Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/mwftdzFoum4LC-Pl3LLPeB96yCo.cer
File:                     mwftdzFoum4LC-Pl3LLPeB96yCo.cer (raw, json)
Hash identifier:          /vbcTSyhLa503tMKyXeVlxqDY44xCj78Thw1YE5+Smc=
Subject key identifier:   9B:07:ED:77:31:68:BA:6E:0B:0B:E3:E5:DC:B2:CF:78:1F:7A:C8:2A
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       0D44
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:26:31 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 80.240.192.0/20
                          IP: 217.21.112.0/20

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:25:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3396 (0xd44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
        Validity
            Not Before: Jan  1 00:26:31 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3668037RI/serialNumber=9B07ED773168BA6E0B0BE3E5DCB2CF781F7AC82A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:75:cf:0b:1e:92:6d:e8:59:c4:b4:ef:43:f8:
                    10:ac:2f:43:fc:fc:95:b0:17:a6:3c:fd:71:89:77:
                    81:a8:36:b8:de:51:e6:05:85:3c:4b:b1:74:00:fb:
                    b1:40:03:d6:f2:1b:57:9f:37:cb:3e:4a:cb:c9:79:
                    3c:d6:e7:c2:5a:51:b4:ef:c0:b3:c4:c6:5a:70:df:
                    58:0b:b5:ab:a9:4c:21:00:0a:da:be:5e:02:65:2f:
                    db:b0:e7:93:73:85:4e:0b:04:73:4d:e3:9b:80:e9:
                    ab:b3:5c:a1:d9:1e:ac:50:c1:fd:7d:cd:05:3b:bb:
                    b9:e9:2c:56:e6:a3:c9:19:da:ec:18:ef:b9:d5:c9:
                    a6:b4:52:b6:e6:e1:fd:8c:14:b4:0b:9c:67:30:c1:
                    48:cc:42:6b:cc:00:1e:92:14:d2:4d:f4:7a:2a:0f:
                    c8:51:97:56:35:62:e3:c4:3e:86:31:11:93:f4:4d:
                    3b:f7:a0:1f:82:38:9e:f5:45:f6:00:28:84:34:83:
                    8e:e7:3e:7f:22:eb:df:4c:e6:5d:16:a4:cf:99:1e:
                    df:22:ee:94:ac:e2:6e:cf:eb:78:84:73:5a:06:cd:
                    86:43:d7:ae:85:3f:36:20:23:fd:47:99:72:01:f5:
                    e6:e0:b8:3f:95:6e:ba:98:36:eb:ad:b0:33:83:d6:
                    1f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:07:ED:77:31:68:BA:6E:0B:0B:E3:E5:DC:B2:CF:78:1F:7A:C8:2A
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.240.192.0/20
                  217.21.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a4:84:91:40:4e:aa:e9:4a:ca:85:82:4b:47:44:c7:98:08:35:
         26:0f:0a:be:3b:43:71:c4:cc:1a:84:dd:aa:48:1a:30:40:8d:
         8c:68:06:9f:24:bc:1c:4a:7b:39:70:b1:21:3e:e7:27:e5:db:
         83:03:62:d6:54:b6:29:ed:ab:61:ee:e9:b0:d7:7e:71:1e:9c:
         36:51:a8:0e:f2:ca:5e:3b:db:a9:72:ce:85:34:79:3b:b9:ed:
         32:05:e8:9c:5e:1d:5a:5a:28:11:6d:91:14:ef:01:3c:c0:47:
         9a:83:00:0c:6f:f0:b7:46:59:ed:82:24:1e:6e:32:35:f9:f7:
         90:0e:8b:f4:eb:49:e3:9b:08:e0:15:fa:53:3b:6c:6e:1b:33:
         da:5d:4f:72:2a:2a:48:8e:62:44:2f:c5:d8:c7:f6:1e:4c:57:
         30:5c:33:b1:9b:3b:fe:28:29:30:9b:9b:dc:8e:d4:a5:6a:c6:
         99:d3:e3:5a:ce:38:b7:1a:f5:2a:95:65:92:2f:b7:40:9c:3b:
         d3:f9:8b:ef:16:2b:e0:20:fc:95:ec:f7:a6:2c:e1:36:e1:19:
         74:f3:0c:63:e9:5e:87:15:68:22:a6:45:a8:86:99:59:0f:7e:
         fa:9d:f7:c7:47:ce:70:49:e2:f5:d4:f7:8f:5f:80:14:85:e3:
         8a:fb:0b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:58:12 2024 by rpki-client on console-fra.rpki-client.org