Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/4QUiVzRX-tnLWm9cGdaMzm1unCM.cer
File: 4QUiVzRX-tnLWm9cGdaMzm1unCM.cer (raw, json)
Hash identifier: e3vleUpn1DdLxCuqPAsoSz4KhYHl14kdhYz1ER1Z/Es=
Subject key identifier: E1:05:22:57:34:57:FA:D9:CB:5A:6F:5C:19:D6:8C:CE:6D:6E:9C:23
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 295F
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Fri 23 Feb 2024 00:02:44 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 102.209.176.0/22
IP: 102.212.200.0/22
IP: 102.215.24.0/22
IP: 102.222.132.0/22
IP: 2c0f:e908::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 May 2024 00:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10591 (0x295f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Feb 23 00:02:44 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F36A0CB0AF/serialNumber=E10522573457FAD9CB5A6F5C19D68CCE6D6E9C23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:cc:61:79:06:2f:fd:4e:19:39:f8:dd:b7:
97:14:ea:80:04:92:e2:3a:07:36:5b:d8:1d:0d:5a:
fd:88:9c:90:b3:3d:87:d5:48:b8:aa:b8:fd:c6:95:
da:07:6c:23:16:fb:3e:47:7e:9f:55:5b:d7:a4:32:
7a:a7:7a:3a:68:56:cd:ac:57:1c:02:3b:7f:b5:79:
d7:bb:18:77:4c:1e:6a:f0:3b:0e:e6:29:fb:e6:bd:
ba:f0:d6:27:cf:78:66:6d:50:1b:8c:83:b1:b6:da:
4b:c3:5b:6c:38:56:85:55:59:eb:a3:0b:7e:5f:a4:
fb:59:ed:69:3a:13:b2:e8:03:ff:53:ee:bc:47:07:
16:b5:2e:8d:85:66:7b:a5:e8:f7:71:fb:55:4d:d8:
53:9f:a0:9e:43:87:5f:0c:49:f2:b5:90:c2:08:08:
27:eb:70:32:8b:26:cd:18:42:48:a7:08:94:7e:a5:
c0:61:eb:79:96:32:95:bd:b0:e4:44:17:64:53:83:
84:10:a1:8e:98:df:b9:c2:e4:a3:7f:1b:64:9c:b9:
69:cb:77:a4:b6:6c:86:ea:54:d0:cb:ee:1f:d9:e5:
97:18:8a:65:95:e9:6d:ba:4c:50:e0:07:7a:aa:ca:
bb:1c:3d:03:6c:b5:83:ff:be:e1:8d:ac:6c:f0:c7:
a4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:05:22:57:34:57:FA:D9:CB:5A:6F:5C:19:D6:8C:CE:6D:6E:9C:23
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.mft
sbgp-ipAddrBlock: critical
IPv4:
102.209.176.0/22
102.212.200.0/22
102.215.24.0/22
102.222.132.0/22
IPv6:
2c0f:e908::/32
Signature Algorithm: sha256WithRSAEncryption
2a:f5:dc:ad:1c:5e:27:71:aa:56:94:eb:67:31:40:09:b3:83:
fc:2e:ec:43:0d:50:93:8d:cc:28:1c:8a:4b:8c:9c:2b:35:9b:
67:ec:ef:98:80:3c:69:22:b3:d0:15:ba:f8:77:f4:e8:83:f5:
2f:aa:7c:52:37:6e:7a:56:9e:55:f5:33:a2:da:df:68:15:43:
46:af:57:1f:cd:6c:43:31:2a:97:9a:99:cd:62:27:72:e4:5f:
e3:98:95:ce:57:d3:af:11:ba:61:56:7a:1a:8d:92:eb:49:0f:
ea:0b:ec:90:7b:9f:fa:33:89:88:e1:ca:8f:e3:a2:72:f3:39:
30:9c:49:1d:a5:32:20:f8:9e:de:3e:df:b5:21:1f:5d:c0:e7:
fb:e9:1f:26:88:3f:2d:74:8e:fb:a7:69:42:40:a4:8c:22:2a:
83:02:d0:c0:58:92:81:21:7c:63:cb:3f:10:cc:f0:88:80:e3:
0e:f1:f9:b9:e4:db:90:79:93:26:33:c9:ee:4c:df:b6:2c:0b:
1d:ba:21:8e:a1:50:76:72:d9:2b:30:81:90:46:05:d7:43:69:
20:e0:63:2b:e3:e1:4f:cf:82:ae:23:9f:d3:e5:66:e4:6a:80:
df:b9:2b:7c:c6:d3:45:a6:5c:c7:fb:d8:e7:f2:1a:31:40:65:
17:61:8d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 01:46:31 2024 by rpki-client on console-fra.rpki-client.org