Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
File: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer (raw, json)
Hash identifier: bBV5obWB28b3fjtHXuMC6GE0zb3F2jnXWysfemiYklw=
Subject key identifier: F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial: 0F14
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:51:27 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 62.68.32.0/19
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3860 (0xf14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=RIPETOAFRINIC
Validity
Not Before: Jan 1 00:51:27 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36A991DRI
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:97:56:ee:48:0e:c5:00:63:1f:31:c2:3b:af:
93:51:d7:27:2f:3e:ab:f6:02:7a:35:ac:cc:65:a8:
42:e1:ed:02:b3:8f:9f:53:39:d5:7d:f9:27:79:a1:
cc:42:88:de:9e:4f:6b:05:46:92:b6:48:8e:f5:27:
ba:dd:f1:20:db:04:ed:a6:3f:bf:39:9d:70:b8:66:
c7:13:2e:ec:c5:45:59:68:71:0b:81:f8:65:86:b8:
a1:69:5f:25:15:fb:4a:80:b1:c5:f1:a7:19:36:d3:
93:a3:c2:ce:9a:66:46:54:b1:28:e2:0a:1e:cb:ce:
a4:04:bf:f9:04:c5:ef:bd:05:14:4a:c0:52:25:0d:
6d:fa:a8:57:49:3b:e4:e9:8b:34:65:1b:a0:08:3b:
2c:82:4a:f9:87:fb:9b:e6:c8:67:65:f7:87:b5:45:
10:22:72:0c:23:ba:48:1b:8e:86:fa:3c:30:b2:f0:
6f:33:1d:f5:87:63:44:a3:75:e6:93:85:7e:68:9e:
e1:38:23:12:4d:77:2a:17:d2:f4:b9:9a:2d:d4:ae:
37:29:2e:65:1a:fa:37:f8:bf:2b:39:2b:30:5d:3c:
29:6e:97:0a:f5:5d:0d:f1:80:d4:57:4d:1d:81:25:
02:ea:11:17:40:c9:a6:18:82:2e:a3:31:31:52:0b:
8c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
X509v3 Authority Key Identifier:
keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
sbgp-ipAddrBlock: critical
IPv4:
62.68.32.0/19
Signature Algorithm: sha256WithRSAEncryption
3d:dd:35:6a:80:08:3f:15:96:da:bb:5e:26:b9:69:04:db:bc:
38:3d:b1:af:6c:0d:f0:9e:ae:09:81:f1:2e:42:d6:fc:04:4b:
d3:36:08:f6:89:c5:08:4f:5e:e2:ea:b9:6c:6b:59:92:0c:aa:
0c:40:72:b6:17:b4:f9:f8:fb:75:c5:b3:f9:36:a5:c1:53:8e:
1c:44:73:f9:b1:05:fb:30:fa:a0:09:3d:a0:d0:61:9a:c7:b3:
46:62:3d:8f:a6:0c:02:4d:a7:66:b8:c4:de:f9:81:ae:23:a4:
b7:c9:5c:1b:80:46:5c:36:cb:c5:0c:81:f1:46:31:8c:7e:ab:
17:22:01:c5:d9:07:b2:45:ff:19:7f:d7:16:f4:51:5a:d6:44:
71:06:6e:19:12:8f:c7:bc:ba:b8:6f:ee:14:ae:8a:a2:75:4a:
f6:5e:22:5f:9f:37:a1:d4:ed:6f:ff:1f:d9:57:69:65:9e:86:
e2:7d:dd:fb:6f:0a:0e:00:69:5d:cc:df:d8:cc:be:fd:f7:a4:
d5:d3:26:ae:68:3a:b8:57:f5:5b:f3:2d:75:ae:5b:55:8d:56:
b9:db:0b:2f:93:5d:ab:71:90:ae:62:97:bd:0f:61:30:8b:22:
5d:d4:17:25:af:92:3c:52:63:44:57:b5:2d:a4:05:38:63:e9:
93:3d:b1:53
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICDxQwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNUklQ
RVRPQUZSSU5JQzExMC8GA1UEBRMoN0Y3QUMxODA4OTc5ODNFMjlFOTM3QzBBMTg3
ODAzQzA3Mjc1NTU0NTAeFw0yNTAxMDEwMDUxMjdaFw0yNjAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNkE5OTFEUkkxMTAvBgNVBAUTKEY0OEFCRUQzRUNBMzA4RUIy
MkUxQjVBMjQyODRDRkUxRTAzMkNGRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDel1buSA7FAGMfMcI7r5NR1ycvPqv2Ano1rMxlqELh7QKzj59TOdV9
+Sd5ocxCiN6eT2sFRpK2SI71J7rd8SDbBO2mP785nXC4ZscTLuzFRVlocQuB+GWG
uKFpXyUV+0qAscXxpxk205Ojws6aZkZUsSjiCh7LzqQEv/kExe+9BRRKwFIlDW36
qFdJO+TpizRlG6AIOyyCSvmH+5vmyGdl94e1RRAicgwjukgbjob6PDCy8G8zHfWH
Y0SjdeaThX5onuE4IxJNdyoX0vS5mi3UrjcpLmUa+jf4vys5KzBdPClulwr1XQ3x
gNRXTR2BJQLqERdAyaYYgi6jMTFSC4ydAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
9Iq+0+yjCOsi4bWiQoTP4eAyz9IwHwYDVR0jBBgwFoAUf3rBgIl5g+Kek3wKGHgD
wHJ1VUUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvcmlw
ZS9mM3JCZ0lsNWctS2VrM3dLR0hnRHdISjFWVVUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvcmlwZS10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkE5OTFELzY2NkRG
NDU2MTlGMzExRUJBMDM5NjMwOEY4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZBOTkxRC82NjZERjQ1NjE5RjMxMUVCQTAzOTYzMDhGOEFFQTIy
OC85SXEtMC15akNPc2k0YldpUW9UUDRlQXl6OUkubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQFPkQgMA0GCSqGSIb3DQEBCwUAA4IBAQA93TVqgAg/FZba
u14muWkE27w4PbGvbA3wnq4JgfEuQtb8BEvTNgj2icUIT17i6rlsa1mSDKoMQHK2
F7T5+Pt1xbP5NqXBU44cRHP5sQX7MPqgCT2g0GGax7NGYj2PpgwCTadmuMTe+YGu
I6S3yVwbgEZcNsvFDIHxRjGMfqsXIgHF2QeyRf8Zf9cW9FFa1kRxBm4ZEo/HvLq4
b+4UroqidUr2XiJfnzeh1O1v/x/ZV2llnobifd37bwoOAGldzN/YzL7996TV0yau
aDq4V/Vb8y11rltVjVa52wsvk12rcZCuYpe9D2EwiyJd1Bclr5I8UmNEV7UtpAU4
Y+mTPbFT
-----END CERTIFICATE-----
Generated at Sat Apr 5 01:08:40 2025 by rpki-client