Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/ripe/VCiBspPW4uKh8hlSyLwDISbuu8k.cer
File: VCiBspPW4uKh8hlSyLwDISbuu8k.cer (raw, json)
Hash identifier: TNkTO/pixFRRXLoSIPl4IxLnS9nF1IoL86pR0YdCzQg=
Subject key identifier: 54:28:81:B2:93:D6:E2:E2:A1:F2:19:52:C8:BC:03:21:26:EE:BB:C9
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial: 0F18
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/VCiBspPW4uKh8hlSyLwDISbuu8k.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:52:11 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 213.154.64.0/19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3864 (0xf18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=RIPETOAFRINIC
Validity
Not Before: Jan 1 00:52:11 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36B52A6RI
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:98:19:e9:cc:72:0c:3d:c8:7d:25:c5:3c:c6:
77:30:98:7e:b0:99:ea:45:d1:54:2a:36:fd:d8:a5:
1b:4b:59:5f:00:64:2e:5f:2b:1e:3e:fe:da:5e:95:
af:cd:9a:85:e8:34:df:a6:72:10:35:ed:c7:f1:f0:
d7:cb:13:cf:16:f3:1a:97:d1:dc:d7:35:86:01:df:
9e:d6:3e:e9:97:e4:2b:2a:73:7e:07:bc:b0:db:0c:
7d:1b:10:1e:7b:14:12:25:34:28:0d:4f:43:68:58:
8b:09:75:45:81:90:08:95:e1:9b:c2:18:1b:0b:c6:
33:8b:7c:76:49:a0:78:47:59:cb:5a:3b:75:bf:df:
fe:3a:8e:0a:d3:0f:a6:ff:fa:5a:14:db:7b:7e:f6:
db:fb:d6:71:aa:c3:f0:59:6a:d9:42:5e:ab:40:37:
6a:96:dd:0c:3f:0f:07:3c:9f:8c:76:ae:53:b4:11:
96:20:9f:66:df:63:0e:a1:c5:e4:9f:c4:e3:6c:5e:
be:6c:a5:40:86:3f:e1:63:68:49:e6:38:03:21:5a:
1d:e9:9f:eb:b1:8e:fd:65:8a:85:4d:a1:09:cd:e9:
29:10:aa:7f:d5:36:84:75:f0:32:be:5b:c4:32:b6:
97:be:ee:b3:5f:4e:09:f3:f5:9a:52:89:72:9d:e1:
95:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:28:81:B2:93:D6:E2:E2:A1:F2:19:52:C8:BC:03:21:26:EE:BB:C9
X509v3 Authority Key Identifier:
keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/VCiBspPW4uKh8hlSyLwDISbuu8k.mft
sbgp-ipAddrBlock: critical
IPv4:
213.154.64.0/19
Signature Algorithm: sha256WithRSAEncryption
84:9e:1f:d4:de:18:47:bb:23:08:09:a8:54:3e:27:f5:40:9d:
82:7b:b7:07:08:1c:48:4b:0a:ee:51:31:38:a5:dd:44:cc:9b:
de:97:ee:ed:d7:01:f7:ce:c9:d6:1b:46:0a:31:3a:64:91:e2:
eb:2b:3a:c0:4d:35:01:a5:88:55:65:4b:2c:6d:68:b5:71:02:
47:87:79:b6:77:a9:92:97:ea:4a:2e:4d:8c:34:ee:8a:3f:88:
40:d6:93:71:9a:a0:68:a5:58:0f:e7:20:c9:32:65:58:bc:92:
53:20:75:1e:87:6f:8c:08:e3:24:6e:7b:fd:b3:19:be:7e:65:
07:37:9b:95:62:46:95:5f:cc:2a:25:19:4a:67:f3:93:b8:7b:
0c:ad:83:46:4d:2f:e1:3c:ec:30:7f:fb:a6:54:6d:cb:a0:5f:
18:08:34:e5:dc:2e:7e:23:12:f0:11:15:60:65:48:d9:90:03:
7c:d5:12:06:d4:db:e1:f1:14:97:b7:28:fc:12:ad:24:ad:79:
c3:3b:3b:ad:3c:11:aa:37:c9:07:e9:f7:ee:7a:2c:1b:d5:ca:
2f:59:3d:79:83:34:b3:69:c5:8c:35:be:ae:0d:b6:5a:f8:02:
aa:fa:bd:0f:06:ab:cd:3e:ab:69:0d:9e:c1:cb:71:3b:19:93:
ac:aa:6c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:18:46 2025 by rpki-client