmRmcWMubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQEUVvgMA0GCSqGSIb3DQEBCwUAA4IBAQCDhe/pPQDdg4r4
3MGCnGiqIvp/lqB6EMJUl0mmlKwRC37i/GHMP9BH2FS1ggvFbiXq3M13sZF/+m/5
qmAXH5a2zwF9lsgh8ffO9UFPJoLkit0F0fcJWLTJlRnmETOCkq4zIWxHCCapsKIG
YdTSjkO6W/mS6BVpG4V7uB1ZoJUgYIi9h0u0OFbxP6ZPu0wbmB4rE2Sok0MYlNef
4pqP+kMTXtfIo33CSkS3INPexyJtwZusn1DC+FwpCSoknCUZagawFJg79ikDCNy5
YKnOGfrpZu0bclEcJXwWlRY0r1gIZx4w7b7LcO6Y34VW4qjDuLlRgiI4TMYAgO+7
RfGzCpn6
-----END CERTIFICATE-----
Generated at Wed May 8 01:07:57 2024 by rpki-client on console-ams.rpki-client.org