Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/i-GoLMm4kURYOcv-vplg8wM9pUI.cer
File:                     i-GoLMm4kURYOcv-vplg8wM9pUI.cer (raw, json)
Hash identifier:          a7LKY45MlLtsNts6PbOTMOHUPfe/UslJzJzAyod75Hc=
Subject key identifier:   8B:E1:A8:2C:C9:B8:91:44:58:39:CB:FE:BE:99:60:F3:03:3D:A5:42
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       0FEB
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F365FABE/D9B8221A534111F0994039DADAE4EC9C/i-GoLMm4kURYOcv-vplg8wM9pUI.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F365FABE/D9B8221A534111F0994039DADAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Fri 27 Jun 2025 10:31:32 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 193.110.104.0/23
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Jul 2025 00:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4075 (0xfeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545
        Validity
            Not Before: Jun 27 10:31:32 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F365FABERI, serialNumber=8BE1A82CC9B891445839CBFEBE9960F3033DA542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:78:eb:0d:2a:15:27:29:a5:23:fe:0a:b3:89:
                    57:29:ce:e4:6a:e7:3c:94:f4:78:f1:58:7c:fd:66:
                    5a:04:66:4c:6a:71:11:8b:5d:94:ea:a7:35:bb:8c:
                    c1:5a:6c:d2:a8:82:60:f0:97:95:3f:c3:64:8c:6c:
                    00:de:e2:7b:1b:01:1c:ac:11:58:9f:49:d3:92:27:
                    e9:de:d6:f3:62:84:90:2f:26:56:35:49:f1:85:b2:
                    69:b1:3b:d1:ff:66:59:b0:66:a4:fe:f3:f6:90:85:
                    c6:14:1c:bd:cb:bd:2b:e5:03:4a:d2:a7:51:01:94:
                    4d:a3:a2:6f:03:53:d7:f4:ab:46:2b:c8:b1:92:c8:
                    bf:6c:3d:60:89:ec:37:c5:93:17:79:9b:d8:94:8f:
                    1e:0d:9c:5d:e8:ad:ce:e7:ed:3a:dc:d2:81:7f:a9:
                    35:11:fd:e8:3b:f7:22:3f:32:20:be:13:9e:3f:78:
                    8e:4e:9d:f4:a4:1b:eb:47:02:0e:bf:f6:13:c3:31:
                    3b:a4:dc:7c:6e:1e:af:06:62:33:7c:e5:b2:80:33:
                    dc:d7:46:78:7c:a4:a3:06:6a:cd:97:f9:7a:66:6a:
                    fd:63:e3:94:d9:7c:58:2d:99:81:59:09:55:83:0d:
                    42:2c:e5:17:50:94:0b:f1:23:c5:71:73:4e:d6:56:
                    01:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E1:A8:2C:C9:B8:91:44:58:39:CB:FE:BE:99:60:F3:03:3D:A5:42
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365FABE/D9B8221A534111F0994039DADAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365FABE/D9B8221A534111F0994039DADAE4EC9C/i-GoLMm4kURYOcv-vplg8wM9pUI.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.110.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c4:47:47:ad:e4:ca:16:a7:d3:61:af:3d:f7:d0:8a:24:a4:39:
