Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
File: JLXuZ0cVou7uiGTqX17kcyPPdmw.cer (raw, json)
Hash identifier: 71MhqANRhwyd9kue35mVczQmF4td5MFEggWF/w5MnfI=
Subject key identifier: 24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2B58
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 28 Aug 2024 07:03:14 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 2905
AS: 4178
AS: 4571
AS: 9129
AS: 11569
AS: 12091
AS: 16637
AS: 24788
AS: 28698
IP: 41.112.0.0/12
IP: 41.181.0.0/16
IP: 41.195.0.0/16
IP: 41.208.0.0/18
IP: 105.176.0.0/15
IP: 105.208.0.0/12
IP: 105.236.0.0/15
IP: 196.3.224.0/19
IP: 196.4.87.0 -- 196.4.93.255
IP: 196.7.0.0/16
IP: 196.11.239.0/24
IP: 196.13.228.0/22
IP: 196.22.64.0/18
IP: 196.30.0.0/15
IP: 196.41.160.0/19
IP: 196.44.0.0/19
IP: 196.47.0.0/18
IP: 197.64.0.0/12
IP: 2001:4218::/32
IP: 2001:4260::/32
IP: 2c0f:fb08::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11096 (0x2b58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Aug 28 07:03:14 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F367678FAF/serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e5:a5:30:fc:00:2c:15:bf:f7:c1:ca:9d:8f:
a9:b5:ae:b1:3b:24:42:39:80:ad:36:96:6c:a9:33:
6f:09:1e:39:4d:af:7f:d9:41:a0:74:cb:0e:c1:78:
72:59:7c:27:48:e4:de:48:4e:b8:e4:63:6f:0b:30:
39:18:cc:04:31:6f:a5:d2:bc:94:f0:2b:d6:c8:29:
00:7c:d5:3c:2b:09:74:74:7f:55:b3:99:c2:1a:17:
69:a5:dc:e3:cb:25:cf:2a:fd:19:5e:f4:30:e6:67:
4a:b7:d5:20:37:1c:01:29:67:eb:27:91:c8:11:c8:
2c:d2:40:b7:d1:c5:61:82:a8:6c:1c:73:bb:89:3b:
c6:0f:56:73:02:ee:3f:c6:61:06:a6:ff:50:3d:bc:
f6:4e:f7:20:c8:c6:f6:94:fc:2c:0d:a2:09:d5:9c:
09:6f:a0:21:10:70:31:e1:a3:31:d3:fe:fb:6a:5a:
bc:fa:19:96:bf:c8:09:66:13:ca:54:dc:ae:62:0a:
aa:44:7b:e0:4f:e2:fd:dd:52:5b:4f:56:da:29:ec:
fa:fd:2e:e3:43:ce:51:bf:40:0e:9a:ae:f1:3f:6f:
dd:f8:c6:43:9f:5c:8e:7d:7d:ef:df:8e:b1:b7:6e:
62:5c:dc:ee:87:f1:96:9a:1b:13:36:89:70:a8:15:
79:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2905
4178
4571
9129
11569
12091
16637
24788
28698
sbgp-ipAddrBlock: critical
IPv4:
41.112.0.0/12
41.181.0.0/16
41.195.0.0/16
41.208.0.0/18
105.176.0.0/15
105.208.0.0/12
105.236.0.0/15
196.3.224.0/19
196.4.87.0-196.4.93.255
196.7.0.0/16
196.11.239.0/24
196.13.228.0/22
196.22.64.0/18
196.30.0.0/15
196.41.160.0/19
196.44.0.0/19
196.47.0.0/18
197.64.0.0/12
IPv6:
2001:4218::/32
2001:4260::/32
2c0f:fb08::/32
Signature Algorithm: sha256WithRSAEncryption
a6:07:6a:38:49:13:ff:2a:48:64:6d:30:92:14:c2:14:cf:44:
6a:38:8e:f4:2e:c1:e8:55:fd:fc:61:36:d0:d9:76:7f:69:67:
30:28:62:8d:f2:62:80:44:3f:c8:f6:51:76:1a:5c:3f:67:aa:
f0:28:8e:6a:16:22:6c:e2:78:e2:8a:2a:38:67:83:26:d2:a3:
6a:a9:23:96:52:ae:95:ff:3d:0b:8b:f4:b0:3b:ee:48:9f:7d:
27:bd:23:93:4c:c5:2f:19:cc:98:5e:27:ef:2d:8c:de:c4:29:
6d:33:d3:c3:d7:ed:ca:21:72:6e:03:eb:28:f7:f1:df:dd:e2:
b1:b1:55:88:b9:ac:27:23:97:d1:8d:e8:1e:18:d1:e8:ca:84:
a2:35:99:9e:ea:24:a0:04:45:68:69:81:35:9d:ac:d1:42:a7:
0a:e1:aa:58:14:de:2a:b5:83:09:d7:0c:6b:67:92:40:f5:ec:
1a:7f:c2:6b:9b:e6:eb:69:09:7b:bd:eb:84:21:31:fc:f1:76:
71:b4:a4:02:23:81:39:ba:86:73:7a:5d:a2:52:50:90:9b:bf:
85:fb:cb:36:16:3a:1a:0b:0f:76:b1:60:dc:54:31:fb:79:27:
79:96:40:b1:4b:54:dd:9b:df:53:83:d2:7f:20:be:2a:0b:c8:
91:fe:cf:c8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:21 2024 by rpki-client on console-ams.rpki-client.org