Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer
File: XriN9L-QidcEmh--gAXmIequhis.cer (raw, json)
Hash identifier: boY9mhaGLwtdmiEnYzgzokwv/CSPFoZSCpGCZysliQA=
Subject key identifier: 5E:B8:8D:F4:BF:90:89:D7:04:9A:1F:BE:80:05:E6:21:EA:AE:86:2B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2597
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:38:32 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 328631
IP: 102.22.248.0/21
IP: 102.213.124.0/22
IP: 102.218.24.0/22
IP: 2c0f:e8a8::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Apr 2024 05:23:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9623 (0x2597)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 02:38:32 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F36A2303AF/serialNumber=5EB88DF4BF9089D7049A1FBE8005E621EAAE862B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9f:c5:f0:45:cc:78:7d:2b:ef:91:59:aa:10:
f5:d8:e3:ed:b0:2e:98:4d:38:36:83:a0:ca:fe:e1:
4f:22:cf:2b:91:f0:2e:c8:e3:7d:4b:f6:02:a0:ac:
a6:8d:d1:7c:b3:7d:32:44:0d:23:89:9e:7c:b1:9f:
db:7f:c2:86:ef:29:bd:e9:8d:c3:37:60:95:cb:37:
45:91:76:f9:cb:8f:a1:6f:55:f3:7a:19:68:d3:30:
66:4f:39:d1:6b:34:ca:f3:6d:11:83:64:91:f0:01:
54:04:1c:e2:e9:5f:8d:e6:5e:62:f6:c2:84:24:8f:
66:be:8f:7b:1f:0e:1d:30:7b:ee:14:b6:72:72:ce:
25:fa:58:f8:6a:d3:0a:79:86:22:f3:9b:88:cf:7a:
3a:b4:5b:8e:56:bb:55:1f:4a:25:c5:1c:46:cd:ca:
9d:c9:73:66:f6:84:69:c2:d4:92:7c:0d:4e:46:41:
37:af:2c:39:c1:dd:2a:e3:a0:ae:f3:42:67:3f:fa:
07:14:28:7d:97:92:45:c5:72:1f:fb:90:bb:44:82:
31:8f:1a:8b:1e:c0:34:7b:ef:f3:9c:a3:10:0a:ff:
3b:e4:2d:dd:52:48:92:98:2c:10:00:6c:6f:66:eb:
db:9c:e3:ae:2b:b5:45:75:ab:be:fc:72:15:e4:93:
26:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B8:8D:F4:BF:90:89:D7:04:9A:1F:BE:80:05:E6:21:EA:AE:86:2B
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328631
sbgp-ipAddrBlock: critical
IPv4:
102.22.248.0/21
102.213.124.0/22
102.218.24.0/22
IPv6:
2c0f:e8a8::/32
Signature Algorithm: sha256WithRSAEncryption
62:4a:0f:50:01:07:5b:5c:93:54:84:6f:e7:07:70:a3:98:d2:
24:90:ab:14:aa:df:49:9b:ee:6a:20:2a:98:c6:04:b0:79:96:
a1:52:a3:e6:a9:b5:3b:fc:39:89:32:01:98:98:f7:75:98:9e:
48:ee:81:55:16:23:bd:e9:c1:ee:b7:fc:db:38:a7:84:87:0f:
6f:41:9a:91:20:67:c2:23:50:78:29:d0:5a:00:26:f7:72:0e:
2e:41:f0:f8:53:ee:e0:bd:e6:4a:17:83:ed:2b:53:62:c0:ac:
ba:76:f3:1a:f3:9f:1e:90:5f:d7:fe:e0:67:46:08:60:55:4d:
21:07:ff:ba:73:bd:b6:66:11:4f:dc:56:78:b8:62:f7:73:da:
74:72:31:65:0e:f1:48:8c:15:95:d9:30:14:41:44:16:a1:b3:
bd:c3:96:a9:6c:6e:1b:e8:69:e5:e9:a4:96:30:9b:4c:0e:32:
6d:8e:98:8d:30:6e:e5:40:ad:86:8c:54:20:fb:e7:c5:e2:ce:
70:3b:93:18:4c:82:d8:d1:d2:5c:ca:f7:6d:75:25:86:31:89:
34:52:bc:f9:b2:0e:19:4a:8c:e9:5e:d4:e6:c2:c9:e9:ea:e1:
4f:58:26:ee:fc:f4:f3:bc:21:00:bc:ff:a0:d7:79:e0:ea:16:
35:e9:72:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 06:17:14 2024 by rpki-client on console-ams.rpki-client.org