Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer
File: PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer (raw, json)
Hash identifier: 7uVaWT/MSukf00To7DbeX+JflW+OzKmKLHNz0nspgoA=
Subject key identifier: 3E:0C:E6:3D:60:45:5B:D6:5B:AA:31:54:BE:81:20:6C:67:E6:9D:44
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 25F0
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:51:28 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 37098
IP: 41.77.8.0/21
IP: 41.216.228.0/22
IP: 154.66.120.0/21
IP: 2c0f:f9a0::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9712 (0x25f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 02:51:28 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F36B33A4AF/serialNumber=3E0CE63D60455BD65BAA3154BE81206C67E69D44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d3:7f:ca:52:b9:76:41:74:9a:18:53:79:e9:
14:0b:b6:a2:34:61:32:e9:7b:04:67:40:db:a6:63:
09:bb:80:b3:d0:8a:08:bb:78:62:91:af:18:c5:01:
84:28:bc:04:9d:5e:fa:28:67:b9:3e:38:9c:ce:05:
cd:e5:db:96:65:5c:f1:9b:84:d0:ed:df:36:33:da:
0f:d0:43:51:d6:a3:bf:cd:20:84:fa:43:34:ab:96:
ce:36:ce:cb:7a:70:58:72:42:a0:d2:48:6e:d4:a2:
2d:6e:8d:c3:14:ff:20:6d:df:df:9f:0a:47:fd:56:
8c:e1:09:9b:7f:41:1c:eb:ea:a1:cf:4a:4c:83:08:
6b:62:9b:02:77:65:f1:7b:99:71:18:52:82:5d:95:
40:42:8b:e2:18:8d:5b:89:37:7e:72:1f:fa:6b:ec:
47:28:ac:41:bf:5f:99:cc:c7:54:b6:b9:78:ed:1b:
af:ee:6b:9f:22:42:9c:25:b4:45:9b:60:28:01:8a:
08:81:9a:e6:64:c8:55:d8:e3:28:fe:58:be:a8:fc:
ba:90:d1:bf:21:9c:bf:a1:81:70:af:79:3a:ee:bc:
ca:8f:07:aa:09:9b:a9:6b:e0:6b:da:a8:95:89:3e:
27:59:c0:e1:23:fc:68:00:d6:e7:91:e6:ed:59:d3:
44:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0C:E6:3D:60:45:5B:D6:5B:AA:31:54:BE:81:20:6C:67:E6:9D:44
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37098
sbgp-ipAddrBlock: critical
IPv4:
41.77.8.0/21
41.216.228.0/22
154.66.120.0/21
IPv6:
2c0f:f9a0::/32
Signature Algorithm: sha256WithRSAEncryption
a2:e3:a7:39:c9:ad:f7:e3:18:71:f3:e0:f3:3b:ab:51:ce:18:
80:bd:3a:75:02:e6:e8:c6:75:4d:90:f2:75:12:52:48:aa:c1:
94:ba:ef:ed:34:c0:f3:1c:0a:70:53:1f:57:01:4a:3c:e5:37:
5f:05:ae:c9:64:41:59:45:30:f8:20:96:00:8b:bb:ed:79:9e:
db:ba:09:bb:e9:c6:ef:bf:64:f7:47:9f:7d:2c:aa:9d:77:4b:
b6:0a:a6:a4:ec:e5:d9:b2:dc:12:de:e7:96:20:fc:80:3c:70:
44:fe:45:83:b5:35:33:5f:5a:39:35:39:5f:04:d7:d0:63:90:
6d:18:69:d1:d5:18:fb:8c:5b:4b:e2:e9:c5:8b:86:b9:8a:d8:
05:1d:2c:fe:b2:7d:d9:73:9b:75:c7:8b:0f:cd:ba:6d:1c:36:
cb:e8:e8:18:04:f9:8a:38:0f:4c:8a:88:fc:35:d3:db:82:17:
48:4c:ce:13:81:c9:a8:af:05:ba:0e:63:4a:64:95:cf:44:52:
15:96:e3:26:b4:9f:4e:d7:25:61:20:69:3a:09:38:8b:8a:f2:
95:90:66:49:3b:6d:4a:66:05:90:c9:b1:a8:a3:14:6e:f0:d8:
47:04:4a:93:40:05:64:06:26:a0:55:3b:d3:14:e8:97:c7:9b:
b6:e8:4d:d4
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgICJfAwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAxMDEwMjUxMjhaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkIzM0E0QUYxMTAvBgNVBAUTKDNFMENFNjNENjA0NTVCRDY1QkFBMzE1
NEJFODEyMDZDNjdFNjlENDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCn03/KUrl2QXSaGFN56RQLtqI0YTLpewRnQNumYwm7gLPQigi7eGKRrxjFAYQo
vASdXvooZ7k+OJzOBc3l25ZlXPGbhNDt3zYz2g/QQ1HWo7/NIIT6QzSrls42zst6
cFhyQqDSSG7Uoi1ujcMU/yBt39+fCkf9VozhCZt/QRzr6qHPSkyDCGtimwJ3ZfF7
mXEYUoJdlUBCi+IYjVuJN35yH/pr7EcorEG/X5nMx1S2uXjtG6/ua58iQpwltEWb
YCgBigiBmuZkyFXY4yj+WL6o/LqQ0b8hnL+hgXCveTruvMqPB6oJm6lr4GvaqJWJ
PidZwOEj/GgA1ueR5u1Z00Q1AgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUPgzmPWBF
W9ZbqjFUvoEgbGfmnUQwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZCMzNBNC8yRTc0Mzc4MkExQUMx
MUVBOUZFQkMzNzRGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QjMzQTQvMkU3NDM3ODJBMUFDMTFFQTlGRUJDMzc0RjhBRUEyMjgvUGd6bVBX
QkZXOVpicWpGVXZvRWdiR2ZtblVRLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMAkOowOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAMpTQgDBAIp2OQDBAOa
QngwDQQCAAIwBwMFACwP+aAwDQYJKoZIhvcNAQELBQADggEBAKLjpznJrffjGHHz
4PM7q1HOGIC9OnUC5ujGdU2Q8nUSUkiqwZS67+00wPMcCnBTH1cBSjzlN18Frslk
QVlFMPgglgCLu+15ntu6Cbvpxu+/ZPdHn30sqp13S7YKpqTs5dmy3BLe55Yg/IA8
cET+RYO1NTNfWjk1OV8E19BjkG0YadHVGPuMW0vi6cWLhrmK2AUdLP6yfdlzm3XH
iw/Num0cNsvo6BgE+Yo4D0yKiPw109uCF0hMzhOByaivBboOY0pklc9EUhWW4ya0
n07XJWEgaToJOIuK8pWQZkk7bUpmBZDJsaijFG7w2EcESpNABWQGJqBVO9MU6JfH
m7boTdQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:31 2024 by rpki-client on console-fra.rpki-client.org