
Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/ripe/mwftdzFoum4LC-Pl3LLPeB96yCo.cer
File: mwftdzFoum4LC-Pl3LLPeB96yCo.cer (raw, json)
Hash identifier: wqMcExsMYRVHd4ij2jyGrBfJAXDPQ5Idh6TDGeKZLXY=
Subject key identifier: 9B:07:ED:77:31:68:BA:6E:0B:0B:E3:E5:DC:B2:CF:78:1F:7A:C8:2A
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial: 0F00
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:47:46 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 80.240.192.0/20
IP: 217.21.112.0/20
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3840 (0xf00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=RIPETOAFRINIC
Validity
Not Before: Jan 1 00:47:46 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3668037RI
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:75:cf:0b:1e:92:6d:e8:59:c4:b4:ef:43:f8:
10:ac:2f:43:fc:fc:95:b0:17:a6:3c:fd:71:89:77:
81:a8:36:b8:de:51:e6:05:85:3c:4b:b1:74:00:fb:
b1:40:03:d6:f2:1b:57:9f:37:cb:3e:4a:cb:c9:79:
3c:d6:e7:c2:5a:51:b4:ef:c0:b3:c4:c6:5a:70:df:
58:0b:b5:ab:a9:4c:21:00:0a:da:be:5e:02:65:2f:
db:b0:e7:93:73:85:4e:0b:04:73:4d:e3:9b:80:e9:
ab:b3:5c:a1:d9:1e:ac:50:c1:fd:7d:cd:05:3b:bb:
b9:e9:2c:56:e6:a3:c9:19:da:ec:18:ef:b9:d5:c9:
a6:b4:52:b6:e6:e1:fd:8c:14:b4:0b:9c:67:30:c1:
48:cc:42:6b:cc:00:1e:92:14:d2:4d:f4:7a:2a:0f:
c8:51:97:56:35:62:e3:c4:3e:86:31:11:93:f4:4d:
3b:f7:a0:1f:82:38:9e:f5:45:f6:00:28:84:34:83:
8e:e7:3e:7f:22:eb:df:4c:e6:5d:16:a4:cf:99:1e:
df:22:ee:94:ac:e2:6e:cf:eb:78:84:73:5a:06:cd:
86:43:d7:ae:85:3f:36:20:23:fd:47:99:72:01:f5:
e6:e0:b8:3f:95:6e:ba:98:36:eb:ad:b0:33:83:d6:
1f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:07:ED:77:31:68:BA:6E:0B:0B:E3:E5:DC:B2:CF:78:1F:7A:C8:2A
X509v3 Authority Key Identifier:
keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.mft
sbgp-ipAddrBlock: critical
IPv4:
80.240.192.0/20
217.21.112.0/20
Signature Algorithm: sha256WithRSAEncryption
82:d7:5f:98:a6:08:88:5f:62:ae:16:00:85:16:e3:42:6b:8c:
b1:27:24:d7:7b:00:23:0e:9d:74:c7:b5:c9:0f:38:82:64:bc:
28:e6:bf:ae:95:98:52:28:23:52:34:49:81:32:6d:4c:d8:08:
5a:86:9b:01:e4:37:b9:05:ec:73:24:ea:02:d3:85:e7:21:fb:
91:e9:af:9b:4e:e8:05:f0:a8:bd:2f:c6:46:43:db:15:04:f2:
3c:2f:58:c4:40:c9:f4:1c:37:87:50:37:2b:ea:31:68:3e:e9:
