Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/j29vvKPGNM2_8Exy6bDsgG-YPKg.cer
File: j29vvKPGNM2_8Exy6bDsgG-YPKg.cer (raw, json)
Hash identifier: iCTRoUnW/CEfYi73mtOXPD1/kQjDZKGxPeF1Ym3KKLY=
Subject key identifier: 8F:6F:6F:BC:A3:C6:34:CD:BF:F0:4C:72:E9:B0:EC:80:6F:98:3C:A8
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2751
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 01 Jan 2024 03:43:49 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 328533
IP: 102.36.208.0/22
IP: 102.214.189.0/24
IP: 102.221.208.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 May 2024 00:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10065 (0x2751)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 03:43:49 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F36B57DFAF/serialNumber=8F6F6FBCA3C634CDBFF04C72E9B0EC806F983CA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8c:f7:e4:5e:40:ef:ce:12:4f:ff:78:10:57:
e6:e8:46:10:1f:37:73:20:8a:2b:fa:85:a1:bd:89:
30:54:4e:5b:30:8c:46:3c:58:54:62:7d:15:e9:03:
7f:2d:61:6c:0f:8b:39:0c:a2:43:2d:cb:e7:94:c7:
72:fa:a2:f4:09:3e:65:a0:49:64:7b:dd:78:9f:1d:
48:02:9f:dc:84:05:1c:9c:23:4c:69:43:21:93:82:
b2:cd:ba:55:5c:8a:7b:7f:7b:ce:19:f5:d6:bd:12:
75:b1:d4:63:85:a0:f5:21:41:ce:30:d7:34:87:7b:
44:83:de:c6:38:fc:4f:0c:52:b1:79:8b:82:5a:65:
8f:57:88:45:94:be:4e:3e:27:0e:01:b4:25:11:5d:
08:b8:8c:d0:fc:8f:3b:c0:71:5c:93:9f:a9:81:36:
d9:60:66:d4:e0:fc:fe:67:97:fc:af:d8:40:19:ac:
e8:37:c1:92:2f:8d:16:44:0e:53:4c:72:dd:1a:b4:
0f:04:99:3d:69:24:8f:3e:e1:ec:98:24:37:4d:9f:
13:c6:e7:81:3a:9b:22:7a:c5:eb:d3:ee:02:52:b6:
d8:75:aa:4d:bf:99:cd:64:24:d3:e4:bd:5a:d1:cf:
66:ef:39:5b:84:26:07:c5:7f:02:70:d6:0b:a7:19:
81:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6F:6F:BC:A3:C6:34:CD:BF:F0:4C:72:E9:B0:EC:80:6F:98:3C:A8
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328533
sbgp-ipAddrBlock: critical
IPv4:
102.36.208.0/22
102.214.189.0/24
102.221.208.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:d9:46:54:1f:77:b8:72:4c:e2:56:e6:b5:1c:26:09:21:e0:
c8:5c:39:fc:9f:02:df:e1:ca:9a:65:4b:32:2b:25:88:e0:b9:
f7:da:c8:95:44:35:2e:cf:9b:5c:4b:4e:73:96:f8:d2:56:37:
96:ee:67:ef:bb:84:64:05:2f:9e:aa:bd:fd:d1:a1:10:0c:4a:
1a:c5:44:63:b9:7c:2c:5d:40:12:be:1a:51:23:94:b0:9b:ab:
ad:c2:49:cb:b1:42:49:10:f1:be:3e:ed:1f:f6:5e:60:e4:e2:
d3:e0:ca:6f:00:fe:3d:65:5d:8e:74:7e:5b:ce:1b:6f:1b:e7:
42:b7:54:9f:78:59:24:67:84:90:45:79:ed:3a:9d:97:b7:f5:
53:ad:b4:88:70:c4:a8:b8:a7:96:3a:12:5b:ac:11:cd:2a:c3:
d8:7a:ac:c1:ea:38:aa:ea:3e:71:23:a1:38:40:6c:b5:17:e8:
ff:6a:cc:06:77:de:d5:d9:8f:d0:b4:43:2a:83:d6:62:0d:d4:
5f:52:13:7e:f2:24:7f:ac:a1:35:3f:28:58:ca:a3:c6:f6:40:
c6:da:b5:46:06:47:01:66:50:ef:a9:38:7f:b3:06:86:f8:61:
45:26:13:88:1d:fa:98:4b:b2:ed:02:f0:17:a9:a2:e4:ea:bc:
74:e9:e1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 01:49:56 2024 by rpki-client on console-ams.rpki-client.org