Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
File: 3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer (raw, json)
Hash identifier: SKc016m8ZfBvJifk221ftKMQnw2b9DH1+uoR0q7sCrI=
Subject key identifier: DC:FE:A3:84:77:22:D2:FE:C7:A0:39:E9:90:38:F7:53:82:59:D0:31
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial: 0F0E
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:50:21 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 195.24.192.0/19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3854 (0xf0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=RIPETOAFRINIC
Validity
Not Before: Jan 1 00:50:21 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F369591CRI
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:69:2b:b9:80:4d:42:40:4d:38:6b:5e:e8:e6:
55:bc:19:17:33:b4:ae:bf:28:41:0f:d5:31:c4:c6:
6c:de:1c:de:76:3f:b1:54:95:86:ce:c2:93:1d:64:
01:eb:8b:22:20:02:dd:6c:2a:c2:95:07:27:b1:22:
59:3d:65:55:c3:87:00:95:95:98:2f:57:83:31:7b:
d4:1d:14:cd:9a:c4:45:f2:73:d5:ba:98:01:5f:c9:
40:c5:8e:a3:f6:cd:8a:c1:ca:51:88:fd:b0:08:db:
35:da:f6:b5:e0:d2:a6:da:87:11:c9:5d:6a:f4:70:
52:b4:ab:43:7b:77:72:af:86:a7:39:90:b1:f6:56:
04:d2:90:3c:87:9a:54:2e:3a:62:24:69:7e:cf:e0:
1f:43:13:42:0d:61:00:44:7a:92:f9:e5:a9:3f:52:
74:75:b2:c0:76:9f:63:42:18:c4:d7:12:a0:59:aa:
6f:93:34:29:08:7e:cb:be:67:f4:72:6b:9e:d0:37:
0e:7a:dd:86:8b:0a:d8:ce:b5:58:4d:d8:04:4c:4d:
28:59:f1:1e:a5:d4:5d:a7:b6:2e:c3:4e:4c:83:d6:
7d:86:35:f9:e6:30:70:5c:56:24:02:c9:d7:52:4b:
83:97:88:d8:89:72:09:dd:d1:f0:a1:b4:39:69:dc:
6a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FE:A3:84:77:22:D2:FE:C7:A0:39:E9:90:38:F7:53:82:59:D0:31
X509v3 Authority Key Identifier:
keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft
sbgp-ipAddrBlock: critical
IPv4:
195.24.192.0/19
Signature Algorithm: sha256WithRSAEncryption
b7:6f:a6:65:9d:75:06:ac:a7:eb:fb:ee:6d:6d:3d:1b:f1:2d:
f1:b8:2b:1d:fd:e1:f3:c2:6c:2b:8d:7d:45:07:d0:6d:c1:12:
58:dd:53:12:b4:4e:72:89:5e:21:5a:bd:07:d9:63:a5:d5:02:
23:fa:35:72:f7:63:e1:73:3c:e1:72:da:86:e1:6d:34:47:f0:
62:4e:0e:62:36:4d:4f:ab:bc:96:e7:69:fd:e5:98:5b:a1:04:
04:dd:d3:2d:60:d4:fd:a0:6a:9b:71:cb:1f:47:f5:da:0d:db:
66:5d:95:85:6b:ba:07:ec:2a:67:17:85:65:2e:a1:bd:84:f4:
6a:4a:84:94:48:b3:65:ef:8d:bf:3d:a8:89:c5:f4:d3:e5:d5:
a6:88:b9:34:f6:b6:bc:19:99:43:8e:ee:b3:28:0d:e5:8b:44:
7e:af:05:97:37:ad:2f:63:cd:ad:a1:f9:cc:84:b4:5a:6c:1b:
55:1b:51:c5:49:90:9d:0e:76:92:c9:24:bd:58:db:65:9f:72:
30:91:00:f9:b4:b9:81:9a:8e:cb:20:2d:63:c9:fc:a2:10:cf:
9e:55:9c:05:3a:52:e8:dc:73:71:0a:d1:ca:e8:f7:57:36:ab:
4a:a8:52:86:36:e7:a9:36:6c:f2:63:ef:4b:54:63:c6:0a:08:
97:34:29:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:21:38 2025 by rpki-client