16:33:66:d3:e4:8b:f9:37:5f:2c:7c:3e:7c:76:8e:6b:60:a1:
19:69:8d:29:5f:f6:b8:5d:b1:22:69:7c:c6:90:05:de:b0:cd:
9c:24:24:64:52:38:0c:05:a7:3a:d2:da:d0:4b:05:5e:07:f7:
27:ac:30:79:43:af:30:49:f3:79:c3:c8:d9:fe:63:6f:73:64:
a9:1d:e4:48:43:80:cb:2d:46:a8:73:70:6f:3a:09:30:a0:8a:
24:84:f9:4a:af:94:e9:21:e1:8f:67:ca:16:84:30:ce:c9:84:
42:56:3f:cf:95:cf:10:33:3b:b9:20:ca:e9:1f:d0:fe:ec:74:
f2:87:3a:5d:9d:a3:49:fa:ee:4b:34:e2:6f:4f:eb:a7:43:40:
98:c7:0a:e0
-----BEGIN CERTIFICATE-----
MIIGCDCCBPCgAwIBAgICDwAwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNUklQ
RVRPQUZSSU5JQzExMC8GA1UEBRMoN0Y3QUMxODA4OTc5ODNFMjlFOTM3QzBBMTg3
ODAzQzA3Mjc1NTU0NTAeFw0yNTAxMDEwMDQ3NDZaFw0yNjAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNjY4MDM3UkkxMTAvBgNVBAUTKDlCMDdFRDc3MzE2OEJBNkUw
QjBCRTNFNURDQjJDRjc4MUY3QUM4MkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDQdc8LHpJt6FnEtO9D+BCsL0P8/JWwF6Y8/XGJd4GoNrjeUeYFhTxL
sXQA+7FAA9byG1efN8s+SsvJeTzW58JaUbTvwLPExlpw31gLtaupTCEACtq+XgJl
L9uw55NzhU4LBHNN45uA6auzXKHZHqxQwf19zQU7u7npLFbmo8kZ2uwY77nVyaa0
Urbm4f2MFLQLnGcwwUjMQmvMAB6SFNJN9HoqD8hRl1Y1YuPEPoYxEZP0TTv3oB+C
OJ71RfYAKIQ0g47nPn8i699M5l0WpM+ZHt8i7pSs4m7P63iEc1oGzYZD166FPzYg
I/1HmXIB9ebguD+VbrqYNuutsDOD1h/rAgMBAAGjggL3MIIC8zAdBgNVHQ4EFgQU
mwftdzFoum4LC+Pl3LLPeB96yCowHwYDVR0jBBgwFoAUf3rBgIl5g+Kek3wKGHgD
wHJ1VUUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvcmlw
ZS9mM3JCZ0lsNWctS2VrM3dLR0hnRHdISjFWVVUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvcmlwZS10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjY4MDM3LzNCMjRD
Q0FDNkRDNzExRTY4QzVDNDQyREY4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzY2ODAzNy8zQjI0Q0NBQzZEQzcxMUU2OEM1QzQ0MkRGOEFFQTIy
OC9td2Z0ZHpGb3VtNExDLVBsM0xMUGVCOTZ5Q28ubWZ0MCUGCCsGAQUFBwEHAQH/
BBYwFDASBAIAATAMAwQEUPDAAwQE2RVwMA0GCSqGSIb3DQEBCwUAA4IBAQCC11+Y
pgiIX2KuFgCFFuNCa4yxJyTXewAjDp10x7XJDziCZLwo5r+ulZhSKCNSNEmBMm1M
2AhahpsB5De5BexzJOoC04XnIfuR6a+bTugF8Ki9L8ZGQ9sVBPI8L1jEQMn0HDeH
UDcr6jFoPukWM2bT5Iv5N18sfD58do5rYKEZaY0pX/a4XbEiaXzGkAXesM2cJCRk
UjgMBac60trQSwVeB/cnrDB5Q68wSfN5w8jZ/mNvc2SpHeRIQ4DLLUaoc3BvOgkw
oIokhPlKr5TpIeGPZ8oWhDDOyYRCVj/Plc8QMzu5IMrpH9D+7HTyhzpdnaNJ+u5L
NOJvT+unQ0CYxwrg
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:18:09 2025 by rpki-client