Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/ripe/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer
File: BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer (raw, json)
Hash identifier: rS2pcd7r7ooWVJNNDn+2116kQ37UYpf+i3iwIY8mG5c=
Subject key identifier: 04:C9:0B:0F:6B:6E:59:94:F6:65:87:E3:70:F7:F7:CB:E6:61:12:07
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial: 0EF2
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:45:08 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 80.88.3.0/24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3826 (0xef2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=RIPETOAFRINIC
Validity
Not Before: Jan 1 00:45:08 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3615826RI
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:27:28:74:f3:29:75:1e:03:5c:1e:6d:c9:46:
e4:da:11:fc:29:8f:e3:9e:00:0c:c9:8d:7e:0d:a5:
7d:4a:48:b1:1d:89:76:d0:7d:75:cb:13:26:74:55:
fd:d9:36:54:2c:8b:33:d0:17:51:6f:cb:6a:e6:da:
c2:1b:05:3c:03:f9:cb:65:1f:c6:f1:cf:13:9a:c4:
0c:69:d4:13:c6:88:23:aa:8a:10:a1:ec:db:e6:9d:
8c:38:66:9c:2c:9d:4a:fe:b3:ab:a9:dd:c6:78:b8:
09:31:dd:37:35:b1:9c:94:42:2c:d9:94:03:10:5d:
66:01:c7:6a:9b:e9:0f:83:63:fb:ba:a5:34:a9:6b:
98:fb:4f:7f:f0:a1:f2:06:48:8d:d8:9d:1d:69:eb:
93:c3:49:67:7c:1d:a0:de:23:4e:44:f3:de:59:05:
0b:08:be:8c:a5:f9:10:67:22:d7:1d:6b:7e:30:c2:
91:af:c5:49:d8:aa:e9:b5:a3:fb:58:f0:6b:05:53:
31:d3:15:d5:2d:83:bc:69:c5:c5:7d:3d:e6:bd:e9:
8a:91:b9:38:8f:85:7b:4a:59:89:e8:0d:8b:1e:9e:
29:f4:e0:63:fd:df:53:f9:2a:39:f6:32:94:3f:a8:
43:12:32:a9:db:9b:8b:b2:1d:5b:aa:40:15:13:61:
81:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C9:0B:0F:6B:6E:59:94:F6:65:87:E3:70:F7:F7:CB:E6:61:12:07
X509v3 Authority Key Identifier:
keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft
sbgp-ipAddrBlock: critical
IPv4:
80.88.3.0/24
Signature Algorithm: sha256WithRSAEncryption
17:a5:15:50:19:2f:57:3f:67:ba:85:7c:e9:e2:61:20:cf:a0:
4b:b2:74:a3:a4:e2:04:a3:77:f6:87:19:78:30:da:dc:24:2a:
3f:cd:3d:0f:98:7c:e4:9a:9a:86:e5:3e:fb:10:00:fd:76:28:
b5:cf:4c:b2:15:f9:fe:cb:2d:f0:60:13:7e:12:2e:38:20:41:
1a:00:ca:37:d0:14:bb:a2:d7:d2:52:46:41:2a:1e:21:bf:bd:
5a:bf:14:bc:e1:26:b4:a4:d7:88:75:53:ec:e6:eb:d0:f5:55:
04:c7:03:c3:4a:a6:e3:db:10:ee:7d:4e:45:79:b9:e7:81:3e:
7a:14:01:78:96:fd:6f:08:a5:5e:cb:cb:4a:7a:bd:89:41:a1:
47:6f:df:8e:af:af:a0:81:41:5f:c3:9a:e8:bb:d6:94:5d:ff:
4d:99:9f:85:02:ab:79:aa:8a:0c:9e:a9:d0:a0:6c:9d:f5:f7:
5d:a1:c5:13:13:2e:85:13:3d:15:90:5a:ae:41:6b:0a:89:73:
23:ef:5e:29:49:44:0e:3c:93:1e:5f:a1:e7:53:b4:a5:32:a7:
08:f8:f4:1e:e4:ff:53:56:b3:2b:a7:ed:23:d5:a6:5b:73:c0:
2d:7d:94:8f:af:90:24:b8:31:4d:32:75:f8:4d:a2:92:a5:45:
d6:f4:e2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:20:07 2025 by rpki-client