Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
File: lacnic-to-afrinic.cer (raw, json)
Hash identifier: wXDAadihYjn4e7vozR6AVuyf4JfRBXGHrhJXTwW+9CY=
Subject key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Authority key identifier: EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
Certificate issuer: /CN=AfriNIC-Root-Certificate
Certificate serial: 44
Authority info access: rsync://rpki.afrinic.net/repository/AfriNIC.cer
Manifest: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
caRepository: rsync://rpki.afrinic.net/repository/lacnic/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 14 Dec 2023 08:15:16 +0000
Certificate not after: Thu 14 Dec 2028 00:00:00 +0000
Subordinate resources: IP: 200.16.8.0/21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Jan 2025 11:11:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AfriNIC-Root-Certificate
Validity
Not Before: Dec 14 08:15:16 2023 GMT
Not After : Dec 14 00:00:00 2028 GMT
Subject: CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ca:1d:2d:54:5b:db:4a:34:8e:3f:83:f8:53:
d6:1e:b3:bb:f9:d4:bf:d7:d2:d2:6a:70:27:30:d3:
b3:d3:7a:d7:55:8b:93:bc:4a:36:06:12:09:7f:2e:
ea:96:90:70:4b:3d:8e:7b:9f:42:b8:f1:aa:08:21:
13:dc:1d:87:e1:1e:a9:e4:68:75:35:b3:db:6e:ea:
99:8e:36:9b:a0:ed:32:b4:10:54:ae:c6:94:77:f3:
47:a6:73:d2:de:cf:d0:92:a4:5a:ad:84:89:61:7e:
da:f0:f9:16:4f:8d:69:f9:27:22:e3:c1:b5:30:08:
64:6e:9f:ab:e2:44:45:dc:43:39:ac:69:69:70:b6:
64:b5:f1:82:ea:5a:de:c7:cc:df:c3:54:8e:7f:c5:
22:f9:90:da:fb:6c:3f:e5:d6:b7:9f:0e:60:25:77:
33:14:79:fa:ad:a5:40:35:96:65:38:db:56:35:3a:
78:a7:d8:3d:cf:b5:ea:1c:30:eb:13:da:94:d5:60:
9d:d6:5a:16:72:4d:d1:3d:6e:2b:f9:7a:6d:b1:60:
14:88:40:e7:7c:38:a2:89:26:fb:8a:b9:82:3b:f6:
9b:02:db:fd:c2:16:bf:80:31:d9:fa:83:e0:01:f4:
30:90:79:6d:9b:12:05:5a:1d:7b:70:1d:67:a8:96:
9e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
X509v3 Authority Key Identifier:
keyid:EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/AfriNIC.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/lacnic/
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
200.16.8.0/21
Signature Algorithm: sha256WithRSAEncryption
03:dd:8d:0d:2a:27:1f:ce:e3:51:f3:29:f4:ab:8b:79:b8:a4:
06:99:f2:1e:47:7e:b2:7f:95:12:87:56:74:34:b7:eb:77:b2:
33:dc:70:6f:c3:c1:da:63:02:23:48:81:a0:4c:b6:95:a3:aa:
55:50:05:53:80:9d:41:f9:51:a2:af:b3:99:6c:b2:d7:90:75:
2d:d8:7b:b7:1f:14:77:ae:69:7e:a5:46:db:f5:79:ac:95:b0:
ae:4d:3a:82:4a:3e:7a:b9:6b:a7:55:1a:e5:f7:51:7f:61:a9:
f3:43:af:7e:15:01:57:1b:d3:bd:11:f1:b8:9a:2a:d5:5d:cc:
2e:e3:c3:a0:56:c7:0a:00:d9:40:07:00:52:43:5f:4f:47:b0:
53:2c:8f:8b:22:ca:89:e9:5c:88:60:d6:b7:0e:76:27:dd:70:
1f:af:50:59:9a:67:5f:cb:b6:23:77:43:03:9c:50:a9:f8:c9:
3d:dc:8e:5f:13:d2:76:db:65:8c:7c:1b:6a:9b:4f:74:62:bb:
40:68:cc:11:11:3b:cd:19:aa:5d:dd:88:d1:c7:a2:24:b0:37:
db:d9:40:4b:74:1f:76:1c:7e:37:30:d4:77:52:4d:7b:7a:a8:
e4:d2:4e:56:2a:50:88:d8:28:ae:f4:1c:75:4f:63:b1:0f:67:
a4:94:17:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 15:43:33 2024 by rpki-client on console-ams.rpki-client.org