Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/ripe/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer
File: BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer (raw, json)
Hash identifier: hsYJClyf79xILlkUQgvlhRCyWGsGtaxjxD2j4BloFi8=
Subject key identifier: 04:C9:0B:0F:6B:6E:59:94:F6:65:87:E3:70:F7:F7:CB:E6:61:12:07
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial: 0D3E
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:25:11 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 80.88.3.0/24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:25:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3390 (0xd3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Validity
Not Before: Jan 1 00:25:11 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F3615826RI/serialNumber=04C90B0F6B6E5994F66587E370F7F7CBE6611207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:27:28:74:f3:29:75:1e:03:5c:1e:6d:c9:46:
e4:da:11:fc:29:8f:e3:9e:00:0c:c9:8d:7e:0d:a5:
7d:4a:48:b1:1d:89:76:d0:7d:75:cb:13:26:74:55:
fd:d9:36:54:2c:8b:33:d0:17:51:6f:cb:6a:e6:da:
c2:1b:05:3c:03:f9:cb:65:1f:c6:f1:cf:13:9a:c4:
0c:69:d4:13:c6:88:23:aa:8a:10:a1:ec:db:e6:9d:
8c:38:66:9c:2c:9d:4a:fe:b3:ab:a9:dd:c6:78:b8:
09:31:dd:37:35:b1:9c:94:42:2c:d9:94:03:10:5d:
66:01:c7:6a:9b:e9:0f:83:63:fb:ba:a5:34:a9:6b:
98:fb:4f:7f:f0:a1:f2:06:48:8d:d8:9d:1d:69:eb:
93:c3:49:67:7c:1d:a0:de:23:4e:44:f3:de:59:05:
0b:08:be:8c:a5:f9:10:67:22:d7:1d:6b:7e:30:c2:
91:af:c5:49:d8:aa:e9:b5:a3:fb:58:f0:6b:05:53:
31:d3:15:d5:2d:83:bc:69:c5:c5:7d:3d:e6:bd:e9:
8a:91:b9:38:8f:85:7b:4a:59:89:e8:0d:8b:1e:9e:
29:f4:e0:63:fd:df:53:f9:2a:39:f6:32:94:3f:a8:
43:12:32:a9:db:9b:8b:b2:1d:5b:aa:40:15:13:61:
81:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C9:0B:0F:6B:6E:59:94:F6:65:87:E3:70:F7:F7:CB:E6:61:12:07
X509v3 Authority Key Identifier:
keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft
sbgp-ipAddrBlock: critical
IPv4:
80.88.3.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:1f:a2:3f:86:1f:d2:b4:21:18:2c:af:4b:02:de:fd:38:fc:
69:8e:0c:96:27:1d:2a:a7:8e:c5:5e:f4:35:17:2e:f6:ab:c3:
c8:a5:e6:c8:45:cf:7c:81:a0:fe:b2:38:f8:2a:74:4e:8e:08:
ce:27:85:6b:25:53:4f:3b:ed:26:c8:e6:2f:02:e1:1a:ba:ce:
f4:45:b8:12:24:7a:a2:d8:ae:8e:73:8c:a1:fa:ff:d4:f6:da:
c2:cd:79:64:bf:d5:c1:86:82:4c:0e:09:88:e4:8c:22:f6:de:
9a:18:7f:11:e1:f8:36:12:6c:94:b2:c7:dc:22:74:15:de:29:
40:a2:6b:16:d1:bd:77:82:33:7d:ac:50:65:ed:97:9c:e1:2e:
d1:3d:da:a8:47:51:fe:11:ac:33:2e:a2:1e:74:52:da:12:1e:
08:80:44:4c:20:b6:29:39:f2:c5:46:31:b0:fb:d6:ad:dd:94:
fb:4b:79:04:9b:94:8a:37:7f:37:64:57:5e:58:d4:9e:88:32:
f2:a1:a6:66:ea:61:1a:e5:23:c4:db:5a:49:d5:7a:0e:bb:a9:
32:14:38:fe:c7:73:61:6e:26:bf:05:3f:91:b0:b4:ac:4c:d1:
2b:9e:08:a0:24:05:06:f0:8b:fd:98:0d:2b:81:d5:bd:de:a4:
61:28:32:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 02:00:58 2024 by rpki-client on console-ams.rpki-client.org