Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/00oZ5jEGlkvQLLLYrRgH35prGQE.cer
File:                     00oZ5jEGlkvQLLLYrRgH35prGQE.cer (raw, json)
Hash identifier:          LKblwX6VPkqX+5B56CEh+E8d26+ROD/d77JKqICYltw=
Subject key identifier:   D3:4A:19:E6:31:06:96:4B:D0:2C:B2:D8:AD:18:07:DF:9A:6B:19:01
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       11DB
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36D987F/134C6996844211F1A57466E5CE1D38B0/00oZ5jEGlkvQLLLYrRgH35prGQE.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36D987F/134C6996844211F1A57466E5CE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 20 Jul 2026 13:51:23 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 83.143.24.0/21
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Jul 2026 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4571 (0x11db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545
        Validity
            Not Before: Jul 20 13:51:23 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36D987FRI, serialNumber=D34A19E63106964BD02CB2D8AD1807DF9A6B1901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d4:b1:b3:2f:b4:ac:a1:e6:c0:e7:89:b1:25:
                    a3:f8:46:c4:3f:f3:ee:92:a1:b0:8b:27:00:e5:fd:
                    f3:3f:19:ec:d6:de:f2:b9:db:93:cd:c6:f7:6c:46:
                    8e:dd:31:f6:0e:e9:5b:42:52:14:81:dc:f2:a4:3a:
                    a7:fc:d9:48:18:20:ba:f7:ce:4d:b5:87:ed:9b:cd:
                    7f:f3:ed:14:57:51:fa:02:b5:a3:ad:72:c2:0e:aa:
                    5f:86:6d:1b:0c:50:82:54:c5:51:ad:0d:e0:72:06:
                    35:c4:b3:0b:19:53:5b:fd:24:9a:f8:ea:f8:fb:ef:
                    1b:78:c3:c0:1e:e7:00:06:cd:ae:f3:25:16:9b:28:
                    c1:62:7b:27:a7:43:73:ac:03:8c:a8:db:ad:c9:4c:
                    49:9e:3b:da:f7:67:99:f5:2f:c7:09:08:67:72:66:
                    49:44:65:7f:27:e7:9a:f6:51:ff:64:a6:02:13:de:
                    39:cb:eb:8b:3b:53:50:6f:5a:3f:c9:4b:62:40:9f:
                    de:e8:a0:71:3a:c2:b0:d3:3b:5a:1f:7c:24:f5:83:
                    0a:32:a5:50:ac:38:30:2e:51:12:f8:60:04:db:a8:
                    ca:e0:a0:49:ba:d4:52:84:94:07:9f:6f:92:af:1b:
                    01:2a:e8:88:40:e6:d3:55:d7:2c:c1:ff:cd:80:7e:
                    16:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4A:19:E6:31:06:96:4B:D0:2C:B2:D8:AD:18:07:DF:9A:6B:19:01
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/134C6996844211F1A57466E5CE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/134C6996844211F1A57466E5CE1D38B0/00oZ5jEGlkvQLLLYrRgH35prGQE.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.143.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6d:d7:85:a9:74:ee:ed:d8:91:03:70:b4:99:e0:b7:40:80:66:
