Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
File: lacnic-to-afrinic.cer (raw, json)
Hash identifier: Sy8MEd5jIqTCI9TMKGF+hPRHpJvcRWt/XeBBAdGw3Zc=
Subject key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Authority key identifier: EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
Certificate issuer: /CN=AfriNIC-Root-Certificate
Certificate serial: 11
Authority info access: rsync://rpki.afrinic.net/repository/AfriNIC.cer
Manifest: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
caRepository: rsync://rpki.afrinic.net/repository/lacnic/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 30 Mar 2020 14:17:11 +0000
Certificate not after: Sun 30 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 200.16.8.0/21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 07 May 2023 12:35:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AfriNIC-Root-Certificate
Validity
Not Before: Mar 30 14:17:11 2020 GMT
Not After : Mar 30 00:00:00 2025 GMT
Subject: CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ca:1d:2d:54:5b:db:4a:34:8e:3f:83:f8:53:
d6:1e:b3:bb:f9:d4:bf:d7:d2:d2:6a:70:27:30:d3:
b3:d3:7a:d7:55:8b:93:bc:4a:36:06:12:09:7f:2e:
ea:96:90:70:4b:3d:8e:7b:9f:42:b8:f1:aa:08:21:
13:dc:1d:87:e1:1e:a9:e4:68:75:35:b3:db:6e:ea:
99:8e:36:9b:a0:ed:32:b4:10:54:ae:c6:94:77:f3:
47:a6:73:d2:de:cf:d0:92:a4:5a:ad:84:89:61:7e:
da:f0:f9:16:4f:8d:69:f9:27:22:e3:c1:b5:30:08:
64:6e:9f:ab:e2:44:45:dc:43:39:ac:69:69:70:b6:
64:b5:f1:82:ea:5a:de:c7:cc:df:c3:54:8e:7f:c5:
22:f9:90:da:fb:6c:3f:e5:d6:b7:9f:0e:60:25:77:
33:14:79:fa:ad:a5:40:35:96:65:38:db:56:35:3a:
78:a7:d8:3d:cf:b5:ea:1c:30:eb:13:da:94:d5:60:
9d:d6:5a:16:72:4d:d1:3d:6e:2b:f9:7a:6d:b1:60:
14:88:40:e7:7c:38:a2:89:26:fb:8a:b9:82:3b:f6:
9b:02:db:fd:c2:16:bf:80:31:d9:fa:83:e0:01:f4:
30:90:79:6d:9b:12:05:5a:1d:7b:70:1d:67:a8:96:
9e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
X509v3 Authority Key Identifier:
keyid:EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/AfriNIC.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/lacnic/
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
200.16.8.0/21
Signature Algorithm: sha256WithRSAEncryption
af:23:13:2f:a3:36:67:47:75:2f:19:a9:13:74:27:7d:99:0c:
b2:92:40:23:01:dd:dd:87:34:78:78:ed:93:81:bc:3c:1e:d3:
85:15:11:28:68:a7:a4:ca:98:74:35:75:ff:ed:e9:ed:1c:2c:
b4:62:39:69:1e:db:c1:3c:65:f9:2e:0f:a5:f6:2d:76:90:0b:
4e:c8:8d:a2:ff:ce:7e:8b:a4:90:61:fd:a9:a8:09:ea:53:1a:
40:4e:0d:51:97:c3:e6:87:17:18:4c:49:eb:36:5f:b3:78:94:
04:aa:81:7f:45:e8:d7:75:e7:7c:84:71:43:23:3e:d7:90:71:
67:d9:69:56:db:aa:a1:7b:4a:ac:2d:cb:37:a3:fd:59:8c:0a:
d6:df:ca:d2:b2:0e:59:a2:14:9d:eb:30:53:a1:09:4b:09:8f:
c1:80:8b:25:59:d5:a0:9e:c6:8f:60:80:22:ea:92:95:7c:19:
80:4a:76:d3:83:73:cc:b3:83:f1:78:d3:9a:d8:03:89:f0:63:
37:1c:2b:46:be:3a:d0:e3:f4:f2:2e:13:70:0b:4c:f2:f7:56:
d5:a8:7a:b7:88:38:d7:b5:9f:f4:4d:5b:72:b2:07:f3:43:dd:
b9:5d:e9:c2:11:db:c9:c9:22:f1:0e:a2:66:89:d6:7c:7b:19:
8b:53:b5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 3 13:17:25 2023 by rpki-client on console-ams.rpki-client.org