         d4:ff:2c:25:38:fe:7f:90:3b:41:6e:7f:2d:8c:da:34:d0:bd:
         ad:af:69:24:1f:31:de:3d:39:f7:50:9a:b3:84:69:08:5b:41:
         08:1b:29:27:bb:e8:52:af:d1:7a:48:ab:f3:32:25:91:d2:16:
         df:b3:1c:c3:5a:aa:4c:42:ce:52:09:27:c7:bb:6b:ea:d2:df:
         6d:a0:49:b6:7e:53:94:5a:38:cf:94:06:4b:bd:37:53:27:47:
         b7:93:3c:b1:5c:73:14:ff:00:3e:ad:35:61:c6:60:80:59:bd:
         0e:f1:cf:73:d9:bd:f8:00:c1:02:c6:d6:ab:dc:0f:a8:b6:d1:
         93:04:8a:f7:19:08:05:c6:da:d8:4a:bd:db:d7:1d:72:e7:45:
         13:d9:48:6e:c4:fb:f5:ed:76:3e:33:a1:26:60:cc:05:fa:7a:
         61:f3:ca:f5:a2:e1:26:2f:18:f0:39:d9:04:16:99:47:b5:bd:
         1a:0c:9b:2b:2d:29:10:4b:76:eb:8e:21:16:b6:14:57:a1:ac:
         58:c2:13:a7:60:4d:03:5a:ec:4a:46:42:b7:41:c2:6f:68:eb:
         1b:cf:74:d8:20:75:c9:db:88:7e:31:ea:6b:89:4c:ca:b5:05:
         63:3a:d2:52
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICD+swDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNUklQ
RVRPQUZSSU5JQzExMC8GA1UEBRMoN0Y3QUMxODA4OTc5ODNFMjlFOTM3QzBBMTg3
ODAzQzA3Mjc1NTU0NTAeFw0yNTA2MjcxMDMxMzJaFw0yNjAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNjVGQUJFUkkxMTAvBgNVBAUTKDhCRTFBODJDQzlCODkxNDQ1
ODM5Q0JGRUJFOTk2MEYzMDMzREE1NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDLeOsNKhUnKaUj/gqziVcpzuRq5zyU9HjxWHz9ZloEZkxqcRGLXZTq
pzW7jMFabNKogmDwl5U/w2SMbADe4nsbARysEVifSdOSJ+ne1vNihJAvJlY1SfGF
smmxO9H/ZlmwZqT+8/aQhcYUHL3LvSvlA0rSp1EBlE2jom8DU9f0q0YryLGSyL9s
PWCJ7DfFkxd5m9iUjx4NnF3orc7n7Trc0oF/qTUR/eg79yI/MiC+E54/eI5OnfSk
G+tHAg6/9hPDMTuk3HxuHq8GYjN85bKAM9zXRnh8pKMGas2X+Xpmav1j45TZfFgt
mYFZCVWDDUIs5RdQlAvxI8Vxc07WVgEDAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
i+GoLMm4kURYOcv+vplg8wM9pUIwHwYDVR0jBBgwFoAUf3rBgIl5g+Kek3wKGHgD
wHJ1VUUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvcmlw
ZS9mM3JCZ0lsNWctS2VrM3dLR0hnRHdISjFWVVUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvcmlwZS10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjVGQUJFL0Q5Qjgy
MjFBNTM0MTExRjA5OTQwMzlEQURBRTRFQzlDLzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzY1RkFCRS9EOUI4MjIxQTUzNDExMUYwOTk0MDM5REFEQUU0RUM5
Qy9pLUdvTE1tNGtVUllPY3YtdnBsZzh3TTlwVUkubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBwW5oMA0GCSqGSIb3DQEBCwUAA4IBAQDER0et5MoWp9Nh
rz330IokpDnU/ywlOP5/kDtBbn8tjNo00L2tr2kkHzHePTn3UJqzhGkIW0EIGykn
u+hSr9F6SKvzMiWR0hbfsxzDWqpMQs5SCSfHu2vq0t9toEm2flOUWjjPlAZLvTdT
J0e3kzyxXHMU/wA+rTVhxmCAWb0O8c9z2b34AMECxtar3A+ottGTBIr3GQgFxtrY
Sr3b1x1y50UT2UhuxPv17XY+M6EmYMwF+nph88r1ouEmLxjwOdkEFplHtb0aDJsr
LSkQS3brjiEWthRXoaxYwhOnYE0DWuxKRkK3QcJvaOsbz3TYIHXJ24h+MepriUzK
tQVjOtJS
-----END CERTIFICATE-----
Generated at Tue Jul 1 19:55:47 2025 by rpki-client