Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer
File: 8GzMRNUs-b4RXOx6TaaxMJukOaU.cer (raw, json)
Hash identifier: 1uF3VybFIZcBVrYudbrwqFiiYbhum/rrpBd2bSpMKwc=
Subject key identifier: F0:6C:CC:44:D5:2C:F9:BE:11:5C:EC:7A:4D:A6:B1:30:9B:A4:39:A5
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial: 0E9D
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 10 Oct 2024 08:32:05 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 80.88.2.0/24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Oct 2024 00:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3741 (0xe9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Validity
Not Before: Oct 10 08:32:05 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F36390A9RI/serialNumber=F06CCC44D52CF9BE115CEC7A4DA6B1309BA439A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a3:b3:5c:ae:26:87:4d:d8:3a:58:ae:14:d9:
36:82:62:ca:18:ba:0d:e1:70:d6:82:f6:97:83:93:
b5:d8:29:1c:50:6a:d9:d1:a1:22:9e:30:39:28:86:
45:f6:c5:59:ad:6e:1a:29:5e:22:c8:0e:77:64:77:
1f:94:df:f7:a2:ad:d1:8f:1a:30:3c:ea:1f:c4:f3:
bb:1e:81:57:48:2a:00:7a:9c:8e:19:61:9b:5c:df:
72:62:5a:b6:bf:8a:ef:a3:08:bb:89:5f:69:9e:59:
0e:2a:92:65:6e:72:d1:58:d1:46:b6:ff:1e:3d:0c:
04:88:4b:9c:3f:89:13:a7:74:3c:03:f5:1a:e8:26:
97:f9:90:33:53:73:42:b1:d2:ce:d8:91:bd:50:1c:
14:68:99:b5:ed:f6:a1:4d:f4:65:de:45:f2:36:d9:
9a:d3:7f:77:51:3a:7b:9e:4f:a5:e2:57:68:17:e9:
d4:08:40:ff:7f:d9:fa:a9:d4:7e:98:2d:2b:d7:08:
23:ee:99:27:3f:65:d3:4d:a2:fe:76:de:9e:8a:f8:
60:58:bb:c2:36:3b:a0:26:7d:31:c3:79:7c:75:f5:
5a:c2:82:4b:14:1a:21:fc:ae:34:9a:a6:6c:96:72:
16:d7:af:82:d1:91:4f:79:32:39:54:99:c8:51:60:
5b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6C:CC:44:D5:2C:F9:BE:11:5C:EC:7A:4D:A6:B1:30:9B:A4:39:A5
X509v3 Authority Key Identifier:
keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
sbgp-ipAddrBlock: critical
IPv4:
80.88.2.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:a4:7f:93:23:6b:8e:2c:3d:49:ab:0f:d0:5d:50:47:47:17:
fe:25:32:33:a0:39:75:e8:9e:5f:a0:c9:d1:e2:98:e5:19:e8:
a1:6a:80:47:be:04:3a:28:27:8d:ea:5b:7c:27:52:4b:01:e7:
1c:e5:88:cc:89:bd:0e:32:57:19:78:6d:cd:77:3b:bc:7d:4e:
a7:4c:1f:c2:c1:ce:da:46:0b:f0:fe:55:30:f3:63:d7:05:a9:
c8:e9:15:57:d8:6c:df:ec:cd:8f:af:ae:62:dd:9c:72:c4:f4:
b8:27:00:b0:63:fb:18:07:18:48:b5:12:dd:f0:b2:87:a5:fe:
d3:e2:d4:e0:81:dd:73:17:66:61:a1:c9:bb:32:62:1f:08:98:
ca:05:2b:3f:22:73:9e:81:d1:86:65:de:0f:c0:cf:b8:dd:f5:
40:ad:f5:10:81:84:70:c6:bc:6e:5b:3f:5b:b4:ab:04:ea:d4:
1b:a8:41:0a:ab:de:d1:f7:ef:d2:db:b0:6f:cf:e5:5a:35:21:
6f:80:7d:0c:01:f1:5f:35:7f:e1:f9:da:e0:e5:a5:2c:46:29:
2b:0d:ef:4a:7d:3c:6f:92:62:c7:51:f6:f4:6e:d8:66:94:37:
3d:99:52:f9:e6:da:75:4c:9e:07:89:48:a5:60:49:bd:6c:90:
6c:27:d7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 02:29:16 2024 by rpki-client on console-fra.rpki-client.org