Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
File: 9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer (raw, json)
Hash identifier: qIreoQz/aD4jIEbCDbe4hirDjG2fSMIj/NLJlwbyTqo=
Subject key identifier: F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 24EE
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:04:45 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 102.210.190.0/23
IP: 2001:43ff:d000::/48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9454 (0x24ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 02:04:45 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F3656BB8AF/serialNumber=F67066439ACD9EAFD4899FC68C6075C70CE39AD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:03:a0:a0:16:20:60:b1:06:f2:7b:a4:0e:6a:
b9:79:23:e4:d7:a6:5f:94:78:9e:09:63:72:8c:4d:
69:82:16:b0:2e:90:22:c6:4b:74:91:8a:c1:c2:96:
08:9e:eb:ba:a4:47:9f:97:06:89:8e:5f:79:07:f7:
e8:df:fe:3f:1e:3e:2f:b2:88:7a:5d:ff:c1:cf:a4:
92:a4:cf:cf:92:1e:e7:87:e0:97:0e:5a:9f:68:94:
70:4d:91:36:1f:0f:31:ec:ab:e5:53:df:45:0f:c2:
e9:e8:be:f0:c8:d2:65:f2:d7:09:7c:7a:12:44:90:
db:1b:72:71:37:b4:4d:f5:b1:04:1d:33:f9:5b:ea:
6d:d6:8b:b5:9c:b2:cd:52:d7:e9:30:93:b5:fc:d0:
51:6e:55:3e:be:ff:56:d2:99:04:c6:58:1d:ed:6a:
cf:46:33:af:cf:ac:c7:8a:f5:be:5a:8b:34:07:47:
ac:a7:90:58:9f:8a:fb:00:b7:a7:4d:d7:66:56:11:
10:8a:9b:5b:e2:85:2b:c8:8c:3b:94:ee:19:72:1c:
71:c4:f1:51:33:fa:25:dc:96:7b:ac:a8:f4:86:02:
0a:b2:d7:9a:8b:0c:8a:40:07:23:41:1f:be:bb:83:
06:d5:04:89:a5:75:23:5e:50:9d:a4:22:19:c6:8e:
b8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
sbgp-ipAddrBlock: critical
IPv4:
102.210.190.0/23
IPv6:
2001:43ff:d000::/48
Signature Algorithm: sha256WithRSAEncryption
ab:06:f4:ca:9e:bc:f4:a6:07:bd:09:ae:a2:2c:1d:2a:21:e0:
13:2e:8b:e1:03:5f:61:2b:89:b1:49:b6:4d:13:d0:21:e3:9e:
3b:96:e0:1b:8e:ec:47:cf:fd:79:2a:45:ce:e7:e9:5e:cf:03:
16:43:2f:ab:5e:c7:2c:9e:50:58:e8:e4:cc:79:1a:15:be:ae:
6e:a1:ce:aa:f9:27:7a:43:fe:1b:b7:d0:5e:1e:39:30:2c:46:
54:89:39:a9:42:c4:a6:b0:f1:e6:ac:a0:b0:3e:11:4a:0d:dd:
7b:06:6b:5a:c3:d9:03:a9:62:4f:6a:d2:88:ed:3c:83:2e:1e:
40:7e:ee:e2:35:e7:35:8a:c4:3d:c4:df:a8:9e:70:1f:b8:4d:
72:56:8d:55:43:a8:6b:42:82:bc:c6:3f:ae:48:6b:33:de:4a:
9f:66:5c:a1:c5:53:41:82:1f:d7:d4:e8:6c:4a:1f:79:31:f1:
91:76:1b:eb:4f:12:00:e1:58:87:e8:1d:d3:de:39:15:41:39:
fc:d0:97:32:83:81:b8:b1:bb:13:b9:57:7f:3f:e5:54:14:f8:
e0:9c:82:76:4e:b0:16:c2:c0:8b:9e:9e:62:85:ac:94:73:95:
a8:28:f5:4f:8f:fa:d4:3d:dd:c9:63:12:fc:a2:47:16:38:26:
1a:d7:4e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 00:50:26 2024 by rpki-client on console-fra.rpki-client.org