Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/E2WN9-mHoR_1aHI8e3Ha1wceM98.cer
File: E2WN9-mHoR_1aHI8e3Ha1wceM98.cer (raw, json)
Hash identifier: 1fCXN5KZoDRN/btziOj2AlXvgo8O+WLXIBr7VRHLSFE=
Subject key identifier: 13:65:8D:F7:E9:87:A1:1F:F5:68:72:3C:7B:71:DA:D7:07:1E:33:DF
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 33EB
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F366115B/D6DD2C48D17D11EFAF2085B2762E951A/E2WN9-mHoR_1aHI8e3Ha1wceM98.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F366115B/D6DD2C48D17D11EFAF2085B2762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 13 Jan 2025 07:13:18 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328562
IP: 102.23.144.0/20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13291 (0x33eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 13 07:13:18 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F366115BAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:98:5e:bd:99:d4:25:06:a5:9c:d8:7e:1a:ab:
30:44:6a:48:5e:36:b6:77:e9:d5:6d:8e:08:45:68:
43:25:13:d5:b4:85:9d:5e:08:27:35:a9:a1:4c:15:
99:af:76:da:03:83:53:52:56:f9:94:84:07:a5:26:
43:4e:94:7a:ef:26:42:cb:5f:1c:86:5c:a1:b3:03:
4f:27:bd:ad:55:3b:aa:f3:dc:15:1d:b1:8e:86:ed:
05:25:e3:6a:e6:03:23:0b:7c:a3:dd:61:fa:98:0c:
ed:43:2d:85:bd:3f:0c:cb:c7:e6:d3:d3:32:cd:b7:
d4:b0:4e:66:ee:67:a5:ca:25:91:07:ac:d8:f8:ca:
79:d4:d7:4e:b6:19:c1:25:ce:fe:46:3f:75:83:5c:
ff:70:44:c4:04:f4:06:5d:0e:88:f0:27:a7:7d:c0:
35:6a:2a:42:e4:8d:8a:0f:78:66:7f:c9:65:f8:a8:
10:8d:8e:c2:e1:3a:48:76:bd:3e:36:36:22:79:09:
0b:29:39:50:09:54:19:c6:cf:e1:dc:ac:a0:55:a7:
9d:d7:46:4f:02:48:e8:07:a5:4a:a0:16:d3:29:dd:
f5:51:33:f5:31:0b:ff:05:bc:49:04:ce:d4:13:5c:
e2:e6:de:ef:7b:37:19:88:34:b7:82:95:4b:31:6c:
14:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:65:8D:F7:E9:87:A1:1F:F5:68:72:3C:7B:71:DA:D7:07:1E:33:DF
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366115B/D6DD2C48D17D11EFAF2085B2762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366115B/D6DD2C48D17D11EFAF2085B2762E951A/E2WN9-mHoR_1aHI8e3Ha1wceM98.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328562
sbgp-ipAddrBlock: critical
IPv4:
102.23.144.0/20
Signature Algorithm: sha256WithRSAEncryption
b8:1e:5e:91:5e:6c:74:30:36:7f:c6:43:15:a4:d8:2c:96:43:
89:3d:f6:33:74:19:18:36:20:09:4b:05:1f:ad:82:90:8b:ee:
1e:5d:34:06:43:e6:0a:f5:45:93:ad:21:c8:c5:66:7a:e9:5b:
d5:33:df:f2:b6:e1:af:8f:e0:d0:70:f2:3f:c5:9a:99:24:a6:
9f:bb:5b:1a:3c:f9:cf:ca:88:bd:93:7c:e3:84:1b:62:f9:62:
cd:21:d6:dd:96:f3:68:a2:58:70:d4:49:cb:a1:23:05:7c:c4:
16:ed:1e:40:ca:ab:6d:62:34:f2:02:35:10:25:ee:d9:b0:17:
57:b0:f1:38:62:22:39:cd:89:1f:b4:b2:9a:b4:a0:13:16:b9:
f2:d3:a2:1a:b9:d7:f6:a9:4b:89:b3:d3:ef:a9:a6:4d:dc:83:
a7:be:35:e5:00:10:b7:e7:10:54:29:c5:5f:4e:d6:df:38:af:
ca:e2:d3:bb:cd:38:87:6b:07:06:a9:d7:1b:1b:e0:f1:a6:98:
81:92:cb:c2:ff:f7:76:a6:53:1a:2c:95:7a:88:53:61:a4:7d:
8d:59:fe:ad:4c:6d:68:5e:24:87:a7:27:d6:82:d7:9d:7f:d0:
02:95:b8:93:68:f5:c0:f1:15:47:34:6e:ba:11:18:d0:6e:cd:
90:08:63:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:27 2025 by rpki-client