Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/ripe/8qncFw2PMqBEwa8QUgRdbU4kIus.cer
File: 8qncFw2PMqBEwa8QUgRdbU4kIus.cer (raw, json)
Hash identifier: zDmK+MKgRiaziwVTgCusHGz8cinKCsIwDgBaRFvdSU0=
Subject key identifier: F2:A9:DC:17:0D:8F:32:A0:44:C1:AF:10:52:04:5D:6D:4E:24:22:EB
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial: 0EFC
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:47:00 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 212.96.16.0/20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3836 (0xefc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=RIPETOAFRINIC
Validity
Not Before: Jan 1 00:47:00 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3650F65RI
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:74:26:a6:03:97:a3:a5:c1:41:e4:5e:91:80:
2b:20:89:b9:55:2b:52:61:4b:c9:41:d5:b6:60:4b:
00:c7:dc:18:a5:f4:f0:b1:2b:fa:1b:3e:46:33:47:
62:3b:35:a3:ee:e4:9d:1c:80:e6:10:97:fe:0c:2c:
a5:4f:27:c3:2b:07:95:db:28:ef:4c:d2:6c:43:6b:
52:59:3d:83:5e:c3:95:0f:78:04:fc:3f:97:87:58:
01:ad:a9:d3:2a:6d:4a:00:40:a2:62:87:9a:c6:7a:
86:fe:f0:fa:67:09:2b:94:d3:30:b0:eb:4b:f6:8e:
b9:66:2a:69:dc:4c:e6:cd:cd:59:68:3c:82:09:03:
ee:04:07:b1:9f:56:e8:1f:02:b1:6b:47:a7:57:29:
2d:35:bf:87:c4:98:98:96:a4:74:6c:6b:9a:93:0e:
d4:00:19:81:b5:58:fd:05:df:8d:57:70:ff:f8:56:
50:03:2c:01:0c:d1:02:be:8a:4e:27:51:4b:7c:5a:
cb:9e:32:7f:0f:d1:8f:ab:37:d7:58:1f:0b:36:03:
5d:27:2f:95:07:18:d5:41:62:d0:99:04:6c:36:30:
a3:98:f1:a6:3d:2e:f7:77:e8:28:d0:f1:94:4c:c6:
8b:4c:5b:a8:d6:3d:18:74:ef:12:e1:7b:1a:94:95:
0c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A9:DC:17:0D:8F:32:A0:44:C1:AF:10:52:04:5D:6D:4E:24:22:EB
X509v3 Authority Key Identifier:
keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.mft
sbgp-ipAddrBlock: critical
IPv4:
212.96.16.0/20
Signature Algorithm: sha256WithRSAEncryption
84:72:81:6c:6c:f2:c8:91:36:b0:99:f0:87:38:74:e2:9f:1e:
4f:66:4d:ee:fc:64:57:69:b6:63:82:8b:f6:a9:28:1e:0f:41:
48:0b:b3:e6:b3:70:f1:5e:96:dd:e3:97:06:65:d8:08:99:82:
26:c4:25:55:10:87:d2:03:13:da:30:f6:ce:26:5f:6a:80:e5:
b9:4e:e8:50:77:57:59:99:02:56:8b:54:94:71:ec:cd:93:09:
b0:0d:37:ef:3c:89:77:d7:bb:aa:8b:10:e9:ca:12:cd:22:2c:
26:3d:bf:8f:02:e2:07:b4:8c:ba:f8:92:15:19:bb:ae:a9:dd:
a1:45:a9:64:83:ac:47:e7:77:5f:6a:d9:9e:12:23:70:54:84:
4f:30:e6:cd:32:4c:90:e6:14:f4:e3:19:cc:be:39:71:fa:b7:
6a:69:7a:50:1c:99:6a:5e:0f:8c:30:7a:45:51:7b:08:8b:43:
f4:05:49:bb:33:5c:58:38:10:40:b4:86:96:dc:2b:1d:59:52:
04:d6:73:d3:af:eb:39:a3:f1:ea:5e:68:d4:f7:bd:e2:96:f4:
72:b6:b9:d8:8b:56:36:46:9d:4a:54:93:07:b2:85:37:cf:f5:
06:18:ae:50:98:9e:95:7a:8d:04:2c:9e:0e:23:83:f9:0f:2c:
90:a8:22:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:17:06 2025 by rpki-client