Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/qEB8UNNVEmlZXYTPEkOl86_4EHA.cer
File:                     qEB8UNNVEmlZXYTPEkOl86_4EHA.cer (raw, json)
Hash identifier:          5dDfEjLMRfsnupw/vpJgEIbM5sQrmaAbUSrZe4gKk5c=
Subject key identifier:   A8:40:7C:50:D3:55:12:69:59:5D:84:CF:12:43:A5:F3:AF:F8:10:70
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       0D42
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:26:02 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 80.88.11.0/24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:25:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3394 (0xd42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
        Validity
            Not Before: Jan  1 00:26:02 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F365C895RI/serialNumber=A8407C50D3551269595D84CF1243A5F3AFF81070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:26:64:88:f1:16:16:3f:ee:a6:1e:d8:3e:7c:
                    c7:d9:cb:27:5c:47:44:19:70:15:a3:67:b1:da:3d:
                    a9:7b:19:72:2c:22:a7:0b:cf:a8:43:a6:f9:20:6e:
                    a2:36:13:bf:f7:4a:47:3e:7b:3a:10:60:c4:f8:da:
                    dd:64:17:93:02:8f:82:dd:ee:e2:d8:62:d7:bc:9a:
                    68:c4:10:5a:9c:b8:8c:49:16:27:f7:f2:c6:60:d5:
                    ff:ae:dc:a5:92:95:3b:3d:57:db:71:a6:99:7b:5b:
                    72:d3:52:57:89:c1:5a:20:36:6e:0b:bc:c9:c8:b0:
                    a2:8a:b8:26:59:af:14:d9:0b:d2:f9:e0:51:f8:bd:
                    3a:28:93:bd:df:47:98:25:d7:1e:3c:f3:97:54:10:
                    7e:40:cc:6a:13:f1:33:9f:01:d6:ee:f5:65:b4:fb:
                    92:46:24:bf:9d:83:e9:3d:5e:6c:20:63:5a:e6:02:
                    c2:67:91:31:00:b1:c7:58:a0:fa:48:3d:5b:8b:d5:
                    af:cc:dd:91:8a:f3:09:29:3f:2b:84:d8:60:48:06:
                    d0:80:7e:9f:f4:3e:1b:3e:f5:ac:91:f9:48:78:be:
                    a2:ab:86:01:d4:7f:58:43:c9:36:7e:7e:bb:1d:0a:
                    87:56:99:9c:01:b2:b9:33:57:05:8a:39:a6:12:d3:
                    47:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:40:7C:50:D3:55:12:69:59:5D:84:CF:12:43:A5:F3:AF:F8:10:70
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.88.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:c8:bf:4e:04:20:0e:95:86:fd:10:1a:5e:7c:93:9e:58:8b:
         c4:6d:3c:79:53:76:aa:59:e5:1a:81:10:c3:57:cc:fb:9d:50:
         7a:e0:cb:b7:ca:ff:09:82:d4:c7:b0:fe:2c:5a:93:aa:88:a8:
         9e:b2:f8:fc:c0:67:93:af:a9:99:f4:13:2a:96:1e:11:52:fd:
         fc:b8:db:76:a4:b5:8f:5b:6f:73:de:fb:24:73:69:fb:0e:ff:
         8e:18:3c:f9:42:96:41:34:79:35:6a:34:65:08:4c:91:da:ed:
         88:8e:b2:3a:da:89:b4:6a:d2:bd:0a:c4:64:b8:92:3a:02:8c:
         fb:ae:31:0d:96:fb:88:b5:9c:25:d3:c9:c9:4c:99:33:10:42:
         c2:c7:5b:e3:39:55:9b:0a:09:4d:09:73:53:11:dc:37:a1:f5:
         64:9f:da:b4:c6:85:8c:8d:20:6b:61:0b:07:57:da:00:3c:06:
         e9:00:d9:06:bc:ff:7e:21:e2:8b:28:31:c9:d6:52:10:61:56:
         ec:33:14:89:08:b5:f9:6d:6f:4f:83:9f:51:e9:50:63:08:ef:
         de:58:fb:3a:99:47:25:98:ea:61:fd:c2:18:1f:3c:05:fc:19:
         ef:fe:9d:b5:8a:a0:7c:24:6f:5d:75:e7:db:b4:1c:9b:da:6d:
         cd:a8:bc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 02:00:58 2024 by rpki-client on console-ams.rpki-client.org