Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
File: QS0Z-aThegTQm63JAqsLCQgk6tc.cer (raw, json)
Hash identifier: wGaXpwuXkUUP99LWL0QWoM591k+sPhNuFzjt7Tm+SGk=
Subject key identifier: 41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 23A6
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:44:04 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 36958
IP: 41.86.32.0/19
IP: 41.191.120.0/22
IP: 41.222.204.0/22
IP: 41.223.216.0/22
IP: 197.157.96.0/19
IP: 2c0f:fef0::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9126 (0x23a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 00:44:04 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F36FFD1EAF/serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:01:44:48:e2:3f:5e:5f:c4:bc:80:80:6b:84:
7f:d6:b2:fe:ce:f5:5a:2a:09:02:59:77:50:8b:0d:
3d:f5:df:7e:5f:51:0e:8e:18:29:4c:6d:fb:58:16:
c1:28:35:95:c1:e0:44:db:dd:91:e7:e3:8c:90:1b:
ad:b6:1a:58:b1:a2:86:d3:0e:e6:0f:62:5b:91:52:
a2:e2:2f:a0:7f:e6:86:fe:33:49:73:03:e5:2f:29:
6b:18:02:2e:9a:62:f0:d0:11:87:8f:94:75:18:ae:
0b:51:2a:2d:04:de:a6:36:c3:43:1b:a2:77:bd:5e:
fd:01:bf:90:1d:eb:48:64:f0:0e:e9:a5:7d:33:3b:
b0:3a:fc:1b:98:75:60:09:ee:33:43:e2:ed:71:de:
a8:34:ca:2e:78:c9:03:92:d0:12:75:72:fe:b5:47:
f4:50:79:f4:01:8f:e0:45:27:42:38:26:39:a7:9f:
e2:64:27:58:f0:0f:1d:d2:3e:c4:43:5b:b6:4c:12:
d1:c1:17:29:f8:c9:a5:7a:87:8e:01:e1:8b:26:88:
1b:1f:bf:fb:73:c1:3d:19:41:b4:00:0a:06:0b:64:
be:3f:52:43:36:bd:fa:2d:6c:0b:8e:cb:fc:1b:a2:
bb:b8:4a:86:06:d7:05:6f:6e:e7:a5:c8:ff:2c:c2:
ea:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
36958
sbgp-ipAddrBlock: critical
IPv4:
41.86.32.0/19
41.191.120.0/22
41.222.204.0/22
41.223.216.0/22
197.157.96.0/19
IPv6:
2c0f:fef0::/32
Signature Algorithm: sha256WithRSAEncryption
71:d9:c5:da:26:e5:8d:96:bd:b5:fe:f4:2e:2d:e5:ea:e6:73:
6e:62:80:4b:e5:5d:93:44:7b:73:3f:26:55:cd:76:3c:31:c2:
c4:70:96:14:85:fc:82:b5:08:3f:bb:ee:a3:f5:a6:d9:0c:bb:
29:ce:07:c2:03:f5:ca:ee:a0:8a:5d:91:73:09:f7:ab:a4:ee:
e3:3b:9c:db:44:57:a4:c1:ad:8f:d9:23:d4:e8:8c:e1:e8:51:
09:ea:2b:8d:85:b5:a2:ed:18:23:23:7e:b9:f8:38:ac:0a:2d:
45:1b:a3:36:ab:d6:de:ab:aa:7d:9c:a5:f1:ad:23:ed:07:34:
61:af:03:72:5a:49:a7:66:30:a5:51:72:d2:22:65:35:99:02:
23:4f:3b:76:99:04:95:21:6a:bc:3d:e0:70:b4:44:e2:6e:6d:
2a:d9:b8:49:96:b5:53:18:e0:45:15:12:51:8e:c4:12:87:5b:
2e:ce:bc:25:65:6f:28:04:17:31:0f:34:0d:8a:11:53:63:bb:
ad:bf:0d:1c:33:16:23:f4:ca:54:cc:4c:80:3b:c9:fd:4d:74:
49:f1:54:be:06:3c:5b:4e:0f:fd:e3:38:45:c1:69:57:4e:90:
d7:33:cc:94:75:9a:28:4b:d8:9d:40:d5:ee:81:48:06:d4:c1:
db:da:26:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:32 2024 by rpki-client on console-fra.rpki-client.org