Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/a80vareT2tF2SQgQRK-wMtX7SVc.cer
File: a80vareT2tF2SQgQRK-wMtX7SVc.cer (raw, json)
Hash identifier: AcLxdau5MCkmUpeb0WgOWfU4lC83fqFeCCo5d3IUTFc=
Subject key identifier: 6B:CD:2F:6A:B7:93:DA:D1:76:49:08:10:44:AF:B0:32:D5:FB:49:57
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 23D6
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:55:48 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 37403
IP: 41.79.148.0/22
IP: 41.222.152.0/21
IP: 41.242.40.0/21
IP: 196.251.192.0/19
IP: 2c0f:faf8::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 May 2024 00:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9174 (0x23d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 00:55:48 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F36429BBAF/serialNumber=6BCD2F6AB793DAD17649081044AFB032D5FB4957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6d:e7:2f:f3:5a:01:58:0e:d9:50:bc:1d:9f:
fe:fd:26:b3:5c:ed:4c:cf:0c:c5:eb:35:4f:9e:aa:
3a:40:2e:65:0f:b2:a8:83:cb:33:c1:29:e3:67:5a:
11:3b:d5:17:2a:69:bc:c0:f8:e8:b0:38:4d:6b:00:
a2:e2:a3:82:4c:57:1d:68:36:67:44:b7:4d:ba:e5:
1f:11:4c:1d:66:33:94:6b:b9:34:1a:c4:47:81:72:
e8:10:9d:8e:7c:9f:76:7a:e9:e2:bc:a3:6e:5d:3e:
18:a2:48:ea:fa:d9:0e:c2:e2:d7:28:a5:6f:34:38:
c5:31:63:1e:a3:45:b1:be:e0:ab:41:11:75:23:39:
ae:48:bb:2b:25:29:52:29:9e:ce:b8:3a:34:22:7e:
5f:ae:89:c5:4e:4f:c9:8d:61:93:ea:79:9b:9a:0c:
af:11:e4:46:b2:da:36:32:de:49:3e:be:e9:16:ec:
8f:b8:a4:22:09:12:fe:b3:2b:36:26:4c:71:58:68:
a1:03:d5:e2:73:57:04:c1:68:45:5d:c1:6d:c5:04:
45:8e:5e:ae:22:83:cb:21:80:da:a9:f4:1c:91:4d:
0c:57:04:e7:02:65:65:08:99:87:c9:02:71:09:51:
55:81:12:df:f4:f3:fc:64:96:99:40:07:aa:28:d4:
59:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CD:2F:6A:B7:93:DA:D1:76:49:08:10:44:AF:B0:32:D5:FB:49:57
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37403
sbgp-ipAddrBlock: critical
IPv4:
41.79.148.0/22
41.222.152.0/21
41.242.40.0/21
196.251.192.0/19
IPv6:
2c0f:faf8::/32
Signature Algorithm: sha256WithRSAEncryption
09:ff:ae:da:ae:91:11:c6:aa:02:cc:26:cb:5a:df:76:75:c3:
41:b1:d5:88:0e:a6:d9:73:46:13:a3:d1:e4:57:6b:54:66:ef:
47:91:9c:9f:41:42:36:d4:25:ba:cb:32:d5:dc:58:59:56:97:
49:96:52:66:55:e5:11:73:26:32:cc:27:bd:06:f7:09:25:fe:
25:af:e0:91:a0:3f:8a:cc:41:e6:2e:f2:68:4f:df:0c:8a:18:
3f:76:06:f3:b7:1a:c3:3a:46:ad:c4:a5:52:67:36:25:96:3a:
5b:20:39:44:1a:0b:2f:42:1f:af:24:91:3b:84:26:f7:af:41:
6b:8b:99:3b:bc:d8:54:f2:36:f8:1e:fd:65:01:95:44:17:12:
ff:6d:0e:85:95:b7:bd:25:d1:07:7e:2d:5e:22:40:9d:fc:c6:
3a:e3:c9:8a:c8:19:36:ed:55:3a:a6:c7:6d:09:cd:3c:4c:f7:
be:32:92:26:ef:1f:30:70:3e:60:f7:0c:ca:da:a1:23:a8:90:
76:6f:35:fc:ec:16:43:f8:6f:b9:f5:0b:83:bf:b3:fb:3f:37:
79:69:e4:d9:fc:c2:2f:67:31:ca:e3:af:51:41:cb:5e:b4:15:
ea:7f:af:e9:ab:fe:ef:6e:ee:41:62:0c:0d:7e:13:c9:c6:82:
41:0f:8e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 01:46:32 2024 by rpki-client on console-fra.rpki-client.org