Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/j29vvKPGNM2_8Exy6bDsgG-YPKg.cer
File: j29vvKPGNM2_8Exy6bDsgG-YPKg.cer (raw, json)
Hash identifier: KDO82tExgxly3U1fCaZpEq8sibJ6pfU56AtfFQf8OIY=
Subject key identifier: 8F:6F:6F:BC:A3:C6:34:CD:BF:F0:4C:72:E9:B0:EC:80:6F:98:3C:A8
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2AFA
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 31 Jul 2024 00:03:31 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 328533
IP: 102.36.208.0/22
IP: 102.208.72.0/22
IP: 102.214.189.0/24
IP: 102.221.208.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11002 (0x2afa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jul 31 00:03:31 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F36B57DFAF/serialNumber=8F6F6FBCA3C634CDBFF04C72E9B0EC806F983CA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8c:f7:e4:5e:40:ef:ce:12:4f:ff:78:10:57:
e6:e8:46:10:1f:37:73:20:8a:2b:fa:85:a1:bd:89:
30:54:4e:5b:30:8c:46:3c:58:54:62:7d:15:e9:03:
7f:2d:61:6c:0f:8b:39:0c:a2:43:2d:cb:e7:94:c7:
72:fa:a2:f4:09:3e:65:a0:49:64:7b:dd:78:9f:1d:
48:02:9f:dc:84:05:1c:9c:23:4c:69:43:21:93:82:
b2:cd:ba:55:5c:8a:7b:7f:7b:ce:19:f5:d6:bd:12:
75:b1:d4:63:85:a0:f5:21:41:ce:30:d7:34:87:7b:
44:83:de:c6:38:fc:4f:0c:52:b1:79:8b:82:5a:65:
8f:57:88:45:94:be:4e:3e:27:0e:01:b4:25:11:5d:
08:b8:8c:d0:fc:8f:3b:c0:71:5c:93:9f:a9:81:36:
d9:60:66:d4:e0:fc:fe:67:97:fc:af:d8:40:19:ac:
e8:37:c1:92:2f:8d:16:44:0e:53:4c:72:dd:1a:b4:
0f:04:99:3d:69:24:8f:3e:e1:ec:98:24:37:4d:9f:
13:c6:e7:81:3a:9b:22:7a:c5:eb:d3:ee:02:52:b6:
d8:75:aa:4d:bf:99:cd:64:24:d3:e4:bd:5a:d1:cf:
66:ef:39:5b:84:26:07:c5:7f:02:70:d6:0b:a7:19:
81:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6F:6F:BC:A3:C6:34:CD:BF:F0:4C:72:E9:B0:EC:80:6F:98:3C:A8
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328533
sbgp-ipAddrBlock: critical
IPv4:
102.36.208.0/22
102.208.72.0/22
102.214.189.0/24
102.221.208.0/22
Signature Algorithm: sha256WithRSAEncryption
67:9a:c5:98:18:5f:2a:99:b3:cb:96:86:68:09:2e:8e:43:d9:
b0:a1:cd:1a:80:f2:f1:29:58:6b:11:30:a6:36:ed:ed:35:f8:
3a:16:42:55:96:45:5e:79:87:a7:7e:6a:9a:5e:96:b4:95:c5:
27:4b:0a:cf:f6:f8:e4:1b:26:39:41:21:b3:35:42:a0:95:3d:
c4:d6:8f:bf:c0:fe:1e:7c:06:c9:b2:9b:b6:0c:44:58:5c:44:
bb:c9:a6:57:86:8f:7f:76:14:45:85:01:4c:8b:72:ef:d3:19:
f0:a2:78:2f:d4:c9:b1:de:5e:a6:25:d6:f7:b1:c3:14:ef:f5:
22:e7:36:0a:00:dc:9c:37:c8:fb:30:0a:eb:a0:fe:7f:55:fa:
15:48:3c:ff:9a:fd:af:1d:ee:b5:a9:91:a6:06:44:6b:72:e5:
f2:65:3d:3e:e4:f2:cf:e1:f7:1f:61:db:f3:e5:e6:61:5e:d1:
e3:bf:d3:db:51:a7:20:c9:fe:48:c7:f8:b3:4a:45:b5:ea:cc:
39:2e:8c:34:58:b0:dd:cd:4d:ae:7b:36:8b:bd:4a:e0:73:1b:
af:ea:1e:3b:54:4f:e6:93:3b:37:fd:f2:cb:c5:7c:a7:9b:df:
d1:61:da:1c:6f:7f:d2:d1:44:b0:93:75:5a:29:2e:58:36:44:
bd:73:a7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:22 2024 by rpki-client on console-ams.rpki-client.org