Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
File: 4qOmjo-ihl0uVH2MskMPqyH8oG0.cer (raw, json)
Hash identifier: bG3WNDPQWZhMdIsjVFUo1eErJGIufYlAQ6y5WzfhW6M=
Subject key identifier: E2:A3:A6:8E:8F:A2:86:5D:2E:54:7D:8C:B2:43:0F:AB:21:FC:A0:6D
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 23AC
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:45:27 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 328925
IP: 102.218.152.0/22
IP: 2c0f:3500::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 03 May 2024 00:04:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9132 (0x23ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 00:45:27 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F362A2E1AF/serialNumber=E2A3A68E8FA2865D2E547D8CB2430FAB21FCA06D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6c:67:6f:33:e8:05:a2:bf:70:3b:f9:fd:4d:
2b:d0:fa:e3:b6:ab:b3:0b:a4:ab:79:98:74:21:3e:
2c:34:04:5c:0b:57:03:c3:34:33:16:66:40:74:91:
79:85:20:9d:53:59:ee:d6:e4:90:87:ca:f7:d7:d6:
ff:61:da:d0:e0:ae:b8:f2:ba:bf:df:4e:6d:f7:b3:
c7:de:39:c8:b8:37:fc:42:d0:cd:49:70:b2:cc:82:
ed:b8:73:d0:30:81:bd:cd:80:d0:74:2f:14:c5:80:
de:b4:cb:a9:e4:7b:e5:0e:3f:7d:fc:4c:af:11:c7:
58:88:e7:48:5e:81:fd:60:a4:ee:2f:03:f0:01:ff:
55:72:51:0f:5b:7a:e4:92:51:bd:55:74:d7:b6:48:
cf:b4:62:a8:06:75:0f:ca:53:1e:c0:7a:80:af:90:
f2:19:ac:09:3d:ac:dc:b4:9f:41:2c:43:9f:28:e7:
8d:9f:71:ec:c4:81:9e:eb:0e:48:b3:bb:f6:b2:47:
28:70:b7:f4:c7:31:d5:d4:d0:a8:1e:b0:ee:0f:2a:
8e:7e:13:66:a0:79:65:db:12:9a:80:38:35:6e:8b:
0e:da:d3:bf:7f:a5:94:69:df:5e:e1:37:08:1e:4b:
f1:82:8f:a9:7e:b4:e7:2b:94:5c:0a:41:84:19:9d:
22:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A3:A6:8E:8F:A2:86:5D:2E:54:7D:8C:B2:43:0F:AB:21:FC:A0:6D
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328925
sbgp-ipAddrBlock: critical
IPv4:
102.218.152.0/22
IPv6:
2c0f:3500::/32
Signature Algorithm: sha256WithRSAEncryption
99:f3:76:c7:6a:49:d3:bc:ff:76:9c:49:4e:c5:e8:02:27:51:
b3:84:55:fb:06:4e:ae:c1:82:4b:6d:7b:ec:a3:b1:c4:c3:ac:
ef:2b:69:06:63:f4:b7:a4:21:c6:46:ac:9d:e2:4b:69:b0:36:
4b:62:2c:64:de:91:9c:8d:52:19:bc:6f:a7:02:69:1c:84:17:
aa:b8:da:53:6f:ce:32:f6:a2:fe:46:87:d8:de:d4:a8:75:a8:
36:55:f8:bd:e3:6a:4c:9d:bc:a0:95:c1:3f:a3:d2:c6:0b:84:
d7:df:19:e1:60:ca:8f:a0:5d:5f:ff:97:14:9c:db:2f:47:f2:
28:da:fd:da:dd:99:d7:d9:42:83:60:1c:b7:65:c0:be:e9:56:
5f:bb:df:8f:ee:a9:7d:e8:da:4e:8b:95:c8:32:d6:b0:fa:ae:
f9:57:fe:2b:38:e8:80:36:33:05:5f:cd:40:a7:4a:89:9b:38:
dd:b3:57:bc:ef:7f:dc:64:0d:b0:b4:59:b8:fa:ae:b0:fd:4e:
d6:b3:be:ab:92:0e:9a:66:10:bc:94:2f:31:36:94:ad:7c:cb:
a7:17:4e:cd:bc:c1:59:32:62:b9:f1:be:42:e6:36:99:c9:75:
e4:e5:04:17:7d:35:a1:36:e4:9a:35:dd:54:ca:b4:0f:06:f1:
12:9d:5e:cc
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICI6wwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAxMDEwMDQ1MjdaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjJBMkUxQUYxMTAvBgNVBAUTKEUyQTNBNjhFOEZBMjg2NUQyRTU0N0Q4
Q0IyNDMwRkFCMjFGQ0EwNkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMbGdvM+gFor9wO/n9TSvQ+uO2q7MLpKt5mHQhPiw0BFwLVwPDNDMWZkB0kXmF
IJ1TWe7W5JCHyvfX1v9h2tDgrrjyur/fTm33s8feOci4N/xC0M1JcLLMgu24c9Aw
gb3NgNB0LxTFgN60y6nke+UOP338TK8Rx1iI50hegf1gpO4vA/AB/1VyUQ9beuSS
Ub1VdNe2SM+0YqgGdQ/KUx7AeoCvkPIZrAk9rNy0n0EsQ58o542fcezEgZ7rDkiz
u/ayRyhwt/THMdXU0KgesO4PKo5+E2ageWXbEpqAODVuiw7a079/pZRp317hNwge
S/GCj6l+tOcrlFwKQYQZnSJzAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQU4qOmjo+i
hl0uVH2MskMPqyH8oG0wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYyQTJFMS8wMUM0QUQ1RUY2MTcx
MUVDODE5NzU0QUFGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MkEyRTEvMDFDNEFENUVGNjE3MTFFQzgxOTc1NEFBRjEyMjI0NjgvNHFPbWpv
LWlobDB1VkgyTXNrTVBxeUg4b0cwLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBN0wLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm2pgwDQQCAAIwBwMF
ACwPNQAwDQYJKoZIhvcNAQELBQADggEBAJnzdsdqSdO8/3acSU7F6AInUbOEVfsG
Tq7Bgktte+yjscTDrO8raQZj9LekIcZGrJ3iS2mwNktiLGTekZyNUhm8b6cCaRyE
F6q42lNvzjL2ov5Gh9je1Kh1qDZV+L3jakydvKCVwT+j0sYLhNffGeFgyo+gXV//
lxSc2y9H8ija/drdmdfZQoNgHLdlwL7pVl+734/uqX3o2k6Llcgy1rD6rvlX/is4
6IA2MwVfzUCnSombON2zV7zvf9xkDbC0Wbj6rrD9TtazvquSDppmELyULzE2lK18
y6cXTs28wVkyYrnxvkLmNpnJdeTlBBd9NaE25Jo13VTKtA8G8RKdXsw=
-----END CERTIFICATE-----
Generated at Wed May 1 00:35:47 2024 by rpki-client on console-ams.rpki-client.org