Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer
File: dP2KmbmPfFmCclePXqFPEhiXqVs.cer (raw, json)
Hash identifier: 2LL1qyXgeBRiJonvJRKLq/Q4yexHpVqtjOIDk4QZo6E=
Subject key identifier: 74:FD:8A:99:B9:8F:7C:59:82:72:57:8F:5E:A1:4F:12:18:97:A9:5B
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial: 0F12
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:51:05 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 212.0.128.0/19
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3858 (0xf12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=RIPETOAFRINIC
Validity
Not Before: Jan 1 00:51:05 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F369C738RI
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:ba:bb:d2:66:6a:ba:28:5a:81:43:81:23:
bf:9d:51:e2:c8:1a:8d:f2:50:57:8e:b0:37:5a:e2:
12:97:62:3c:9f:f3:b4:4b:32:17:ec:f6:cd:c1:80:
e9:7a:8a:53:0b:18:e8:f0:11:66:eb:bd:32:08:ea:
2d:9a:19:e3:83:29:22:02:0f:bb:5a:3d:16:a0:2a:
57:47:9b:31:41:d4:72:8a:32:b2:3f:bb:63:9e:f7:
5c:94:74:f3:15:ef:db:83:cc:05:32:88:0c:22:37:
61:44:03:b7:b5:40:32:e8:3e:aa:17:4d:87:01:74:
6b:4b:94:67:5c:20:2e:26:a8:dc:c9:db:b6:a5:38:
d7:71:0e:bf:50:a8:b3:4a:7a:a4:78:d3:ff:1a:21:
36:78:6a:68:5b:7d:35:bf:5a:77:b6:3e:f7:d0:91:
f4:73:15:ae:89:42:25:bf:72:ba:e4:6e:65:c1:b0:
4c:c0:de:0f:12:e8:e6:4d:82:a6:57:b5:6b:00:8c:
cf:0b:3a:8e:81:bb:af:99:7d:5b:32:f5:c0:93:94:
fc:b6:78:7d:8f:77:31:0c:57:7c:f5:92:79:66:4a:
d3:62:f7:97:17:28:e1:b8:12:74:d6:1c:3f:e5:34:
b1:72:b4:8f:19:ab:71:15:8f:75:1c:d8:3e:f2:82:
85:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FD:8A:99:B9:8F:7C:59:82:72:57:8F:5E:A1:4F:12:18:97:A9:5B
X509v3 Authority Key Identifier:
keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
sbgp-ipAddrBlock: critical
IPv4:
212.0.128.0/19
Signature Algorithm: sha256WithRSAEncryption
ab:64:e2:b9:54:48:8b:3b:ee:29:3b:f4:20:78:74:fb:92:45:
e9:35:36:38:e2:24:73:bc:dc:9d:98:c3:b1:3f:ac:01:ef:0d:
b9:bc:e6:18:47:0a:21:42:16:f5:ad:1a:e6:16:61:ee:28:f0:
a9:4c:10:76:0b:70:4f:93:48:88:22:04:14:16:61:13:81:bc:
04:d1:0a:56:af:0a:a1:d7:32:6f:6f:6d:57:0a:eb:aa:55:11:
00:20:10:66:b3:44:1f:78:f4:89:81:1c:5f:a3:29:44:a8:2a:
1e:b8:6e:3f:e0:58:d5:27:ff:a2:8b:75:97:12:e1:db:8e:9f:
30:4b:92:7b:75:be:f4:38:b8:f4:50:98:1d:b6:e0:5c:69:ec:
23:fd:1e:56:18:da:8e:0a:b5:f6:a0:1f:9f:a6:34:f4:fb:7c:
ae:91:72:ba:40:4d:e3:18:a3:62:c3:21:82:93:1f:17:37:48:
fc:83:d1:8b:17:d9:e0:74:e3:a2:ed:91:58:29:e0:f9:0e:73:
ab:dd:39:fc:05:1a:95:59:52:e5:4b:3c:27:3a:00:7e:17:1e:
41:f5:17:16:75:08:9b:db:e5:ac:aa:b7:da:5c:9d:f8:32:69:
5e:58:ea:77:84:09:3f:fb:b4:be:62:f7:8a:94:21:2c:a6:58:
68:41:5e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:20:06 2025 by rpki-client