Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
File: oTaOi_yA9OpasJcW0lchGTYYKFE.cer (raw, json)
Hash identifier: VlpsVz8Db2SQztUX2/vBoXLMyG1R8s6PZ3y5xSeAEL8=
Subject key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 23C8
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:52:25 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 11845
IP: 41.193.0.0/16
IP: 102.39.0.0/16
IP: 102.217.196.0/22
IP: 102.219.24.0/22
IP: 102.220.208.0/22
IP: 196.3.164.0 -- 196.3.179.255
IP: 196.22.192.0 -- 196.22.239.255
IP: 196.41.0.0/19
IP: 196.41.192.0/19
IP: 197.245.0.0/16
IP: 2c0f:fd58::/29
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 May 2024 00:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9160 (0x23c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 00:52:25 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3c:b2:9f:56:47:26:bd:94:e2:02:6a:d2:0a:
8e:5a:54:44:d6:d9:98:1e:66:fa:1d:a4:31:ed:6a:
8d:ac:c0:c4:ac:14:b4:2a:b1:67:32:57:d6:38:26:
0c:76:a1:48:05:2d:3c:1d:14:27:89:61:ef:cf:f1:
3d:a9:8f:90:c7:b6:54:60:ce:b4:fe:3c:3a:45:bc:
09:31:df:06:41:eb:16:2e:a4:4b:7d:7e:e3:e0:62:
c3:03:92:5f:2d:65:12:1e:60:a7:79:31:56:be:12:
ed:7c:2d:36:f9:c2:f3:c1:f3:24:98:82:41:4c:df:
5d:4a:ad:2e:34:11:c4:ce:b4:bb:05:61:99:89:66:
ec:d7:cd:0e:25:d9:24:85:84:dc:0c:3a:a4:e6:50:
9d:ba:77:43:20:cf:eb:92:b8:de:a1:db:e3:e4:3d:
14:e9:b9:2b:61:5d:37:a8:32:56:e8:30:3d:cd:d7:
e4:29:19:ad:80:ef:c2:6f:5b:9d:e0:2e:d7:fc:db:
a6:4c:ca:bb:fb:65:47:ba:30:20:c2:21:9d:49:9c:
60:02:c3:74:13:c6:9f:0d:28:8f:ba:f6:88:cb:5e:
78:79:69:2e:7c:e9:56:82:3a:71:71:da:07:55:79:
89:5e:a6:e4:3f:3b:50:4d:05:c8:74:62:a9:6c:7e:
f2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11845
sbgp-ipAddrBlock: critical
IPv4:
41.193.0.0/16
102.39.0.0/16
102.217.196.0/22
102.219.24.0/22
102.220.208.0/22
196.3.164.0-196.3.179.255
196.22.192.0-196.22.239.255
196.41.0.0/19
196.41.192.0/19
197.245.0.0/16
IPv6:
2c0f:fd58::/29
Signature Algorithm: sha256WithRSAEncryption
34:dc:82:5b:01:71:f4:cf:0c:b6:7e:54:f4:dd:2f:35:18:41:
95:46:ad:1a:a1:d7:51:3b:9e:98:a3:2b:3e:e4:10:f1:83:cf:
1f:b0:92:b8:f7:8c:27:ed:9e:75:10:d6:28:85:be:61:96:9e:
59:a8:b2:f3:6c:94:33:5d:22:37:6c:94:1d:61:19:13:4f:07:
d1:76:0e:2f:2f:3c:f8:76:d3:b9:51:1d:62:b1:26:90:ab:4a:
f7:17:75:fd:f0:10:2f:ec:6e:09:fb:14:e7:01:d3:89:f6:da:
6f:9f:08:ba:e1:f6:8d:e2:a6:09:87:cc:38:31:54:ed:66:aa:
d5:ae:34:29:7d:39:52:a0:6b:70:db:99:35:73:c5:f3:39:e4:
3b:c6:c6:4a:22:19:b1:e8:6c:de:ac:c3:3d:cb:6a:0d:f0:6f:
57:71:a6:35:92:32:f5:6f:7d:6e:b2:3c:b4:fd:c7:2d:f5:a8:
91:c9:3a:8f:fa:84:86:40:31:fc:7b:4c:c8:c9:97:a5:34:fb:
0e:80:a0:d4:23:e4:ec:63:a5:21:2f:91:29:1e:2e:08:fc:dd:
52:46:56:da:ad:f8:65:bf:dd:34:8e:36:dd:39:dd:f1:14:86:
1b:a4:c4:91:61:8a:84:f1:76:f8:b8:5a:32:ad:f1:4b:87:d9:
e2:6a:8e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 01:49:57 2024 by rpki-client on console-ams.rpki-client.org