Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/ripe/qEB8UNNVEmlZXYTPEkOl86_4EHA.cer
File: qEB8UNNVEmlZXYTPEkOl86_4EHA.cer (raw, json)
Hash identifier: jkPeHZLkph4AzMqn8n5gUr6W70YNpBkeTAvz2j8/sTw=
Subject key identifier: A8:40:7C:50:D3:55:12:69:59:5D:84:CF:12:43:A5:F3:AF:F8:10:70
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial: 0EFE
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:47:22 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 80.88.11.0/24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 13:35:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3838 (0xefe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=RIPETOAFRINIC
Validity
Not Before: Jan 1 00:47:22 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F365C895RI
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:26:64:88:f1:16:16:3f:ee:a6:1e:d8:3e:7c:
c7:d9:cb:27:5c:47:44:19:70:15:a3:67:b1:da:3d:
a9:7b:19:72:2c:22:a7:0b:cf:a8:43:a6:f9:20:6e:
a2:36:13:bf:f7:4a:47:3e:7b:3a:10:60:c4:f8:da:
dd:64:17:93:02:8f:82:dd:ee:e2:d8:62:d7:bc:9a:
68:c4:10:5a:9c:b8:8c:49:16:27:f7:f2:c6:60:d5:
ff:ae:dc:a5:92:95:3b:3d:57:db:71:a6:99:7b:5b:
72:d3:52:57:89:c1:5a:20:36:6e:0b:bc:c9:c8:b0:
a2:8a:b8:26:59:af:14:d9:0b:d2:f9:e0:51:f8:bd:
3a:28:93:bd:df:47:98:25:d7:1e:3c:f3:97:54:10:
7e:40:cc:6a:13:f1:33:9f:01:d6:ee:f5:65:b4:fb:
92:46:24:bf:9d:83:e9:3d:5e:6c:20:63:5a:e6:02:
c2:67:91:31:00:b1:c7:58:a0:fa:48:3d:5b:8b:d5:
af:cc:dd:91:8a:f3:09:29:3f:2b:84:d8:60:48:06:
d0:80:7e:9f:f4:3e:1b:3e:f5:ac:91:f9:48:78:be:
a2:ab:86:01:d4:7f:58:43:c9:36:7e:7e:bb:1d:0a:
87:56:99:9c:01:b2:b9:33:57:05:8a:39:a6:12:d3:
47:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:40:7C:50:D3:55:12:69:59:5D:84:CF:12:43:A5:F3:AF:F8:10:70
X509v3 Authority Key Identifier:
keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.mft
sbgp-ipAddrBlock: critical
IPv4:
80.88.11.0/24
Signature Algorithm: sha256WithRSAEncryption
61:d4:c8:a6:1d:47:6d:0d:84:f2:d7:3f:4f:60:23:b8:2a:15:
d9:d0:7b:6c:e9:da:f3:b3:3d:f1:94:ef:c1:1a:32:fa:c5:f7:
67:26:a5:d7:69:40:01:25:e3:ef:1c:5e:07:18:45:3e:90:77:
cd:f8:10:6e:96:df:34:2d:c3:77:b0:32:f9:a1:a0:ab:e1:cd:
31:67:58:62:17:2a:ec:ff:dc:4c:de:0e:0d:5b:d2:57:30:6c:
96:e9:4f:5a:66:2d:40:5b:d0:b5:7e:b2:32:ef:0f:fc:83:97:
8b:98:92:79:98:32:5e:97:c5:06:d2:56:5d:91:51:77:ca:71:
b5:aa:26:7e:6b:2c:7b:ae:09:e1:b6:c5:50:7e:52:2e:e1:06:
51:73:20:ea:2c:a7:40:c8:0d:e0:75:04:1d:d2:8b:99:23:9b:
0a:5b:53:8f:19:3f:b8:82:8a:dc:f1:42:73:21:ba:b2:16:e4:
de:d7:6a:6e:04:19:02:72:36:c2:fc:a3:6c:e7:bf:7e:1b:be:
6c:39:7d:ce:6d:11:ff:71:98:0d:d8:c8:40:88:38:0b:06:bd:
83:2f:8a:60:94:85:2c:10:5b:16:a7:ba:2d:f2:36:c4:fe:0d:
8a:02:a8:cb:9d:fe:e3:f1:e7:8c:1b:36:3c:c1:9f:02:81:fa:
81:b2:e4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:00:49 2025 by rpki-client