Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
File: CbNOEzY507TuNRYTuKYNaxkCrWM.cer (raw, json)
Hash identifier: Ip2QWXGnhFZszTBIXiGKydW+/wiK6RFy29Zec2V03CM=
Subject key identifier: 09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 29E3
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 22 Apr 2024 19:51:45 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 328586
IP: 102.22.232.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10723 (0x29e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Apr 22 19:51:45 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F3693AE0AF/serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2f:2d:d2:9b:ab:e3:e7:1c:25:aa:c5:df:13:
35:02:17:05:8a:4b:2b:ad:68:83:6e:4c:b4:d4:41:
05:c7:ba:e9:99:91:86:4d:3d:5f:0f:38:bf:33:c8:
f6:8f:5c:aa:53:fa:c4:ff:51:15:4c:cd:a7:62:87:
fa:f9:22:a5:57:a0:bc:2b:73:4c:ba:27:93:6f:5d:
6f:5a:b1:42:15:e0:9c:c9:24:4c:e6:76:f7:ae:cb:
96:c0:f0:5e:ae:c0:ef:b7:4e:f5:a4:2b:a0:f1:f2:
35:81:02:08:0c:ce:d5:ba:19:6c:52:bf:d9:a8:3a:
e5:8b:64:08:4b:b3:eb:28:51:9d:43:d2:ec:43:12:
39:9c:1e:96:6d:8c:ac:4d:df:1e:be:82:83:28:2a:
99:48:34:97:a3:f4:0b:3e:76:a4:b9:0d:ed:2f:db:
a5:93:1b:80:68:1c:37:5b:64:13:06:2b:e1:2c:10:
4d:d4:16:2e:ad:c2:a3:d5:ed:50:fb:7f:1d:79:e9:
5f:fd:67:f7:31:eb:09:b5:a1:84:10:d5:49:f5:31:
41:6d:9b:df:bc:94:53:64:41:eb:79:1a:7f:56:0e:
d7:69:76:aa:bd:db:ad:82:34:f6:65:1d:8a:63:93:
e8:66:5f:07:e2:35:31:3a:7c:e6:6c:46:77:b7:86:
06:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328586
sbgp-ipAddrBlock: critical
IPv4:
102.22.232.0/22
Signature Algorithm: sha256WithRSAEncryption
07:fd:f3:37:65:a8:75:85:1a:03:21:92:0e:3d:0f:cf:c5:6d:
6a:ea:72:42:26:cf:8b:af:9b:62:ba:3d:02:8b:a4:9d:b4:9b:
d7:1e:79:c5:8d:19:1b:e0:f4:69:3d:10:13:32:b7:b8:ec:6d:
24:6d:3f:9d:fc:e9:b9:41:29:7c:65:06:a0:d2:d8:98:4c:ec:
c8:d6:c5:9d:15:86:83:e6:98:81:df:41:cf:51:2e:7c:e6:f5:
e5:2e:da:dd:ed:be:ab:9f:a8:0c:82:0d:db:a4:a7:67:60:f9:
fc:60:75:74:70:30:f4:a9:73:fc:19:2c:1d:5d:15:1e:f2:79:
36:8f:2c:14:76:8f:e5:45:21:3d:bb:7a:b9:5a:cd:b0:de:e6:
02:8c:0a:21:3f:52:73:72:7f:f6:b6:13:76:82:66:5e:79:d0:
8c:3c:97:f9:3a:f4:f3:0c:d1:a0:cd:7a:02:74:35:e5:49:87:
b0:f5:ba:33:7b:bf:87:80:74:25:57:42:30:70:6f:48:54:07:
b7:5a:c2:11:be:4e:d7:45:32:c9:90:f7:c1:cf:e8:62:80:a5:
25:56:ac:50:81:a8:51:ac:be:63:54:a4:c5:cb:03:dd:00:57:
0f:ad:e4:bd:33:60:cc:66:41:d6:e7:08:c9:0a:8e:0e:c4:ef:
8c:8e:ca:0e
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgICKeMwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDA0MjIxOTUxNDVaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjkzQUUwQUYxMTAvBgNVBAUTKDA5QjM0RTEzMzYzOUQzQjRFRTM1MTYx
M0I4QTYwRDZCMTkwMkFENjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDYLy3Sm6vj5xwlqsXfEzUCFwWKSyutaINuTLTUQQXHuumZkYZNPV8POL8zyPaP
XKpT+sT/URVMzadih/r5IqVXoLwrc0y6J5NvXW9asUIV4JzJJEzmdveuy5bA8F6u
wO+3TvWkK6Dx8jWBAggMztW6GWxSv9moOuWLZAhLs+soUZ1D0uxDEjmcHpZtjKxN
3x6+goMoKplINJej9As+dqS5De0v26WTG4BoHDdbZBMGK+EsEE3UFi6twqPV7VD7
fx156V/9Z/cx6wm1oYQQ1Un1MUFtm9+8lFNkQet5Gn9WDtdpdqq9262CNPZlHYpj
k+hmXwfiNTE6fOZsRne3hgYHAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUCbNOEzY5
07TuNRYTuKYNaxkCrWMwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY5M0FFMC9CQkU1MkZGMjAwRTEx
MUVGQUY4NEQ2MDcwMTcwMDFCMS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OTNBRTAvQkJFNTJGRjIwMEUxMTFFRkFGODRENjA3MDE3MDAxQjEvQ2JOT0V6
WTUwN1R1TlJZVHVLWU5heGtDcldNLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFA4owHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmFugwDQYJKoZIhvcN
AQELBQADggEBAAf98zdlqHWFGgMhkg49D8/FbWrqckImz4uvm2K6PQKLpJ20m9ce
ecWNGRvg9Gk9EBMyt7jsbSRtP5386blBKXxlBqDS2JhM7MjWxZ0VhoPmmIHfQc9R
Lnzm9eUu2t3tvqufqAyCDdukp2dg+fxgdXRwMPSpc/wZLB1dFR7yeTaPLBR2j+VF
IT27erlazbDe5gKMCiE/UnNyf/a2E3aCZl550Iw8l/k69PMM0aDNegJ0NeVJh7D1
ujN7v4eAdCVXQjBwb0hUB7dawhG+TtdFMsmQ98HP6GKApSVWrFCBqFGsvmNUpMXL
A90AVw+t5L0zYMxmQdbnCMkKjg7E74yOyg4=
-----END CERTIFICATE-----
Generated at Mon May 6 00:50:26 2024 by rpki-client on console-fra.rpki-client.org