         d2:77:b2:c9:59:d7:21:e1:7e:39:84:7e:ff:07:3a:32:cc:db:
         4e:85:ac:1c:76:6a:d6:31:df:69:eb:5c:ad:78:7f:98:7b:a6:
         34:3b:41:50:d2:b3:f7:65:65:4b:45:cb:55:a5:f8:3d:09:0f:
         f2:c0:1c:df:fb:33:16:55:7e:9a:43:e0:c4:6a:35:a1:8c:1a:
         2a:37:12:48:49:4e:bd:f8:8b:4c:06:59:e9:43:cc:95:ae:02:
         42:36:76:e5:e8:0c:81:be:6e:dd:f1:54:2e:fe:26:d0:d5:57:
         6d:51:b3:09:79:8d:70:86:60:d3:3e:06:ad:3b:e8:31:63:ae:
         7e:82:8b:54:ae:c6:48:13:34:39:00:68:3f:a8:19:2f:96:03:
         d7:22:49:36:16:07:b8:f1:b8:6a:9f:10:31:d7:c9:aa:7b:aa:
         19:b9:41:43:69:b4:57:89:9e:d4:97:00:c5:0d:bc:6a:60:08:
         0c:ef:c0:6c:77:5b:54:78:b2:05:be:9d:a4:05:6a:97:dc:04:
         cc:da:e8:05:b2:7c:b0:8f:a6:88:3e:af:e1:19:80:0a:d6:a9:
         dd:84:0f:67:73:d6:f7:f2:cb:42:71:82:ec:01:f0:13:84:21:
         44:81:d3:fb
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICEdswDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNUklQ
RVRPQUZSSU5JQzExMC8GA1UEBRMoN0Y3QUMxODA4OTc5ODNFMjlFOTM3QzBBMTg3
ODAzQzA3Mjc1NTU0NTAeFw0yNjA3MjAxMzUxMjNaFw0yNzAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNkQ5ODdGUkkxMTAvBgNVBAUTKEQzNEExOUU2MzEwNjk2NEJE
MDJDQjJEOEFEMTgwN0RGOUE2QjE5MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQC51LGzL7SsoebA54mxJaP4RsQ/8+6SobCLJwDl/fM/GezW3vK525PN
xvdsRo7dMfYO6VtCUhSB3PKkOqf82UgYILr3zk21h+2bzX/z7RRXUfoCtaOtcsIO
ql+GbRsMUIJUxVGtDeByBjXEswsZU1v9JJr46vj77xt4w8Ae5wAGza7zJRabKMFi
eyenQ3OsA4yo263JTEmeO9r3Z5n1L8cJCGdyZklEZX8n55r2Uf9kpgIT3jnL64s7
U1BvWj/JS2JAn97ooHE6wrDTO1offCT1gwoypVCsODAuURL4YATbqMrgoEm61FKE
lAefb5KvGwEq6IhA5tNV1yzB/82AfhaTAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
00oZ5jEGlkvQLLLYrRgH35prGQEwHwYDVR0jBBgwFoAUf3rBgIl5g+Kek3wKGHgD
wHJ1VUUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvcmlw
ZS9mM3JCZ0lsNWctS2VrM3dLR0hnRHdISjFWVVUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvcmlwZS10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkQ5ODdGLzEzNEM2
OTk2ODQ0MjExRjFBNTc0NjZFNUNFMUQzOEIwLzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZEOTg3Ri8xMzRDNjk5Njg0NDIxMUYxQTU3NDY2RTVDRTFEMzhC
MC8wMG9aNWpFR2xrdlFMTExZclJnSDM1cHJHUUUubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQDU48YMA0GCSqGSIb3DQEBCwUAA4IBAQBt14WpdO7t2JED
cLSZ4LdAgGbSd7LJWdch4X45hH7/BzoyzNtOhawcdmrWMd9p61yteH+Ye6Y0O0FQ
0rP3ZWVLRctVpfg9CQ/ywBzf+zMWVX6aQ+DEajWhjBoqNxJISU69+ItMBlnpQ8yV
rgJCNnbl6AyBvm7d8VQu/ibQ1VdtUbMJeY1whmDTPgatO+gxY65+gotUrsZIEzQ5
AGg/qBkvlgPXIkk2Fge48bhqnxAx18mqe6oZuUFDabRXiZ7UlwDFDbxqYAgM78Bs
d1tUeLIFvp2kBWqX3ATM2ugFsnywj6aIPq/hGYAK1qndhA9nc9b38stCcYLsAfAT
hCFEgdP7
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:00:48 2026 by rpki-client