Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
File: h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer (raw, json)
Hash identifier: QaOncaRFZDgePgu9A/1EI+cNRehldn8xVDltoYV98/g=
Subject key identifier: 87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 28E4
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 11 Jan 2024 11:54:46 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 328271
IP: 102.22.208.0/21
IP: 102.176.180.0/22
IP: 102.210.56.0/22
IP: 2c0f:ee68::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Apr 2024 05:23:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10468 (0x28e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 11 11:54:46 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F3645721AF/serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6a:a8:ab:09:ad:3c:f4:ff:4d:3d:5c:24:c4:
22:05:fb:33:40:e2:de:be:24:64:d2:10:df:eb:a4:
25:6c:16:f1:ff:f2:d6:93:ad:4b:67:a4:f6:6b:9b:
78:9e:73:ee:0a:e9:f9:8b:51:a5:a4:0e:f6:d5:91:
c7:d5:d8:4f:fd:06:0f:a8:41:9c:7b:aa:c5:3d:33:
6f:b6:b5:a9:2b:42:ac:2f:0a:62:b1:fe:ae:4e:85:
ef:07:92:fe:ef:83:e2:86:b1:b3:c1:4e:a4:23:14:
b9:62:3d:25:a0:3b:ef:9f:65:36:52:e8:8a:2d:6a:
cb:e7:dc:b6:7d:bf:d9:d2:2c:9d:c7:7f:b6:f5:6f:
78:c1:ab:6c:dd:b3:b4:8b:b9:6e:56:72:70:cb:ac:
30:96:9a:4e:35:3b:97:af:63:05:7b:03:f5:8e:b4:
8b:04:ce:b6:80:68:93:84:0b:33:c2:de:3a:ba:58:
91:21:4d:b5:cb:20:b8:d7:6c:67:28:ee:dd:87:8e:
2a:9d:1b:8d:b1:83:6e:ae:05:9f:92:4c:5f:e3:e6:
91:61:97:dc:bb:b1:b1:06:8b:49:76:f8:52:bd:6a:
0f:ea:9d:d3:a6:37:fe:5b:10:89:7a:67:4d:86:88:
66:a0:55:a9:76:ed:41:fb:4c:22:8a:89:60:e1:02:
7d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328271
sbgp-ipAddrBlock: critical
IPv4:
102.22.208.0/21
102.176.180.0/22
102.210.56.0/22
IPv6:
2c0f:ee68::/32
Signature Algorithm: sha256WithRSAEncryption
31:05:a9:60:40:d0:b6:1d:fd:a5:8b:05:b9:36:29:f9:73:2b:
c9:0d:03:88:dd:73:86:de:4a:3d:91:80:c1:32:de:75:09:a3:
25:44:05:d5:1b:17:6e:8d:c5:dd:b5:a8:ec:9d:c0:e1:26:dd:
f9:7e:ef:c0:60:ee:bb:fb:f8:0a:97:7c:3f:f6:93:50:64:90:
a9:1e:ee:db:f5:40:1d:e2:bb:e9:7c:f7:30:ab:00:a0:db:d4:
ea:86:59:cb:69:7a:ae:b1:fe:b6:7f:08:a6:ae:45:66:75:4e:
b8:e1:47:dc:ae:a4:ca:49:f8:da:c0:de:b2:60:d6:be:2e:a5:
bb:9b:08:22:9b:8d:df:b0:dd:d7:f7:57:b0:62:b4:48:f5:6b:
8b:2a:67:cc:b7:b2:be:ae:36:a1:57:30:28:26:0d:a3:42:b2:
77:79:c1:a6:80:82:c5:95:3e:2c:a3:d9:a3:34:90:ff:8e:3b:
21:1b:d1:36:d0:ff:69:05:4e:96:c9:32:e9:24:ba:ea:77:f8:
05:16:24:09:07:9f:1c:0e:5d:7f:01:9c:ff:a6:dc:5a:99:1f:
8c:0c:e5:73:55:70:ae:a5:44:93:ec:77:e3:0f:c8:1a:a5:af:
3a:41:3c:5b:dd:db:4a:84:47:7c:df:0e:12:2a:fb:e2:4d:f5:
98:f7:b5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 06:17:14 2024 by rpki-client on console-ams.rpki-client.org