Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/aFg2dgHVM90hnMnjOq3p4BLA070.cer
File: aFg2dgHVM90hnMnjOq3p4BLA070.cer (raw, json)
Hash identifier: xDHe5mdAfkARSHCCkZRG5Y0nvz3gjbFq7HSXeDhcp74=
Subject key identifier: 68:58:36:76:01:D5:33:DD:21:9C:C9:E3:3A:AD:E9:E0:12:C0:D3:BD
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2876
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:28:11 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 329011
IP: 102.216.208.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 May 2024 00:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10358 (0x2876)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 04:28:11 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F36F0522AF/serialNumber=6858367601D533DD219CC9E33AADE9E012C0D3BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:18:10:1c:dd:6c:c6:ec:2d:da:03:34:7b:25:
08:df:a9:30:f0:7c:28:38:40:ad:76:4c:32:b0:c6:
6d:52:ae:49:b6:76:61:45:82:34:93:2d:b3:47:32:
f1:4d:f0:9f:8b:51:50:fb:b0:f9:3f:63:d6:8d:39:
35:00:b2:8c:5b:e9:53:1f:4c:f9:08:90:f1:4d:0e:
4a:6f:b1:6d:8d:28:16:0b:3d:35:20:42:22:a3:2c:
c6:b6:35:23:f7:c2:df:80:66:24:04:e1:81:3b:cc:
e2:29:55:39:e7:ce:bc:b9:c3:83:9f:ee:d2:a9:f6:
fe:b5:5b:2b:ab:40:82:85:0b:27:18:31:03:f5:b1:
94:56:07:5a:70:bc:46:cd:a0:33:71:f5:01:c9:9c:
fb:3e:4f:1b:42:c7:dd:53:5c:c0:79:65:88:be:8f:
b4:2d:1f:58:17:b5:3f:cf:0c:ce:7b:2d:8f:81:09:
c9:b1:37:d2:8a:85:26:01:d7:01:23:fc:3b:c3:a7:
6b:a3:21:af:7e:5a:de:77:62:0b:3e:7a:a1:82:4f:
2d:26:85:87:09:4e:e2:80:a6:79:ec:32:c8:13:68:
fb:f1:6b:79:d4:00:d6:04:17:76:b6:2c:30:7d:f3:
b4:e3:78:2d:19:22:9b:ea:07:9b:59:d9:9d:11:7b:
f2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:58:36:76:01:D5:33:DD:21:9C:C9:E3:3A:AD:E9:E0:12:C0:D3:BD
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329011
sbgp-ipAddrBlock: critical
IPv4:
102.216.208.0/22
Signature Algorithm: sha256WithRSAEncryption
92:cf:70:c3:17:3b:8b:bf:d0:27:c6:26:f0:ac:ff:72:6c:12:
18:9a:db:22:05:53:33:05:fe:65:19:ed:77:37:d3:91:a3:95:
a5:c1:cc:e5:d5:d6:fb:17:aa:6e:3d:ad:ef:7c:f3:3d:8d:26:
fd:e6:fc:e4:5f:e4:92:08:e0:70:6f:47:ac:c2:71:70:9f:93:
09:1f:0c:e9:29:cc:ed:7b:af:5a:b3:ef:56:cd:d7:32:f4:10:
ee:9c:16:1a:ca:25:38:c7:5c:49:ee:78:e2:73:a8:30:c6:8d:
04:fe:4b:af:bb:82:56:6e:12:82:ec:4e:ba:f6:09:e6:d6:8b:
93:d2:8d:2a:89:ff:6d:93:e8:2f:73:b0:f1:0e:bd:51:f4:5a:
08:3f:ee:db:08:18:91:5b:04:9e:78:95:a4:7c:ed:29:35:91:
3f:35:d4:25:4b:d2:28:41:a5:1a:99:eb:c6:b1:93:cb:ff:48:
1e:fe:48:81:82:5b:af:38:7d:9f:73:3c:1b:c7:91:c6:3a:a4:
6b:8c:ec:7f:0a:3f:d5:73:ae:db:01:66:a7:09:3f:ac:c5:4a:
e6:2d:bd:b4:6d:d8:e6:e0:d6:a4:a9:49:d1:a8:ee:ab:80:d9:
9a:34:63:23:e0:5c:ec:58:73:ce:8a:97:33:6c:60:0c:99:a7:
00:df:e0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 00:53:03 2024 by rpki-client on console-fra.rpki-client.org