Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
File: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer (raw, json)
Hash identifier: OjxUz78X6wC+DDaFfM2RPPPKoHJxDs7JRBm8u0ExcKY=
Subject key identifier: F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial: 0D54
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:30:11 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 62.68.32.0/19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3412 (0xd54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Validity
Not Before: Jan 1 00:30:11 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F36A991DRI/serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:97:56:ee:48:0e:c5:00:63:1f:31:c2:3b:af:
93:51:d7:27:2f:3e:ab:f6:02:7a:35:ac:cc:65:a8:
42:e1:ed:02:b3:8f:9f:53:39:d5:7d:f9:27:79:a1:
cc:42:88:de:9e:4f:6b:05:46:92:b6:48:8e:f5:27:
ba:dd:f1:20:db:04:ed:a6:3f:bf:39:9d:70:b8:66:
c7:13:2e:ec:c5:45:59:68:71:0b:81:f8:65:86:b8:
a1:69:5f:25:15:fb:4a:80:b1:c5:f1:a7:19:36:d3:
93:a3:c2:ce:9a:66:46:54:b1:28:e2:0a:1e:cb:ce:
a4:04:bf:f9:04:c5:ef:bd:05:14:4a:c0:52:25:0d:
6d:fa:a8:57:49:3b:e4:e9:8b:34:65:1b:a0:08:3b:
2c:82:4a:f9:87:fb:9b:e6:c8:67:65:f7:87:b5:45:
10:22:72:0c:23:ba:48:1b:8e:86:fa:3c:30:b2:f0:
6f:33:1d:f5:87:63:44:a3:75:e6:93:85:7e:68:9e:
e1:38:23:12:4d:77:2a:17:d2:f4:b9:9a:2d:d4:ae:
37:29:2e:65:1a:fa:37:f8:bf:2b:39:2b:30:5d:3c:
29:6e:97:0a:f5:5d:0d:f1:80:d4:57:4d:1d:81:25:
02:ea:11:17:40:c9:a6:18:82:2e:a3:31:31:52:0b:
8c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
X509v3 Authority Key Identifier:
keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
sbgp-ipAddrBlock: critical
IPv4:
62.68.32.0/19
Signature Algorithm: sha256WithRSAEncryption
4a:19:4a:51:29:9e:15:f3:6a:45:70:a4:cb:ff:7c:82:c6:cc:
5e:e8:5c:e4:5b:13:eb:61:f3:ce:68:b3:37:9a:08:97:f4:64:
98:b1:e0:78:28:14:82:fd:af:a6:96:1f:13:b3:ab:f7:44:af:
21:66:98:2d:eb:58:79:9c:a1:41:2f:cd:7d:ea:b9:21:9b:8f:
ca:fa:77:03:f8:f1:ef:ce:e2:60:9b:aa:d8:1e:80:a6:1c:c7:
0d:4f:eb:2c:af:7f:07:8f:2d:b5:9d:06:c1:02:b1:af:9d:0b:
16:3c:61:61:89:6e:23:3e:61:94:41:2a:69:e1:78:00:29:bf:
40:24:4d:20:9a:50:c3:30:7a:26:ad:68:b6:e7:1b:c6:da:1d:
72:7f:6a:ec:91:aa:3c:11:99:5c:b5:5f:8c:52:be:a9:24:51:
7d:55:a7:7a:31:af:51:09:c4:ba:d3:36:2a:b8:ea:46:2a:90:
8e:80:c9:bf:a2:ae:58:3b:21:07:0e:07:ed:bf:95:d9:d2:2f:
90:8c:80:25:b2:fa:87:6d:5f:36:f8:7e:56:ed:80:45:81:82:
ab:8f:f8:da:d1:22:c4:97:cb:f9:12:da:e6:48:c2:47:e6:ac:
63:71:4d:56:84:91:4c:64:dd:7b:e5:e7:92:88:5d:37:ef:94:
78:c1:04:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:52 2024 by rpki-client on console-fra.rpki-client.org