Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/ripe/1F-q3w0PsrIYxNl-HvQbwMkznC8.cer
File: 1F-q3w0PsrIYxNl-HvQbwMkznC8.cer (raw, json)
Hash identifier: pEQr+A60oSWY/kcRrRbGG0Tp9jeeN4neU7ayipYIlpw=
Subject key identifier: D4:5F:AA:DF:0D:0F:B2:B2:18:C4:D9:7E:1E:F4:1B:C0:C9:33:9C:2F
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial: 0FF8
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Tue 08 Jul 2025 11:38:57 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 80.249.64.0/20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4088 (0xff8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545
Validity
Not Before: Jul 8 11:38:57 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3651B12RI, serialNumber=D45FAADF0D0FB2B218C4D97E1EF41BC0C9339C2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fd:f5:e7:88:dd:94:b3:ad:95:3e:c2:c1:3c:
34:bf:c1:de:4a:58:4d:0b:01:cd:64:88:cd:f3:3a:
8d:ca:65:cc:e4:4d:a2:71:38:b4:e7:13:00:ee:80:
ab:86:14:af:69:4d:ca:9f:f6:86:2d:3f:a0:64:0a:
68:2b:30:8a:e9:25:17:9a:36:51:20:9f:e6:be:82:
66:d1:02:f5:c8:47:0c:a7:10:ba:4f:45:7b:a6:28:
41:0f:96:b0:ac:54:bf:aa:7c:e5:ed:dc:a0:34:1c:
76:7b:5e:e6:42:c4:3b:46:b6:99:2d:27:4f:20:1d:
9f:48:af:d0:29:ac:b7:34:a6:ac:53:77:40:f8:a0:
92:d1:8f:5c:34:e3:7c:d9:d1:f2:d6:3b:eb:b4:dd:
31:24:1c:cd:3f:ac:68:c8:c7:cb:49:ff:e5:3e:89:
c9:ff:d7:69:bb:ae:ae:03:4a:0d:5a:8a:07:42:1b:
06:46:64:01:db:9b:d2:b3:83:ea:77:cb:39:1f:fb:
1d:6d:1c:c1:c8:ef:22:e1:c6:38:8d:f7:55:45:8f:
56:a3:3b:e9:04:21:21:28:07:d3:e6:dc:90:5f:83:
44:c7:25:2e:1c:f6:52:45:e7:21:f9:98:87:1b:d8:
c3:d9:cd:c9:84:55:4f:c1:b4:ab:2a:9a:89:1d:43:
5e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5F:AA:DF:0D:0F:B2:B2:18:C4:D9:7E:1E:F4:1B:C0:C9:33:9C:2F
X509v3 Authority Key Identifier:
keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
sbgp-ipAddrBlock: critical
IPv4:
80.249.64.0/20
Signature Algorithm: sha256WithRSAEncryption
2f:20:eb:5e:59:7c:e4:be:85:fc:8c:b0:0d:ed:53:51:a6:f2:
01:be:59:b5:68:56:09:8b:80:36:c3:c8:bf:d8:51:eb:06:fa:
db:5d:4d:4a:1f:a9:c8:fa:52:bb:f9:10:b2:b2:62:ea:6d:41:
51:98:43:e6:83:58:f0:e3:d2:ba:d3:80:6c:79:41:10:f5:1b:
7e:e2:6f:79:48:58:ac:13:7c:93:f4:8d:b4:25:b9:a1:4f:75:
8e:99:bb:b1:5d:98:14:56:f9:4c:50:e3:de:5b:4a:eb:15:22:
20:2b:16:10:97:58:7b:67:e5:51:ce:5c:af:fe:98:d5:62:93:
da:7c:f2:ec:10:a7:cf:72:d1:d2:16:ae:ab:65:95:46:a6:bb:
1f:af:bb:95:f1:9e:f3:6e:00:3e:5e:1b:ca:da:67:94:9f:42:
bc:d1:57:c5:7e:d6:34:fb:b9:10:23:39:b4:d1:b1:06:23:36:
5f:92:ba:87:9d:70:1e:fa:74:95:ed:7f:f8:a1:b5:7a:71:0c:
8f:c3:86:c0:2b:df:ea:d2:c1:1a:81:24:26:27:68:f2:21:5c:
d1:8d:bf:20:08:90:21:22:f2:b5:4f:af:25:9d:80:17:f2:e7:
5b:6c:71:24:5f:15:36:b6:2b:11:af:8c:8b:f6:82:86:b8:fb:
53:a1:b3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:58:17 2025 by rpki-client