Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/M_vh3N40HGSYaNQWvz6gAALE3yA.cer
File: M_vh3N40HGSYaNQWvz6gAALE3yA.cer (raw, json)
Hash identifier: JYKLkt5TXjz8XtRs7Ysagt1IyJ5/7yWjIpFjTZ8dTRQ=
Subject key identifier: 33:FB:E1:DC:DE:34:1C:64:98:68:D4:16:BF:3E:A0:00:02:C4:DF:20
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2525
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:18:32 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 37799
AS: 328442
IP: 102.68.56.0/21
IP: 102.213.120.0/22
IP: 102.216.240.0/22
IP: 196.60.92.0/24
IP: 2001:43ff:6000::/48
IP: 2c0f:ed00::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9509 (0x2525)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 02:18:32 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F365C754AF/serialNumber=33FBE1DCDE341C649868D416BF3EA00002C4DF20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8d:9e:1b:4c:88:4e:e4:47:52:53:68:ff:06:
16:c9:81:5e:ef:70:e6:13:c3:fe:01:e6:38:2d:db:
a6:25:e5:f9:88:8d:ef:63:f5:01:f9:57:dc:4b:dd:
6b:95:3d:85:75:28:64:cf:40:62:45:50:74:91:97:
2e:1d:64:d8:18:0a:57:65:10:7c:9f:3d:04:cd:ce:
42:ba:43:6d:ad:89:78:ce:9f:08:a5:1c:da:79:c6:
92:51:be:3e:f7:46:35:f1:7a:1e:94:61:3d:e1:2f:
2f:ac:94:9a:98:90:c3:d3:f6:bd:f3:c5:1a:b8:46:
0e:7b:d0:c8:ea:17:5c:22:40:36:ee:8f:46:03:23:
6a:f8:3c:63:10:71:ac:2b:d3:ed:c0:7e:39:90:28:
92:29:32:ac:8a:3f:4e:39:76:41:8a:80:63:19:49:
bc:30:26:47:c6:b7:19:09:71:ea:d2:3c:ed:73:4b:
a8:f5:db:57:75:47:a0:25:3d:42:be:b8:1d:13:07:
3d:76:f3:51:4a:b1:4d:5d:f7:b5:41:5c:8c:e8:67:
c5:70:ff:67:73:65:dd:e8:57:0a:2e:58:1a:33:4c:
91:21:0e:2b:6d:42:b6:24:96:50:0f:b7:81:56:34:
3c:26:6d:df:b6:8a:2a:b4:04:9b:88:43:90:e7:df:
cb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FB:E1:DC:DE:34:1C:64:98:68:D4:16:BF:3E:A0:00:02:C4:DF:20
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37799
328442
sbgp-ipAddrBlock: critical
IPv4:
102.68.56.0/21
102.213.120.0/22
102.216.240.0/22
196.60.92.0/24
IPv6:
2001:43ff:6000::/48
2c0f:ed00::/32
Signature Algorithm: sha256WithRSAEncryption
60:36:6a:55:9f:ec:72:bf:c0:68:ee:66:7e:03:a1:53:cd:07:
76:28:bd:17:c2:9a:43:49:08:9c:66:c8:26:7d:4b:d9:5f:5e:
ca:bc:8e:95:74:11:35:68:36:fb:6b:b3:17:85:fc:c4:4a:90:
ba:bf:43:c1:95:18:66:1c:ba:a5:83:5f:21:d2:2b:c1:9b:eb:
3f:95:98:be:e7:f3:ab:a7:29:99:d5:79:49:89:1b:78:8e:f6:
70:92:e2:39:60:44:b4:dd:fc:1b:df:f1:64:6d:b3:68:5d:9f:
83:a1:8c:a8:fe:87:f2:48:f9:82:15:84:70:03:b0:4c:dd:5f:
2b:a0:84:d2:e0:0c:0e:a5:8f:16:a4:61:65:ee:9b:3f:29:d7:
ef:fc:6b:a3:49:8d:59:91:72:c9:be:56:6b:88:35:3f:8f:1f:
16:4f:87:ae:30:36:cb:dd:7b:0d:08:9c:c1:f0:d0:4b:c4:a8:
3c:78:9d:7b:4e:49:d0:38:f2:5c:fc:a9:d7:a7:d0:4d:e3:4e:
f3:9c:ce:97:2f:df:e1:06:f7:6f:c2:e5:79:74:08:98:1f:af:
70:d3:ff:a9:c3:82:96:70:dc:e5:d4:f7:cc:79:aa:87:a5:26:
34:77:55:f5:24:6c:86:53:28:3d:01:c0:3f:4d:1f:e6:ec:71:
dc:0f:81:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 00:53:13 2024 by rpki-client on console-ams.rpki-client.org