Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
File:                     nYezEXqhvXgot91GTXMHa66NzJY.cer (raw, json)
Hash identifier:          7DWwT32UrjXI7Qy4O1nzyKFPS3dl9N3G+smTf5xLFXE=
Subject key identifier:   9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       0D4A
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:27:59 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 81.26.72.0/21

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:25:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3402 (0xd4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
        Validity
            Not Before: Jan  1 00:27:59 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F367F26DRI/serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:73:59:9e:da:81:84:63:ac:32:5d:ef:5f:3d:
                    92:be:f9:36:37:50:85:66:bd:e3:16:74:96:f8:a7:
                    47:ae:f5:fc:7d:da:d8:e9:3c:80:1b:59:2d:a5:86:
                    10:14:aa:7e:1e:4b:67:a0:98:b7:06:f9:71:7f:73:
                    fc:48:6e:56:2c:a3:8d:89:a7:8d:d5:b2:cc:c7:3f:
                    e8:6a:bf:ef:c5:ff:9e:98:d5:28:f0:24:f4:11:65:
                    3a:03:85:b0:5a:99:63:c6:23:db:de:28:4d:98:b3:
                    1c:fe:84:10:ec:76:3b:76:d3:1e:1d:8e:7d:1d:4d:
                    a4:00:a8:29:79:51:df:ef:14:65:e3:b7:dd:32:b3:
                    08:da:4a:03:9e:2d:8a:39:32:79:40:be:7e:30:ca:
                    1c:85:b1:22:d0:53:02:82:8e:34:78:eb:19:88:67:
                    25:00:0f:24:a7:45:e4:48:21:70:74:8e:f9:17:f6:
                    1f:1a:b1:90:db:98:f9:85:3d:0f:23:11:ec:6d:7e:
                    71:ca:49:34:a8:a1:cf:ab:77:55:05:b7:4c:1a:f5:
                    ec:23:da:52:ac:95:94:55:82:ac:89:2d:8e:41:20:
                    34:63:56:db:0a:fe:10:53:3f:44:4c:39:59:33:b2:
                    ff:90:63:7a:30:2e:8b:95:88:cd:7f:70:4d:bd:2e:
                    f7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.26.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a8:db:a1:7b:b8:c7:2e:cb:34:d5:ad:68:cd:d2:0b:fe:d5:c4:
         57:8d:6a:0c:e1:0c:37:18:07:4e:ad:9b:ff:b4:3d:8b:4c:79:
         e9:1c:d3:6b:0a:aa:38:f2:88:dc:d0:b4:6c:4b:38:6a:73:51:
         00:3b:9d:ac:71:9d:00:6f:7c:1e:f7:c9:df:9d:53:7e:5f:50:
         9c:41:c7:3a:eb:5c:ec:31:2d:55:9c:75:c7:dd:96:98:e7:0a:
         1d:a5:ff:29:d2:78:5d:aa:50:59:30:7f:f8:45:40:56:a2:88:
         fd:93:88:02:49:f0:cf:73:19:54:f2:57:d7:66:4f:e0:14:94:
         ff:0d:ab:f0:30:ec:19:fb:4f:7f:62:2e:fa:f2:cd:49:9e:d2:
         d6:8e:09:23:26:24:a3:95:2c:d7:1d:a2:b2:fe:42:14:f5:39:
         62:41:f2:b2:b9:e6:82:19:cd:c6:09:f8:6d:0e:1b:60:d0:4c:
         04:c1:91:1e:3a:1b:2a:2a:96:de:11:c0:36:77:5c:92:e4:d6:
         78:41:e5:03:ea:1b:92:1a:39:db:3f:7d:af:ec:a0:88:ce:d5:
         e4:ee:a6:f8:4d:88:71:0b:70:0d:cd:74:a7:cd:bb:a4:64:6a:
         8b:bd:d9:bc:83:6e:20:9e:74:1a:b9:99:6a:ed:9e:d6:3a:a9:
         0f:26:41:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 02:00:58 2024 by rpki-client on console-ams.rpki-client.org