Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
File: 3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer (raw, json)
Hash identifier: NTkqwpfBfJccAeKb44qGAZn8sYNMm4wcl1GtnDRjcGE=
Subject key identifier: DC:FE:A3:84:77:22:D2:FE:C7:A0:39:E9:90:38:F7:53:82:59:D0:31
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial: 0D4E
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:02 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 195.24.192.0/19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:25:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3406 (0xd4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Validity
Not Before: Jan 1 00:29:02 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F369591CRI/serialNumber=DCFEA3847722D2FEC7A039E99038F7538259D031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:69:2b:b9:80:4d:42:40:4d:38:6b:5e:e8:e6:
55:bc:19:17:33:b4:ae:bf:28:41:0f:d5:31:c4:c6:
6c:de:1c:de:76:3f:b1:54:95:86:ce:c2:93:1d:64:
01:eb:8b:22:20:02:dd:6c:2a:c2:95:07:27:b1:22:
59:3d:65:55:c3:87:00:95:95:98:2f:57:83:31:7b:
d4:1d:14:cd:9a:c4:45:f2:73:d5:ba:98:01:5f:c9:
40:c5:8e:a3:f6:cd:8a:c1:ca:51:88:fd:b0:08:db:
35:da:f6:b5:e0:d2:a6:da:87:11:c9:5d:6a:f4:70:
52:b4:ab:43:7b:77:72:af:86:a7:39:90:b1:f6:56:
04:d2:90:3c:87:9a:54:2e:3a:62:24:69:7e:cf:e0:
1f:43:13:42:0d:61:00:44:7a:92:f9:e5:a9:3f:52:
74:75:b2:c0:76:9f:63:42:18:c4:d7:12:a0:59:aa:
6f:93:34:29:08:7e:cb:be:67:f4:72:6b:9e:d0:37:
0e:7a:dd:86:8b:0a:d8:ce:b5:58:4d:d8:04:4c:4d:
28:59:f1:1e:a5:d4:5d:a7:b6:2e:c3:4e:4c:83:d6:
7d:86:35:f9:e6:30:70:5c:56:24:02:c9:d7:52:4b:
83:97:88:d8:89:72:09:dd:d1:f0:a1:b4:39:69:dc:
6a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FE:A3:84:77:22:D2:FE:C7:A0:39:E9:90:38:F7:53:82:59:D0:31
X509v3 Authority Key Identifier:
keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft
sbgp-ipAddrBlock: critical
IPv4:
195.24.192.0/19
Signature Algorithm: sha256WithRSAEncryption
22:c9:01:31:00:1c:1d:1a:bb:73:21:fe:32:78:49:20:1a:5a:
03:20:4d:6b:00:c4:45:96:de:20:d7:68:db:c1:1f:f2:b3:4e:
c1:2d:7c:f3:c8:de:e6:b2:52:d3:91:6a:5f:90:4c:64:9c:c1:
ed:15:f8:9b:90:98:62:e9:bd:bf:f1:80:3d:b8:d4:56:4b:c2:
b4:50:b0:82:03:9f:4e:40:f5:be:8e:bd:86:0b:9b:23:8c:68:
61:e6:03:5e:d5:f2:40:1b:99:57:9e:ad:31:d0:c4:2a:ba:9f:
f0:85:ff:89:88:c0:da:ea:d8:fd:a7:94:93:1b:cc:8a:0d:6d:
68:c3:78:78:b3:de:6c:ea:2e:17:96:f8:f0:d2:35:e3:b5:60:
42:a9:05:71:af:b7:07:73:53:50:4c:4b:d2:02:4e:88:87:45:
9a:d4:1b:08:98:bc:13:dc:4d:1c:ec:bc:75:94:ef:6f:96:1c:
dd:48:26:36:53:7e:b6:90:87:5a:32:65:bd:68:a1:aa:34:cc:
26:67:c1:7d:ae:b4:27:0f:83:4b:1c:19:45:87:63:b3:81:9e:
9e:a5:57:ea:36:21:6a:9f:b4:12:7c:c4:24:08:77:a6:44:7b:
8c:b0:c6:8b:6e:b0:49:e4:41:43:e3:94:41:0d:b3:94:d1:9d:
b9:41:c6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:58:12 2024 by rpki-client on console-fra.rpki-client.org