Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
File: 3ctMnFuiLYifJQktxc7JJbqEO3g.cer (raw, json)
Hash identifier: XL2wFjB01jXFEj54uahUvNknpXG//13daLpN3Y1zvL0=
Subject key identifier: DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 1394
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:45:42 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 169.239.28.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5012 (0x1394)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Validity
Not Before: Jan 1 00:45:42 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F3668CFEAR/serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:43:80:e5:cc:31:dc:50:60:8e:5d:5b:ee:9d:
9c:b1:f8:94:54:2b:01:ba:dc:03:20:83:cd:9e:6b:
87:9e:69:83:a0:ef:ba:cf:81:51:98:c6:6c:58:00:
2c:a5:83:de:a1:d5:1a:30:cc:59:b8:81:d2:ba:69:
d1:cb:55:b9:37:16:2b:ce:45:94:36:f4:b5:18:0d:
e3:3a:24:b6:ff:c5:6f:c3:60:42:b2:c6:af:0f:47:
b6:8e:d6:e6:31:84:c3:94:21:24:68:dd:62:1a:e4:
d5:d4:3b:d5:9f:41:df:8a:e8:cd:29:50:3e:ba:43:
17:1d:ed:98:07:90:0c:67:14:d7:fc:30:42:ed:99:
cc:5a:ef:fd:f0:e1:a3:b1:b4:90:4e:02:e2:30:cb:
2c:46:3e:b3:62:b8:f3:7c:ba:1d:34:ff:c7:4e:99:
9b:8a:f4:ba:99:b3:de:0d:04:f0:0d:4f:14:5a:87:
52:cf:91:09:61:e0:b6:80:31:51:93:5d:c4:90:1d:
a9:4c:3f:27:5a:6d:92:97:e9:7d:26:d4:90:e3:df:
6f:0a:c8:0d:3c:c8:24:89:20:0a:9f:c0:c9:64:06:
f0:c5:22:dc:63:16:23:73:9c:07:51:1a:d3:0b:06:
99:c9:f8:b0:2e:76:c8:97:3b:6f:ae:1b:1e:02:f5:
5a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
sbgp-ipAddrBlock: critical
IPv4:
169.239.28.0/22
Signature Algorithm: sha256WithRSAEncryption
36:89:20:ca:9a:88:51:42:da:13:9f:87:36:1e:67:09:df:4b:
4c:03:c5:36:13:58:04:fb:a7:71:f9:75:c5:82:03:29:10:f8:
96:3d:0a:aa:70:d6:e8:29:53:a0:d0:6b:dd:85:eb:b3:3b:3d:
bf:4d:bf:06:80:f9:d0:cc:e0:b7:5d:5c:42:13:fe:2b:ca:39:
4f:4e:ec:da:35:1f:fb:94:87:07:f5:47:ce:e3:6c:97:a0:a3:
7e:6c:cd:07:b2:0e:6d:5b:14:d5:4c:28:02:d1:2d:2c:b3:8a:
c2:1a:cd:ed:87:f2:7f:db:73:f0:67:45:31:53:3a:45:fe:33:
55:9e:d8:e5:89:ff:e0:4b:62:eb:b3:2b:82:dd:d5:ee:70:b8:
c9:22:9c:b8:2f:bb:d4:9e:96:07:68:6d:c1:18:88:81:b6:bb:
7d:ec:a4:c4:21:44:f1:ed:72:51:9d:0b:55:8f:f1:ae:a8:66:
6e:a9:a8:08:ca:e4:e0:02:5c:df:64:a6:03:d9:3c:75:0e:f2:
cb:33:31:59:ea:f7:61:52:16:f2:04:c6:0b:01:9c:cd:25:a6:
8b:c7:9d:03:ec:9f:04:6f:66:41:88:30:f5:31:18:87:98:08:
a7:bd:3d:00:0d:2c:3f:71:06:18:51:66:83:c6:d7:aa:8d:0d:
47:86:42:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:51 2024 by rpki-client on console-fra.rpki-client.org