Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/hXm8J-c9eykQjr_zl_ts_VxrAkc.cer
File: hXm8J-c9eykQjr_zl_ts_VxrAkc.cer (raw, json)
Hash identifier: GFIMsB4gE++pbjtU0DjuW+1rpZy8w3ZMg4sveCA54Cc=
Subject key identifier: 85:79:BC:27:E7:3D:7B:29:10:8E:BF:F3:97:FB:6C:FD:5C:6B:02:47
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2909
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Sun 28 Jan 2024 12:53:00 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 102.215.196.0/22
IP: 102.222.252.0/23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 15:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10505 (0x2909)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 28 12:53:00 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F3675292AF/serialNumber=8579BC27E73D7B29108EBFF397FB6CFD5C6B0247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:64:87:80:8d:ae:21:d7:e9:cc:fb:f9:15:c6:
86:d7:4b:50:11:80:db:e7:f0:27:a3:69:bb:75:d1:
6b:42:bf:b8:21:89:49:98:2e:f5:f3:ff:65:e5:cd:
b7:0c:6d:7f:b5:0e:fa:05:52:e5:7f:f6:02:73:44:
5b:19:40:6d:ab:8a:64:1e:e1:98:48:3b:66:ac:7b:
21:b9:88:c7:b8:5c:71:e7:f5:af:f8:88:0c:6e:9b:
3c:cf:0c:7e:07:7b:6c:6f:97:d7:c1:f9:33:4c:d8:
47:97:3b:0b:c9:43:80:42:40:28:c3:38:e3:7a:97:
a9:08:8c:cd:16:d0:3c:cc:a4:3f:11:b2:db:5c:c1:
62:61:79:dc:b0:23:b1:31:04:3f:7f:cd:86:3b:3f:
69:b0:2c:eb:62:95:ca:61:c2:66:68:ee:40:c6:bb:
0a:0b:21:b4:bb:74:b6:2f:30:bf:76:cc:90:77:fd:
c2:77:7c:f3:94:5c:2a:e7:9b:e9:c4:72:3b:b2:fa:
86:21:d8:3c:e2:c2:43:5d:80:91:e3:26:66:6d:fd:
1a:4c:94:e4:1e:a7:d8:83:6c:4c:68:37:ab:9e:3c:
38:7a:05:e5:bf:a2:7e:18:b3:98:fe:7e:12:3e:09:
51:b7:e9:a5:4f:71:dd:4d:39:a5:07:c8:dc:cd:85:
b4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:79:BC:27:E7:3D:7B:29:10:8E:BF:F3:97:FB:6C:FD:5C:6B:02:47
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
sbgp-ipAddrBlock: critical
IPv4:
102.215.196.0/22
102.222.252.0/23
Signature Algorithm: sha256WithRSAEncryption
60:cf:d0:6d:f8:9c:c0:89:e8:54:50:8b:dc:12:21:07:f8:0d:
89:4a:de:08:2b:d7:0a:d8:25:fa:79:31:c5:80:5e:e2:fd:47:
6c:9d:08:c5:18:8a:41:f9:ce:3c:f3:9f:f2:85:ba:2c:e1:16:
c4:2f:50:32:1d:76:af:9e:87:6d:e7:b5:d2:93:64:5e:3f:94:
cb:ac:26:0d:9e:fc:1d:5c:bf:ca:ca:c3:b1:11:9d:aa:0a:9c:
4f:45:43:81:e2:40:14:69:03:c9:0e:ba:cc:37:2e:78:0e:b4:
c9:3e:94:c1:8b:e4:5c:56:72:50:14:e9:5b:13:3b:ff:28:5d:
35:75:6a:0d:65:38:40:d9:e8:ef:90:b6:dc:81:36:3b:90:6b:
9d:b6:28:3c:c7:7c:24:08:39:e3:28:a0:96:cf:03:15:5f:d6:
d5:26:89:07:df:1e:bf:a1:a6:ed:c9:4e:44:90:f5:26:a5:9c:
8d:50:30:87:6f:02:40:88:9e:58:cb:03:14:69:15:c9:74:8e:
02:15:5c:6e:71:4f:78:d2:63:75:ff:45:3e:3f:50:34:65:4a:
51:63:ab:27:cc:87:43:2a:ab:37:61:13:2c:73:3f:4f:09:bc:
64:7c:60:7f:58:ab:ff:7c:85:5e:a7:6c:67:c2:f3:2e:93:7c:
e6:33:fb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:35:31 2024 by rpki-client on console-fra.rpki-client.org