Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer
File: dP2KmbmPfFmCclePXqFPEhiXqVs.cer (raw, json)
Hash identifier: 0eRZkfRFAIn9eBoPxVCQ/XQZry+F9SFgSqDXpgtvpFQ=
Subject key identifier: 74:FD:8A:99:B9:8F:7C:59:82:72:57:8F:5E:A1:4F:12:18:97:A9:5B
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial: 0D52
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:42 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 212.0.128.0/19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 May 2024 00:25:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3410 (0xd52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Validity
Not Before: Jan 1 00:29:42 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F369C738RI/serialNumber=74FD8A99B98F7C598272578F5EA14F121897A95B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:ba:bb:d2:66:6a:ba:28:5a:81:43:81:23:
bf:9d:51:e2:c8:1a:8d:f2:50:57:8e:b0:37:5a:e2:
12:97:62:3c:9f:f3:b4:4b:32:17:ec:f6:cd:c1:80:
e9:7a:8a:53:0b:18:e8:f0:11:66:eb:bd:32:08:ea:
2d:9a:19:e3:83:29:22:02:0f:bb:5a:3d:16:a0:2a:
57:47:9b:31:41:d4:72:8a:32:b2:3f:bb:63:9e:f7:
5c:94:74:f3:15:ef:db:83:cc:05:32:88:0c:22:37:
61:44:03:b7:b5:40:32:e8:3e:aa:17:4d:87:01:74:
6b:4b:94:67:5c:20:2e:26:a8:dc:c9:db:b6:a5:38:
d7:71:0e:bf:50:a8:b3:4a:7a:a4:78:d3:ff:1a:21:
36:78:6a:68:5b:7d:35:bf:5a:77:b6:3e:f7:d0:91:
f4:73:15:ae:89:42:25:bf:72:ba:e4:6e:65:c1:b0:
4c:c0:de:0f:12:e8:e6:4d:82:a6:57:b5:6b:00:8c:
cf:0b:3a:8e:81:bb:af:99:7d:5b:32:f5:c0:93:94:
fc:b6:78:7d:8f:77:31:0c:57:7c:f5:92:79:66:4a:
d3:62:f7:97:17:28:e1:b8:12:74:d6:1c:3f:e5:34:
b1:72:b4:8f:19:ab:71:15:8f:75:1c:d8:3e:f2:82:
85:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FD:8A:99:B9:8F:7C:59:82:72:57:8F:5E:A1:4F:12:18:97:A9:5B
X509v3 Authority Key Identifier:
keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
sbgp-ipAddrBlock: critical
IPv4:
212.0.128.0/19
Signature Algorithm: sha256WithRSAEncryption
6c:27:b7:46:2c:62:85:b3:78:bd:c9:b3:a0:53:a9:40:41:e4:
4e:b7:02:e6:48:32:92:e4:05:3b:8b:eb:64:80:12:fe:db:f9:
d7:33:48:95:56:b5:50:15:76:fe:99:b4:bd:31:64:15:50:19:
ea:4f:a3:fe:be:6f:67:d4:de:e4:63:54:b9:cb:ba:9f:ad:0b:
53:e6:c6:fd:71:ae:f1:9d:1b:e3:07:6d:01:53:d1:1a:45:45:
9a:87:a7:23:39:be:5f:b9:eb:78:02:69:be:72:c0:13:4d:ad:
f8:6b:f6:a3:ae:61:28:65:d8:51:a4:75:07:51:a4:c8:fb:f8:
ab:ec:0b:5a:d4:54:81:44:cc:b1:1b:7d:5f:2a:2f:d3:51:72:
06:16:41:9a:f8:3d:96:b8:10:d9:9b:aa:fe:66:60:f6:fc:80:
0a:81:d3:de:b5:3a:02:01:a5:ef:09:31:df:d9:0a:76:e0:b9:
05:53:1c:a9:ed:77:11:a6:0f:6d:26:f7:ee:d8:94:3d:ff:d9:
7b:e1:d6:f6:35:42:7f:36:56:2d:33:84:6d:68:96:31:22:a0:
82:f2:f2:1e:ff:c3:71:5e:3e:5c:ab:68:25:ea:9e:46:9f:79:
8b:77:ca:b7:55:48:7d:21:db:23:c2:8e:d4:e0:84:f2:63:ed:
7a:fd:e8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 01:07:57 2024 by rpki-client on console-ams.rpki-client.org