Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer
File: zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer (raw, json)
Hash identifier: KbVjr9MQLdRPM+B3LTiPE0NMkV4pu7oXPhMPZshKzrw=
Subject key identifier: CE:14:7C:A4:05:94:5A:CF:5C:DF:E1:5E:4F:A5:D2:BD:EA:48:D9:0A
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2A84
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 20 Jun 2024 09:37:58 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 37027
AS: 37084
IP: 41.188.128.0/18
IP: 41.221.32.0/20
IP: 196.45.32.0/20
IP: 2001:4258::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10884 (0x2a84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jun 20 09:37:58 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F368BC41AF/serialNumber=CE147CA405945ACF5CDFE15E4FA5D2BDEA48D90A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4c:42:40:1f:5f:79:28:92:cf:55:40:d2:2f:
4c:42:a5:ca:f1:05:21:35:29:74:44:22:3d:af:84:
40:f9:28:b7:3f:74:34:1a:9b:05:9c:c0:83:cd:48:
14:56:7b:88:de:38:c6:49:46:35:f6:b6:89:47:af:
a9:fa:ee:f3:88:17:08:df:25:36:41:e3:08:79:76:
4a:b4:e3:48:76:98:f9:b2:6c:db:ba:3d:68:6b:db:
49:75:07:82:6d:43:bc:2e:8b:35:34:ec:ce:33:03:
60:7c:5d:33:40:4f:74:e4:fc:e3:69:25:ab:18:a9:
1d:d5:63:f4:da:9a:08:49:6a:6f:d7:40:b2:ea:86:
a2:3c:8e:36:48:78:cc:b9:be:eb:13:82:6c:c9:d4:
f7:17:2a:07:74:a3:5b:ae:41:bc:32:bd:fe:b3:b6:
10:44:6a:e2:fd:8c:46:a1:8f:e3:d3:a1:a5:c3:5c:
3c:d6:a2:36:0a:e8:20:c6:ab:5f:b1:84:16:63:82:
43:29:78:3e:1d:63:77:90:72:10:8c:56:2e:5a:ae:
b9:56:17:61:ca:5f:99:c0:af:bb:23:01:35:ae:93:
31:d6:4a:48:46:35:1a:09:e4:16:99:e6:6e:4d:ea:
99:9c:25:76:54:ba:00:80:ed:b5:96:c1:60:08:7d:
7f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:14:7C:A4:05:94:5A:CF:5C:DF:E1:5E:4F:A5:D2:BD:EA:48:D9:0A
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37027
37084
sbgp-ipAddrBlock: critical
IPv4:
41.188.128.0/18
41.221.32.0/20
196.45.32.0/20
IPv6:
2001:4258::/32
Signature Algorithm: sha256WithRSAEncryption
1b:f6:92:9a:f5:ca:c3:50:69:fc:a0:3c:2e:a8:44:df:ea:e5:
ad:eb:b1:86:54:b7:e9:5f:0a:03:2a:a2:e9:14:96:51:28:9d:
67:c3:e5:1d:70:5b:7b:63:ea:a8:2f:22:22:47:ab:8c:b9:dd:
09:7c:75:86:ce:4b:da:ff:aa:61:98:c3:91:40:a5:4d:9b:1c:
76:cb:27:74:e3:82:5a:21:80:90:f0:42:9d:9e:0e:1e:52:4e:
de:4b:0a:28:45:5d:cb:41:f7:70:6d:7f:40:82:56:40:9c:cd:
c8:d4:4f:e5:d0:4f:f7:40:96:a5:71:b7:74:6c:83:e0:8d:16:
5f:22:86:38:07:92:ab:84:fc:98:93:30:1c:2c:9f:b4:8e:4f:
fd:90:ed:74:fa:50:0a:1f:80:53:75:37:bf:35:0a:37:71:29:
17:e8:8b:d1:a3:dc:c9:d0:b8:4e:94:e9:81:77:29:1e:5f:fb:
eb:65:ca:83:2c:5b:59:a2:0e:e7:87:63:48:a5:c1:ae:88:63:
d9:57:a1:33:3f:c7:4d:8e:e3:a8:73:61:d6:d5:66:3a:55:92:
0d:70:64:39:0a:cb:a5:f7:a2:67:63:e6:ae:1a:46:a4:c5:b0:
99:f2:2d:12:d9:01:fd:9c:11:a0:00:72:82:5d:dd:3e:4b:34:
7c:83:ca:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:33 2024 by rpki-client on console-fra.rpki-client.org