Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer
File:                     gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer (raw, json)
Hash identifier:          ENUpJFR3tVbeIrE2Is1YV7aGmPeWV+/7c/QqAvGxGeo=
Subject key identifier:   81:06:7B:A0:9A:C6:73:44:F0:2C:D4:E6:4B:6B:F5:E4:CD:73:B8:10
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       0D5A
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:32:04 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 80.88.12.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:30:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3418 (0xd5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
        Validity
            Not Before: Jan  1 00:32:04 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36BE2EDRI/serialNumber=81067BA09AC67344F02CD4E64B6BF5E4CD73B810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:68:11:b1:b6:96:99:ff:4c:e1:e2:44:3c:61:
                    0f:35:ec:53:0e:d9:9f:fa:a9:8f:40:04:b6:ea:e7:
                    b6:59:ba:2b:2d:67:13:13:ef:76:61:67:00:c5:2c:
                    f2:35:4d:12:bb:78:ac:db:2d:80:ad:e0:b9:4b:47:
                    31:a1:f9:f9:d5:45:e1:8c:e5:50:ff:3f:ab:04:e4:
                    36:f8:a3:88:59:68:16:2c:8f:39:b1:fc:66:8f:eb:
                    c0:94:bc:14:b0:49:89:c7:fb:ae:20:7a:93:45:7c:
                    49:9d:2d:c2:2c:6c:37:25:b1:61:80:7c:f0:20:01:
                    cc:3b:b7:08:75:11:57:65:42:b9:bc:62:0c:46:30:
                    f6:a9:6f:25:05:8a:56:15:bc:74:5c:9e:a7:bc:d4:
                    f4:a8:e1:33:cf:71:4d:4f:b9:cb:d9:1d:69:bd:c6:
                    1d:95:73:18:ca:6e:9c:56:2e:f5:e4:42:bc:3d:78:
                    ef:4c:2c:a8:5d:c4:70:78:86:36:8e:d4:0e:c9:1f:
                    6e:47:1f:51:d2:66:af:c5:58:e9:3a:00:55:80:e8:
                    0f:1d:8e:59:e3:58:5b:fe:b4:02:6a:4a:56:9b:88:
                    27:ac:f4:a0:22:05:02:28:f4:20:39:09:da:c8:17:
                    5d:1e:69:cd:6b:8f:e7:26:e6:5e:b4:bc:02:d7:66:
                    02:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:06:7B:A0:9A:C6:73:44:F0:2C:D4:E6:4B:6B:F5:E4:CD:73:B8:10
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.88.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:df:de:50:b7:12:d5:13:3f:5b:a3:00:9c:f3:97:3b:6d:d1:
         c9:5e:32:bd:b8:33:08:7c:e0:6f:91:79:66:01:e7:7f:b0:72:
         88:49:0f:fc:dc:09:6e:31:3d:cc:02:c7:62:cc:e9:b3:4e:93:
         5a:3e:c7:50:09:3c:29:86:ba:b8:03:c8:00:6a:9f:92:27:7f:
         eb:e4:d1:56:6d:90:df:59:db:e9:76:2d:d1:77:eb:f6:ba:f7:
         de:d4:c0:1a:7f:7e:94:30:37:77:49:cf:f2:f0:57:47:c3:88:
         56:97:ff:de:e6:79:f2:33:42:5e:fe:8e:c9:21:66:09:50:8d:
         ce:b6:f5:97:aa:c9:0e:e9:c4:19:1e:38:f1:27:c8:97:57:42:
         27:6a:4c:d0:e0:02:00:df:34:9a:62:b2:b2:94:06:6a:cd:fa:
         06:c7:40:03:c1:c7:6e:bd:b8:bb:18:7d:ae:68:3e:40:27:17:
         56:21:f1:1a:93:5f:cc:58:26:bf:63:ed:14:fe:18:6c:4a:c9:
         b5:e6:04:84:9a:7d:ab:d8:10:19:04:20:a4:bf:9a:2d:ef:04:
         70:24:3f:2a:96:6c:76:d3:9f:c2:b0:77:ec:24:6e:52:a0:28:
         9b:e2:2c:73:1f:3d:10:53:d9:0b:79:9e:c6:e4:6b:9b:9c:6d:
         35:48:15:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:52 2024 by rpki-client on console-fra.rpki-client.org