Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/bynJvMAklSDlBwZp-vZmUm98jzA.cer
File:                     bynJvMAklSDlBwZp-vZmUm98jzA.cer (raw, json)
Hash identifier:          gMAex0okJyu7IC8Riskj2vwPPdh9OZ0u11wek0RSr34=
Subject key identifier:   6F:29:C9:BC:C0:24:95:20:E5:07:06:69:FA:F6:66:52:6F:7C:8F:30
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       0D60
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:33:32 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 80.95.0.0/21

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:25:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3424 (0xd60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
        Validity
            Not Before: Jan  1 00:33:32 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36D289CRI/serialNumber=6F29C9BCC0249520E5070669FAF666526F7C8F30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:dc:1d:30:2e:77:87:ef:43:66:61:16:ee:a3:
                    f2:69:ab:7a:1c:c1:4c:aa:73:19:a5:b5:de:cb:23:
                    04:95:cf:19:4f:18:f7:b0:6b:6c:8c:14:c1:9e:b0:
                    24:eb:c0:02:98:25:29:21:7d:d0:26:5e:3d:02:7c:
                    c8:61:50:67:c3:6a:47:97:4e:14:aa:c8:56:78:20:
                    9e:74:29:1a:d7:60:ca:07:2d:66:c8:28:b2:f5:13:
                    94:f9:db:c8:55:ea:da:2c:f7:6c:af:33:e1:65:a7:
                    b2:50:82:9a:0c:66:d3:29:29:c7:8f:df:f5:e8:bc:
                    fb:86:b7:e2:76:a0:39:1a:b2:ba:19:cd:ca:e5:e2:
                    47:ea:b1:6f:3c:22:f1:ae:13:4d:de:62:36:59:80:
                    0d:a6:60:b5:da:76:8e:35:13:ff:57:39:ef:1b:ad:
                    df:37:0a:0e:e9:bb:77:f9:17:46:f4:11:d8:06:53:
                    1c:f8:f1:c8:78:49:cb:c6:fd:7a:8d:32:6b:92:8b:
                    3a:50:0a:0f:63:e4:17:e1:f3:7c:06:7a:7a:ba:6e:
                    da:9c:3a:4b:e2:94:f7:00:17:7c:c9:e7:e4:71:7c:
                    51:bf:f9:f0:56:41:26:39:19:03:0e:4f:d8:e6:32:
                    54:3a:70:22:9b:5a:77:6e:4e:ce:d2:c2:7d:d8:68:
                    c6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:29:C9:BC:C0:24:95:20:E5:07:06:69:FA:F6:66:52:6F:7C:8F:30
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.95.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         04:b2:b5:59:53:aa:f7:92:36:7f:c8:63:33:27:2e:a2:c3:c4:
         a0:d2:40:89:23:40:77:07:fa:dd:f7:9c:55:26:e5:3c:40:9a:
         a6:d1:66:f7:30:fa:aa:22:6e:ff:66:ea:97:13:eb:24:30:3e:
         85:1a:fa:b3:2e:37:25:56:4f:7d:5e:57:6b:70:25:bc:e8:09:
         cd:66:5f:36:25:00:37:78:e8:a0:77:c2:fd:fc:f5:bd:2c:6e:
         b2:10:8c:f2:25:43:71:6b:19:90:b1:53:6f:94:f5:06:5f:ef:
         cc:2b:9f:50:d9:13:1f:1b:8a:98:35:48:56:26:dc:b3:f1:cc:
         dc:80:7d:e2:10:d8:42:f2:b5:7d:54:84:6e:b1:fc:3f:eb:7c:
         a1:6a:7f:0b:70:c1:10:f0:f3:c7:db:cd:d0:18:33:d3:81:df:
         10:c9:c5:19:e4:09:08:ce:e2:7d:f1:7b:7c:f9:e8:81:73:49:
         dd:69:57:ad:ce:e7:e5:f3:3c:3d:49:cf:d7:82:74:d4:70:58:
         3e:f9:e5:95:e6:c6:13:ee:00:c0:74:02:6e:60:80:25:6a:8c:
         f9:23:cb:3c:0f:31:7c:bc:c5:fe:53:da:50:61:99:f1:39:05:
         00:c2:f8:c4:ae:93:c4:84:bf:79:50:e9:73:b1:9d:c6:ad:7d:
         d7:49:3d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:58:12 2024 by rpki-client on console-fra.rpki-client.org