Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer
File: XriN9L-QidcEmh--gAXmIequhis.cer (raw, json)
Hash identifier: /DA0A6lwrJxRPt7BaFYWZ3u5z9D521wGAwsEhEG5u28=
Subject key identifier: 5E:B8:8D:F4:BF:90:89:D7:04:9A:1F:BE:80:05:E6:21:EA:AE:86:2B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2A25
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 20 May 2024 11:14:17 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 328631
IP: 102.22.248.0/21
IP: 102.209.8.0/22
IP: 102.213.124.0/22
IP: 102.218.24.0/22
IP: 2c0f:e8a8::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 24 May 2024 00:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10789 (0x2a25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: May 20 11:14:17 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F36A2303AF/serialNumber=5EB88DF4BF9089D7049A1FBE8005E621EAAE862B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9f:c5:f0:45:cc:78:7d:2b:ef:91:59:aa:10:
f5:d8:e3:ed:b0:2e:98:4d:38:36:83:a0:ca:fe:e1:
4f:22:cf:2b:91:f0:2e:c8:e3:7d:4b:f6:02:a0:ac:
a6:8d:d1:7c:b3:7d:32:44:0d:23:89:9e:7c:b1:9f:
db:7f:c2:86:ef:29:bd:e9:8d:c3:37:60:95:cb:37:
45:91:76:f9:cb:8f:a1:6f:55:f3:7a:19:68:d3:30:
66:4f:39:d1:6b:34:ca:f3:6d:11:83:64:91:f0:01:
54:04:1c:e2:e9:5f:8d:e6:5e:62:f6:c2:84:24:8f:
66:be:8f:7b:1f:0e:1d:30:7b:ee:14:b6:72:72:ce:
25:fa:58:f8:6a:d3:0a:79:86:22:f3:9b:88:cf:7a:
3a:b4:5b:8e:56:bb:55:1f:4a:25:c5:1c:46:cd:ca:
9d:c9:73:66:f6:84:69:c2:d4:92:7c:0d:4e:46:41:
37:af:2c:39:c1:dd:2a:e3:a0:ae:f3:42:67:3f:fa:
07:14:28:7d:97:92:45:c5:72:1f:fb:90:bb:44:82:
31:8f:1a:8b:1e:c0:34:7b:ef:f3:9c:a3:10:0a:ff:
3b:e4:2d:dd:52:48:92:98:2c:10:00:6c:6f:66:eb:
db:9c:e3:ae:2b:b5:45:75:ab:be:fc:72:15:e4:93:
26:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B8:8D:F4:BF:90:89:D7:04:9A:1F:BE:80:05:E6:21:EA:AE:86:2B
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328631
sbgp-ipAddrBlock: critical
IPv4:
102.22.248.0/21
102.209.8.0/22
102.213.124.0/22
102.218.24.0/22
IPv6:
2c0f:e8a8::/32
Signature Algorithm: sha256WithRSAEncryption
09:22:42:af:cc:3d:5d:65:66:db:74:52:d0:31:75:89:ec:14:
ec:ad:6f:e7:5b:21:fa:6e:13:7d:b9:fc:ca:1f:41:48:ed:81:
7b:85:28:32:82:f3:a5:e8:09:ba:3a:c9:52:9d:9d:d4:b6:85:
9c:59:be:1d:15:1c:1c:8b:d9:66:dc:7d:aa:0e:33:f8:41:ec:
8a:46:7d:d1:12:7c:5f:ad:cd:da:25:18:47:36:f3:c9:64:4c:
89:f4:95:38:a1:83:12:95:ed:22:67:21:e9:ea:88:a9:73:cb:
a9:9d:3f:6b:78:85:f8:f3:11:11:46:bf:08:48:3d:53:8e:80:
a8:3c:33:83:fd:d5:3b:ac:b3:1b:78:73:95:06:ed:ec:0d:74:
87:86:a7:33:17:79:34:b8:ac:e7:3a:0f:d2:39:93:26:a6:93:
88:af:80:e8:4a:a4:62:7a:be:a1:b8:3d:12:d9:fe:af:51:43:
7a:73:8b:28:58:32:0c:f1:db:89:b4:e6:57:21:d9:9c:eb:71:
31:c2:72:08:5c:69:9a:d6:e6:23:10:d8:9b:d8:99:87:0f:aa:
4f:5b:3d:8c:a4:fd:ec:a7:1e:ef:81:a2:fa:c0:6a:0d:19:d4:
66:f0:b5:76:31:02:3f:37:8b:fe:30:5e:c7:d8:e3:c4:68:51:
53:12:f4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 01:06:23 2024 by rpki-client on console-fra.rpki-client.org