Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
File: Y-C7azQzzV1xpCsBab2wHiDkVX8.cer (raw, json)
Hash identifier: kgJxmLwlBWLIIAckWEfLc6Ptdjhc5hjKVafRbkECUOg=
Subject key identifier: 63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 23BC
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:49:42 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 328528
IP: 102.36.160.0/22
IP: 102.218.100.0/22
IP: 102.220.212.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 16:25:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9148 (0x23bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 00:49:42 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F362C18CAF/serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:53:da:1d:c8:2a:6a:bc:01:b4:33:17:b4:1a:
76:c0:3d:d9:40:e2:29:00:f5:86:8f:f6:2b:ae:fd:
37:b6:d9:76:28:25:09:22:95:9a:b8:35:eb:cc:9c:
da:12:fc:f8:af:c9:58:00:29:9b:ad:f4:5e:56:ab:
7f:50:cc:de:13:f5:4c:49:36:3f:f5:45:fc:6b:4e:
5a:ac:3b:a7:0a:5e:63:78:d2:8e:a7:97:cb:61:99:
8c:77:a4:e8:34:63:d0:68:e2:ee:b9:ab:01:8d:ad:
c5:70:69:bc:40:64:69:8b:04:8c:8f:44:13:a0:fd:
f3:e7:d5:fe:81:e0:03:5d:e3:61:5a:06:0a:87:f4:
79:c2:b2:43:10:8e:62:bf:89:2f:b4:25:f8:c5:4e:
49:dd:4b:03:68:83:1c:5a:fc:a7:db:e5:49:9f:5d:
1e:7c:7a:d4:90:c4:28:95:a7:82:6b:fc:03:50:2d:
14:d5:38:a0:9c:2e:a1:db:29:99:a9:fe:d7:4d:7a:
54:f2:af:b1:86:22:1e:48:07:1b:69:90:96:65:73:
9a:15:6f:be:93:12:9a:cb:b2:74:91:3c:5b:e9:b9:
be:66:f2:2b:b4:1a:2f:1c:07:10:97:c3:a1:6c:77:
88:b1:b5:84:5d:51:4c:26:d7:04:3e:ec:7b:7d:ea:
d2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328528
sbgp-ipAddrBlock: critical
IPv4:
102.36.160.0/22
102.218.100.0/22
102.220.212.0/22
Signature Algorithm: sha256WithRSAEncryption
23:45:44:09:34:8d:66:75:22:e0:b1:2c:3c:5e:6b:e8:eb:38:
2b:fc:fa:5c:3d:ef:be:09:d8:31:75:e3:f7:f8:ef:a1:ba:4f:
4f:23:56:59:1b:55:0a:82:1e:1f:0f:df:97:5d:df:5a:b1:4b:
13:b4:30:e1:52:81:ca:68:3f:79:eb:8b:4a:b0:61:66:68:24:
de:6b:29:a1:db:84:bc:82:fc:6f:ac:79:1b:07:b3:4d:12:a3:
57:fc:6e:6f:e7:c7:f2:9d:56:e7:62:5b:e7:34:8b:2f:3a:1a:
53:76:8a:9a:55:12:cb:dc:3f:c7:34:ee:e5:86:4a:79:d2:e6:
65:eb:21:88:2f:e3:e5:b6:25:33:73:97:f8:cb:ff:fb:5b:94:
a6:bb:13:de:c0:98:4a:a1:f4:e7:36:d7:f6:70:79:8d:87:b4:
3f:fb:9f:65:0f:da:30:45:b1:63:cb:0d:32:09:ed:56:71:41:
d1:27:f8:53:7f:66:e2:78:03:a8:9f:33:7d:fe:b1:e8:ce:99:
33:53:20:bb:34:fe:14:16:99:78:ca:20:3f:f1:34:df:9e:4b:
d6:e8:ca:52:52:b3:41:87:ea:b8:05:7d:03:a8:40:47:47:7a:
e3:17:b3:20:d1:db:6b:c9:6b:56:39:02:ac:0c:e4:a3:6f:67:
f7:32:bc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 18:35:44 2024 by rpki-client on console-ams.rpki-client.org