Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/ripe/gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer
File: gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer (raw, json)
Hash identifier: 2ldNgrPGbqk7UmMFXzOFMiDHVNv+SnifaFsIo1ljShU=
Subject key identifier: 81:06:7B:A0:9A:C6:73:44:F0:2C:D4:E6:4B:6B:F5:E4:CD:73:B8:10
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial: 0F1A
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:52:33 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 80.88.12.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3866 (0xf1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=RIPETOAFRINIC
Validity
Not Before: Jan 1 00:52:33 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36BE2EDRI
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:68:11:b1:b6:96:99:ff:4c:e1:e2:44:3c:61:
0f:35:ec:53:0e:d9:9f:fa:a9:8f:40:04:b6:ea:e7:
b6:59:ba:2b:2d:67:13:13:ef:76:61:67:00:c5:2c:
f2:35:4d:12:bb:78:ac:db:2d:80:ad:e0:b9:4b:47:
31:a1:f9:f9:d5:45:e1:8c:e5:50:ff:3f:ab:04:e4:
36:f8:a3:88:59:68:16:2c:8f:39:b1:fc:66:8f:eb:
c0:94:bc:14:b0:49:89:c7:fb:ae:20:7a:93:45:7c:
49:9d:2d:c2:2c:6c:37:25:b1:61:80:7c:f0:20:01:
cc:3b:b7:08:75:11:57:65:42:b9:bc:62:0c:46:30:
f6:a9:6f:25:05:8a:56:15:bc:74:5c:9e:a7:bc:d4:
f4:a8:e1:33:cf:71:4d:4f:b9:cb:d9:1d:69:bd:c6:
1d:95:73:18:ca:6e:9c:56:2e:f5:e4:42:bc:3d:78:
ef:4c:2c:a8:5d:c4:70:78:86:36:8e:d4:0e:c9:1f:
6e:47:1f:51:d2:66:af:c5:58:e9:3a:00:55:80:e8:
0f:1d:8e:59:e3:58:5b:fe:b4:02:6a:4a:56:9b:88:
27:ac:f4:a0:22:05:02:28:f4:20:39:09:da:c8:17:
5d:1e:69:cd:6b:8f:e7:26:e6:5e:b4:bc:02:d7:66:
02:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:06:7B:A0:9A:C6:73:44:F0:2C:D4:E6:4B:6B:F5:E4:CD:73:B8:10
X509v3 Authority Key Identifier:
keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.mft
sbgp-ipAddrBlock: critical
IPv4:
80.88.12.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:b9:1f:45:87:21:7a:15:a8:bf:d4:b7:fd:c7:7f:6f:2a:de:
90:1f:54:69:cb:4b:79:be:e4:f4:b4:71:19:f8:87:01:ab:97:
92:49:0f:3b:fb:22:37:51:13:74:ed:60:03:4e:aa:17:3f:87:
e1:42:c0:ac:a0:9a:f9:8f:aa:17:b6:13:16:c0:e7:9f:92:c5:
70:cf:dc:7a:38:11:2d:33:22:c7:57:20:40:a9:53:ac:d0:58:
9f:e6:a0:33:c5:43:d9:bb:e8:c6:3b:82:7a:8a:28:10:79:65:
c6:f8:67:ea:6d:3d:74:9b:67:97:8b:38:7a:4c:00:b9:fa:df:
29:fc:81:ff:b0:75:d0:71:f3:6e:ef:eb:83:4d:e2:12:3d:f5:
e4:a1:9b:48:94:bf:80:77:bc:69:aa:85:d9:9a:23:11:9e:00:
c0:22:82:a9:7b:cd:4d:d0:33:56:99:13:29:9a:54:ae:d6:f4:
a1:05:4e:0e:19:d0:e7:2c:f8:41:52:5e:cf:fd:bb:91:0a:5d:
08:4b:c6:42:4a:d5:de:5f:e7:43:3a:4d:75:ed:03:c5:d7:3d:
8b:02:2d:f6:37:c5:e5:c7:00:d8:e5:fb:ac:f1:33:ec:30:66:
02:c1:7d:6f:c5:06:bc:ba:1d:3c:76:3d:3c:5b:68:4e:59:ba:
f9:34:14:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:17:54 2025 by rpki-client