Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer
File: 3XSZqMjBKrZ-FetJKAimku1LWfQ.cer (raw, json)
Hash identifier: b3Zuzk9re/wTbLzW3DmN8Tizh/t20U5ndEJWEOyHx5k=
Subject key identifier: DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 294B
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 14 Feb 2024 00:01:29 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 328732
IP: 102.209.232.0/22
IP: 102.216.220.0/22
IP: 102.221.216.0/22
IP: 2c0f:e9a8::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10571 (0x294b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Feb 14 00:01:29 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F365C79EAF/serialNumber=DD7499A8C8C12AB67E15EB492808A692ED4B59F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b9:86:ad:c3:be:e3:19:86:fc:7a:62:48:f5:
37:9c:c2:cd:31:ec:2d:98:eb:77:0f:b3:2a:c3:90:
46:d8:d9:e4:99:6c:43:a1:09:96:ff:82:dd:d1:e9:
df:1e:81:73:a1:80:9f:39:cf:f0:56:cd:58:f3:f6:
bf:4a:0b:71:a6:7e:61:d4:53:a7:12:a5:96:75:41:
1d:79:1d:1b:ff:c8:14:04:c1:f0:49:70:8d:6b:de:
7e:cd:9c:6c:59:b3:17:ad:97:50:00:cf:81:30:c4:
16:d7:3c:2a:a1:81:58:b7:9b:33:cd:c0:a3:4f:b4:
45:8f:81:a2:f2:2c:9a:a1:bb:2d:d4:79:8d:57:d6:
89:20:92:7e:de:ac:dc:04:8c:14:fa:f9:2a:a1:c5:
db:d0:ea:e3:43:06:ba:26:ad:bf:29:c8:b3:13:60:
26:e0:49:f3:a2:87:7e:7a:82:c4:70:fa:4c:bb:22:
e5:95:dd:2b:19:3b:f2:16:1e:9d:1f:a3:3c:8c:ad:
23:69:2f:af:ed:e1:2b:79:2f:ab:00:8d:d3:35:03:
64:62:93:4f:74:17:29:26:4b:4d:cd:2c:21:98:bb:
ce:cb:38:09:5f:4e:a8:9c:53:52:a5:13:41:6b:82:
29:5e:d4:5e:d6:e7:e3:cc:0c:22:fc:b2:2d:46:0f:
09:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328732
sbgp-ipAddrBlock: critical
IPv4:
102.209.232.0/22
102.216.220.0/22
102.221.216.0/22
IPv6:
2c0f:e9a8::/32
Signature Algorithm: sha256WithRSAEncryption
35:fb:b7:af:84:d5:fb:26:e9:19:80:5e:6c:c1:e8:b9:86:82:
ab:5a:5b:a3:a9:8f:6f:e5:e2:b0:47:0d:12:e2:3a:e1:3b:bf:
97:9a:d9:d6:15:f3:39:a8:19:3a:07:39:86:69:65:81:19:c6:
a5:cd:c4:73:9e:77:00:e1:0f:09:fd:00:3f:e9:ba:18:e3:0f:
15:6b:5d:e7:a2:bd:e9:bd:0f:d7:04:7d:a5:6f:f5:7a:f6:e2:
bb:18:15:91:51:88:af:75:f6:f5:7f:26:cf:5a:49:79:4d:66:
de:72:c1:37:37:fe:e7:f8:69:0e:6c:d0:c8:74:36:e2:83:54:
4e:87:23:fc:99:1a:d7:df:c9:48:04:d7:24:a8:d7:14:f8:a5:
53:f5:e2:31:d6:ca:a3:0a:1b:88:90:e4:7d:d7:2d:93:45:bd:
05:88:ce:15:54:f6:e3:cb:4f:59:cb:0c:11:e8:97:a4:5c:d4:
4c:6d:91:30:e7:43:f0:5a:03:d2:f3:1e:f8:6a:b5:9a:5a:e8:
dc:f6:78:2c:89:d2:66:f4:ef:11:57:e0:3a:ef:b6:af:f4:58:
1c:02:0f:62:b9:a4:c7:bf:23:bf:73:4a:26:42:be:fc:7c:a7:
af:02:68:97:4b:19:92:55:02:c8:5c:5d:d7:a3:1d:96:e1:ff:
57:d7:4c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:21 2024 by rpki-client on console-ams.rpki-client.org