Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
File: -kNarmNKJJQBjFzfiFcJr1vONro.cer (raw, json)
Hash identifier: M1mpsqJCAu/sLpQFlpW40468uH5qvSIan90RqpJIh9M=
Subject key identifier: FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 273E
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 01 Jan 2024 03:41:10 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 327981
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10046 (0x273e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 03:41:10 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F36B1FB2AF/serialNumber=FA435AAE634A2494018C5CDF885709AF5BCE36BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:49:6f:26:dc:a9:8b:e4:cb:a0:6e:4f:2c:b8:
97:60:a4:10:d2:44:f8:ab:37:58:be:00:aa:95:f9:
c1:a8:4c:17:bd:e4:76:74:4e:65:1c:45:46:4d:8d:
a6:46:54:13:c9:75:cd:91:40:c5:19:73:e5:fd:f5:
58:fb:f3:22:10:b3:b4:81:24:d7:98:52:2d:9a:25:
0f:63:0e:2e:5d:9c:fd:eb:fd:01:28:76:f5:38:26:
e3:f1:92:a5:c3:57:4c:6d:78:0a:77:18:ed:55:5d:
ee:15:d8:89:e0:7d:37:45:d3:2e:d4:16:4f:fe:72:
37:6a:b8:9c:fe:cb:6e:f0:ef:23:8b:1d:c1:62:10:
13:5d:38:d9:c6:53:72:d9:b6:98:f8:55:cf:0c:71:
15:38:a2:32:e1:82:97:f4:ab:2d:bb:ab:51:ce:52:
48:e9:d9:0d:7f:2a:eb:46:51:56:7a:d3:5f:70:dd:
a7:53:19:98:1f:18:d9:32:9c:30:80:09:87:ef:89:
ab:b8:44:a9:d4:19:26:59:09:1c:64:6c:cd:ae:25:
f0:de:3d:ee:99:ba:8c:d1:55:77:e8:6b:17:a4:04:
4c:ee:0a:64:91:70:18:7a:6b:70:dd:14:a1:0e:5e:
55:23:3a:8a:78:15:e4:bc:26:2f:31:57:e4:64:ba:
6e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
327981
Signature Algorithm: sha256WithRSAEncryption
1f:c5:3b:2b:96:51:e4:fd:f1:30:87:c4:00:5b:da:51:84:5b:
ae:bd:59:5d:4d:4c:0a:98:b9:b7:db:53:a9:bb:38:51:c5:8b:
06:d9:b2:b4:02:b0:52:66:64:05:70:72:f0:d9:e3:40:10:b7:
ee:55:aa:49:33:b0:54:d7:89:9e:2d:4e:10:0a:e8:48:48:0c:
81:da:5b:e7:46:09:5e:ac:66:f3:9f:3e:3a:6f:2c:43:04:b6:
d3:78:ff:3b:91:45:7d:eb:e0:13:37:52:47:83:28:99:8f:d9:
4f:7a:66:c8:c3:81:6e:01:d2:0f:05:b3:20:a5:be:a9:9a:01:
14:80:4b:56:43:20:bd:1b:6b:7d:8c:63:bf:09:aa:05:c6:79:
3d:65:bc:db:e8:a4:e6:8a:6a:79:cb:ce:41:98:1a:d1:e4:d6:
d7:10:e0:83:dc:01:54:13:9e:62:7d:8e:6f:3c:15:6a:7f:d4:
5b:17:bd:5f:84:64:ce:6b:a1:42:e7:2e:53:df:d6:22:e7:6d:
82:07:f9:a9:71:e1:d3:e6:b9:dc:d3:da:97:a2:ac:31:5c:f9:
4e:3c:43:d5:8f:af:52:5b:83:a6:92:48:fb:df:a4:6b:7a:ae:
62:fb:57:33:c1:f9:69:cb:16:72:42:13:67:04:b9:75:ca:d1:
bf:56:ee:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:30 2024 by rpki-client on console-fra.rpki-client.org