Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer
File: mCHIciHScLQv-d2CYEi5ksDg4_g.cer (raw, json)
Hash identifier: FqO9vx2PvXE7wBx4Ac2KbPcIoRWmumcgaLdYwKOE+GA=
Subject key identifier: 98:21:C8:72:21:D2:70:B4:2F:F9:DD:82:60:48:B9:92:C0:E0:E3:F8
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2765
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 01 Jan 2024 03:47:01 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 1228 -- 1232
AS: 2018
AS: 6149
IP: 154.114.0.0/17
IP: 154.115.0.0/17
IP: 196.21.0.0/16
IP: 196.24.0.0/16
IP: 2001:4200::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 May 2024 00:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10085 (0x2765)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 03:47:01 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F36B9F4BAF/serialNumber=9821C87221D270B42FF9DD826048B992C0E0E3F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d0:05:b1:12:c2:0c:30:84:cb:fe:a4:03:1d:
ea:6b:db:93:df:f3:ff:c2:a9:e0:c3:f6:b7:ce:e9:
0c:e0:1b:6f:e8:1d:19:47:d6:41:44:34:b0:44:ee:
86:92:33:f1:f2:d4:24:4c:a4:f7:24:c2:a2:e1:79:
08:aa:11:09:19:f7:14:ad:79:d5:5d:05:93:4f:29:
21:c0:ae:e6:aa:9b:3c:a7:51:3a:0b:4d:6b:95:92:
a2:31:be:2d:87:3f:5e:76:bd:6d:0f:5b:8e:3c:cf:
30:92:f0:ea:a4:62:9a:b5:41:ae:14:25:6c:c2:94:
0c:93:79:70:10:9d:31:03:fc:a3:32:5a:47:e7:90:
c8:7a:19:1f:44:da:26:0b:5e:78:29:ba:29:7d:65:
e3:14:01:76:b7:96:3d:74:24:23:1b:b4:e4:26:68:
3e:82:35:04:2b:cf:93:79:ed:73:66:62:d2:5c:d3:
c8:4c:f8:e6:b2:2a:dd:08:60:9c:f6:fd:a4:b2:44:
ff:24:d2:45:ad:29:4a:fb:b1:ea:f4:43:86:3b:03:
45:f4:05:f1:3b:24:92:fa:5f:e5:59:cc:13:40:8e:
47:cd:f1:44:69:51:61:04:30:63:c9:94:a4:9c:08:
ac:c0:7a:bd:a9:4b:8b:73:5b:ca:eb:98:58:d6:61:
95:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:21:C8:72:21:D2:70:B4:2F:F9:DD:82:60:48:B9:92:C0:E0:E3:F8
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
1228-1232
2018
6149
sbgp-ipAddrBlock: critical
IPv4:
154.114.0.0/17
154.115.0.0/17
196.21.0.0/16
196.24.0.0/16
IPv6:
2001:4200::/32
Signature Algorithm: sha256WithRSAEncryption
25:51:37:48:1e:f4:82:d0:c6:ee:0e:60:de:ba:24:06:37:12:
c9:91:48:b4:10:c6:24:1a:79:fc:56:67:2e:5d:39:0b:e8:c8:
a6:04:a1:5b:3e:6e:11:e3:f2:56:07:c0:7a:65:c8:e5:7f:3a:
c4:a3:64:a5:6d:e6:52:80:81:07:91:a9:68:02:3b:25:a8:07:
6b:14:39:7d:70:49:b1:03:ee:35:be:18:ed:50:61:95:5f:e8:
62:36:ec:58:6d:40:eb:dd:e8:04:42:d0:50:5d:21:68:48:59:
68:c0:01:f6:4c:6c:28:c4:e4:39:0f:4e:ee:40:e7:41:fc:73:
0a:89:cf:f4:8f:a2:1c:0e:45:fc:59:69:34:d1:2e:b3:64:fa:
95:63:7e:87:32:b0:ef:36:a2:5f:10:65:0e:91:76:ba:f9:14:
eb:e9:84:a0:16:94:2b:10:75:fe:03:54:e4:1b:9b:a8:43:e8:
6e:fa:67:f1:f6:c9:7f:63:a1:c3:55:00:b8:78:56:0d:76:62:
09:a7:8c:0c:0d:ff:72:76:79:66:0f:d6:43:0b:dd:d3:92:7a:
64:3d:4c:f1:cc:08:b2:91:a9:6e:d8:4d:42:8b:e7:60:55:a3:
95:ea:44:50:28:1a:8a:a0:0f:8d:1c:71:59:e6:9b:4d:90:ff:
11:26:37:26
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgICJ2UwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAxMDEwMzQ3MDFaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkI5RjRCQUYxMTAvBgNVBAUTKDk4MjFDODcyMjFEMjcwQjQyRkY5REQ4
MjYwNDhCOTkyQzBFMEUzRjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCT0AWxEsIMMITL/qQDHepr25Pf8//CqeDD9rfO6QzgG2/oHRlH1kFENLBE7oaS
M/Hy1CRMpPckwqLheQiqEQkZ9xStedVdBZNPKSHAruaqmzynUToLTWuVkqIxvi2H
P152vW0PW448zzCS8OqkYpq1Qa4UJWzClAyTeXAQnTED/KMyWkfnkMh6GR9E2iYL
Xngpuil9ZeMUAXa3lj10JCMbtOQmaD6CNQQrz5N57XNmYtJc08hM+OayKt0IYJz2
/aSyRP8k0kWtKUr7ser0Q4Y7A0X0BfE7JJL6X+VZzBNAjkfN8URpUWEEMGPJlKSc
CKzAer2pS4tzW8rrmFjWYZURAgMBAAGjggM3MIIDMzAdBgNVHQ4EFgQUmCHIciHS
cLQv+d2CYEi5ksDg4/gwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZCOUY0Qi82MUEyRTFBMjhERTAx
MUU5QUMxNEY2MzJGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QjlGNEIvNjFBMkUxQTI4REUwMTFFOUFDMTRGNjMyRjhBRUEyMjgvbUNISWNp
SFNjTFF2LWQyQ1lFaTVrc0RnNF9nLm1mdDAnBggrBgEFBQcBCAEB/wQYMBagFDAS
MAgCAgTMAgIE0AICB+ICAhgFMD4GCCsGAQUFBwEHAQH/BC8wLTAcBAIAATAWAwQH
mnIAAwQHmnMAAwMAxBUDAwDEGDANBAIAAjAHAwUAIAFCADANBgkqhkiG9w0BAQsF
AAOCAQEAJVE3SB70gtDG7g5g3rokBjcSyZFItBDGJBp5/FZnLl05C+jIpgShWz5u
EePyVgfAemXI5X86xKNkpW3mUoCBB5GpaAI7JagHaxQ5fXBJsQPuNb4Y7VBhlV/o
YjbsWG1A693oBELQUF0haEhZaMAB9kxsKMTkOQ9O7kDnQfxzConP9I+iHA5F/Flp
NNEus2T6lWN+hzKw7zaiXxBlDpF2uvkU6+mEoBaUKxB1/gNU5BubqEPobvpn8fbJ
f2Ohw1UAuHhWDXZiCaeMDA3/cnZ5Zg/WQwvd05J6ZD1M8cwIspGpbthNQovnYFWj
lepEUCgaiqAPjRxxWeabTZD/ESY3Jg==
-----END CERTIFICATE-----
Generated at Tue May 21 01:46:32 2024 by rpki-client on console-fra.rpki-client.org