Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/AaNx1Ie11VLkTUu-yVarlsMlge0.cer
File: AaNx1Ie11VLkTUu-yVarlsMlge0.cer (raw, json)
Hash identifier: M/OAY8K3H6yzHD7CYp2BMaV28RO1uvnWY453Mp4yUUc=
Subject key identifier: 01:A3:71:D4:87:B5:D5:52:E4:4D:4B:BE:C9:56:AB:96:C3:25:81:ED
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 280C
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/AaNx1Ie11VLkTUu-yVarlsMlge0.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:12:41 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 102.216.38.0/24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Apr 2024 05:23:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10252 (0x280c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 04:12:41 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F36DCAE3AF/serialNumber=01A371D487B5D552E44D4BBEC956AB96C32581ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7d:55:c7:ed:38:42:bb:14:cb:29:82:15:eb:
ec:cc:16:e0:ae:d7:aa:80:e8:87:3c:4a:73:d4:47:
d9:90:ff:c1:86:a0:18:15:46:cb:93:9e:fa:8a:ed:
e9:f2:60:e7:01:4a:39:b4:58:42:d3:63:86:23:9e:
dd:66:b1:86:d1:6d:fc:9d:d9:fd:f5:5f:45:07:39:
02:e3:9f:32:b4:62:39:ab:0b:0a:fb:ce:b5:bb:04:
14:cd:a2:dc:fb:04:98:b2:10:a2:d4:84:83:3a:1a:
43:b9:dc:e2:a6:67:87:ed:91:05:76:2b:f2:e7:ba:
80:6c:11:fb:a3:09:cd:5d:5d:1b:02:fc:5d:3b:1a:
ab:6e:a2:a6:30:ec:9b:2a:1c:11:18:3d:ba:40:4a:
e3:19:92:b7:83:3e:cc:39:83:14:20:fe:4c:91:07:
fa:0f:9c:54:f2:e7:f7:f9:44:61:2f:90:1c:4a:3b:
ed:fd:9d:d8:37:fd:6f:71:1a:f7:b1:10:a2:02:f7:
e2:67:f3:b8:b8:25:6f:f6:78:1d:59:50:71:0f:d3:
46:05:d8:20:54:22:18:6f:31:93:8b:ed:95:83:19:
9d:a8:e0:c3:0b:03:89:39:90:8e:29:be:ee:38:17:
72:82:c7:25:64:62:06:78:82:a1:4b:df:3a:c2:cf:
24:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A3:71:D4:87:B5:D5:52:E4:4D:4B:BE:C9:56:AB:96:C3:25:81:ED
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/AaNx1Ie11VLkTUu-yVarlsMlge0.mft
sbgp-ipAddrBlock: critical
IPv4:
102.216.38.0/24
Signature Algorithm: sha256WithRSAEncryption
17:f8:e5:88:33:62:97:fc:5f:4f:68:19:51:40:59:63:dc:5d:
5e:9d:4f:19:f9:4e:39:f9:13:0c:4c:84:b3:b8:3b:64:5f:66:
cf:7d:d7:30:6a:de:17:10:f9:95:d2:e4:b5:aa:2c:7b:c7:a7:
ec:75:ca:5b:c0:4e:94:c2:82:12:fd:1e:b3:41:fb:8a:8f:87:
8b:97:33:12:ac:53:32:f0:ba:06:ad:4c:0a:05:cf:ea:39:1d:
4d:fb:ea:0e:cc:08:58:86:9f:a7:30:8b:aa:60:03:68:1e:f0:
86:03:4e:a5:bb:dc:bd:6c:99:d6:61:af:78:a9:a9:73:4d:24:
90:09:88:fd:e0:c3:a7:c4:2f:f8:2d:39:97:aa:90:78:86:c6:
66:0b:66:87:76:8f:3c:bb:57:04:db:cb:7d:d5:ea:27:5b:a7:
8e:8d:ed:2f:91:d6:42:8b:11:b3:cf:8f:b7:cd:a4:2f:a9:ca:
0c:de:e6:af:85:88:ee:08:01:a7:5e:f0:be:00:97:53:f1:b1:
72:00:95:06:b8:8d:95:69:ff:90:1b:90:c4:81:09:18:02:09:
dc:80:f3:44:57:9e:16:9e:81:0c:a6:19:58:e4:6f:c3:9a:28:
17:5d:57:27:72:65:0d:fd:b8:36:06:98:2b:ba:8b:3f:6e:27:
45:70:1b:6c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 25 06:38:22 2024 by rpki-client on console-fra.rpki-client.org