Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/bssXAorVt9tcd32x3OCXh-SVstE.cer
File: bssXAorVt9tcd32x3OCXh-SVstE.cer (raw, json)
Hash identifier: uv9BoM10d3xY75dpkgEhzYmgno47lhlgT40E2LfJED8=
Subject key identifier: 6E:CB:17:02:8A:D5:B7:DB:5C:77:7D:B1:DC:E0:97:87:E4:95:B2:D1
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 23DB
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:56:57 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 328517
IP: 102.69.208.0/22
IP: 102.212.224.0/22
IP: 2c0f:7f80::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Apr 2024 00:04:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9179 (0x23db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 00:56:57 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F3630D7EAF/serialNumber=6ECB17028AD5B7DB5C777DB1DCE09787E495B2D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:86:6f:2c:19:58:1e:e0:11:53:aa:ce:70:8e:
1c:6a:3a:aa:36:3f:fb:50:c0:a5:c2:df:a4:ad:46:
a6:e1:c5:ff:33:3e:02:5f:7d:b9:66:af:48:9e:ed:
90:08:95:8c:9c:b7:ea:9d:7f:16:cb:43:f0:11:4a:
d8:fc:99:9f:5d:ed:fe:f0:f7:bf:38:bb:35:bb:b6:
11:c2:e4:12:b7:fd:4d:69:6a:f0:2c:4b:bf:14:8e:
d4:4a:10:18:f6:5c:7b:73:b6:40:b9:3f:e6:04:7c:
57:9d:2c:a5:ee:0b:50:48:12:e7:4f:16:82:d2:6a:
71:c3:30:fc:1f:45:eb:ea:9c:30:62:b1:5e:a0:3f:
16:21:88:02:ad:2e:2d:f3:4f:8f:aa:fa:44:2b:53:
e4:40:7e:9d:6b:fb:e8:d1:80:10:2b:89:2f:e2:a8:
62:71:1d:7e:fd:d5:fb:b0:40:3f:f8:23:dc:64:35:
2c:23:5e:6b:6d:29:00:80:3e:a1:ae:96:70:d7:00:
95:ef:0d:1c:27:af:15:a3:26:46:f9:7d:26:51:fc:
48:c8:e0:6a:3f:00:e2:fe:77:21:a7:05:69:5c:81:
d3:39:cc:ba:f4:dd:72:81:c9:19:92:18:fd:31:aa:
dd:35:55:68:c1:e9:a7:2d:eb:97:17:a2:b2:27:1c:
b5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CB:17:02:8A:D5:B7:DB:5C:77:7D:B1:DC:E0:97:87:E4:95:B2:D1
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328517
sbgp-ipAddrBlock: critical
IPv4:
102.69.208.0/22
102.212.224.0/22
IPv6:
2c0f:7f80::/32
Signature Algorithm: sha256WithRSAEncryption
6d:de:04:f0:1b:30:c0:c1:1c:b6:5c:a7:86:56:63:0f:c7:d7:
83:b4:9a:ea:dd:cf:6f:9b:33:02:32:c9:0b:ea:b3:53:81:c3:
f9:69:11:a1:28:91:6c:e4:90:e6:9b:b9:a3:14:42:0e:1d:d3:
4b:38:af:44:ed:6a:f0:6b:c1:dc:86:da:c9:b9:1c:29:a6:93:
19:ee:79:ad:33:87:50:6c:ba:fd:07:9a:f0:d7:55:a2:e1:3a:
48:bf:45:82:4d:15:9e:b4:94:65:3e:93:25:51:70:ef:7e:00:
c1:ba:6b:f3:42:42:0a:a6:6a:d2:7f:b3:80:7d:fc:f2:33:bc:
3e:ac:92:c7:f8:2f:d1:cd:e6:05:ad:6e:16:8f:02:aa:07:0c:
88:e5:11:55:78:9b:78:6f:bb:03:b2:0c:8c:aa:89:f1:12:a4:
1a:70:0b:b7:80:72:9f:1b:0c:df:a3:fe:32:a6:9a:21:0c:23:
4a:b1:bb:0e:85:26:b4:94:c8:e8:51:f1:26:dc:dc:35:08:4c:
52:cc:40:44:78:37:55:06:36:12:89:2b:8c:c3:27:d5:c3:30:
0b:3b:d3:f7:db:4c:b1:8a:c8:cc:f3:58:d2:ec:15:85:d0:e1:
14:3a:f9:d7:ce:09:85:56:b0:db:b9:8f:be:3b:3c:50:86:11:
eb:3e:76:80
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 19 00:52:27 2024 by rpki-client on console-ams.rpki-client.org