Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
File: OckZvvVPpaxnw34-dWyhP7I0tT8.cer (raw, json)
Hash identifier: s/N4dMe9s3YUvO6FxHWoz6tsw5OSIFCkJheeQCDSA30=
Subject key identifier: 39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 148F
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 08 Feb 2024 11:15:52 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 168.253.0.0/19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5263 (0x148f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Validity
Not Before: Feb 8 11:15:52 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F36F68F4AR/serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c3:ed:a4:94:1c:8e:23:85:cb:56:2a:a0:16:
75:34:34:ea:71:d6:4b:ae:e7:4e:5d:be:6b:8c:03:
b4:04:c3:fc:4b:8e:35:e3:46:d6:02:81:58:54:8d:
da:80:ad:88:ff:d0:53:8b:5d:61:a1:4e:3a:c3:f8:
d0:c1:90:01:93:27:a5:0a:4d:2d:b2:06:64:17:82:
a4:bc:52:8a:4b:39:a3:08:e7:9b:67:0e:6e:7f:8d:
1b:56:d1:3f:89:77:63:a3:89:3c:bc:4f:5d:80:f7:
ea:0d:e7:88:55:33:c4:f4:38:08:8a:be:12:2e:f9:
88:b6:9d:c5:f7:d1:57:18:de:ac:30:e2:3a:1f:c7:
6e:8f:e2:28:8e:02:22:5e:2f:5e:eb:97:38:60:a1:
8f:44:25:72:3e:a9:3d:32:3f:6c:e1:39:9d:47:d5:
9a:47:58:ac:72:98:80:e6:38:9d:aa:b8:7a:d9:36:
04:05:4e:ec:05:1d:b5:4f:96:c7:08:08:bd:4b:b0:
c6:f3:dd:9f:73:28:a1:da:ef:b9:33:3b:69:e8:de:
40:3d:21:3a:a2:e6:50:72:e5:bc:62:d6:91:42:7a:
de:14:38:31:85:7b:7f:93:82:14:f1:e5:85:b7:50:
aa:e5:6f:08:43:43:4a:31:62:7d:5c:b1:88:a4:9f:
b4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
sbgp-ipAddrBlock: critical
IPv4:
168.253.0.0/19
Signature Algorithm: sha256WithRSAEncryption
a0:ab:0a:a6:c0:c1:85:41:b2:98:ba:4b:d8:f2:ad:8e:84:79:
f2:dd:45:c5:05:2e:2c:76:4c:29:ff:80:6a:bc:57:dd:9c:a8:
48:2f:f7:7e:6e:3c:3f:ae:71:db:dd:12:87:ee:02:af:43:ed:
9d:b0:81:cd:fc:ac:98:e7:54:26:1b:d6:99:00:c2:33:61:68:
9c:3b:07:95:e9:2f:84:c6:a7:04:36:e1:f7:13:da:a4:26:52:
6a:68:b7:16:9e:48:d7:66:02:ad:7f:e7:33:61:5a:f8:38:c2:
6d:51:f1:91:07:a4:0f:24:1a:35:e4:00:5e:d7:f4:d8:19:54:
a5:15:8e:be:3b:7f:61:ed:b5:42:a7:74:5a:31:9e:fa:ca:dc:
fc:1e:6b:03:45:5b:ec:5a:72:57:47:aa:d6:e8:b6:c8:83:3a:
ef:74:90:fc:6a:3c:a3:cc:1c:df:3c:5b:5f:b0:cb:3d:c0:f3:
90:93:a6:ef:f6:0e:8d:48:a6:58:5d:cc:bd:71:8e:7b:0f:ea:
f9:ce:e3:96:7c:1c:a2:3d:a1:1d:23:0b:78:1b:14:14:ac:fc:
64:c5:b3:15:4b:af:e6:90:b0:2d:a7:26:d2:e6:29:a4:3c:07:
3a:61:77:8e:b7:2f:13:1f:89:0f:95:e4:f2:6e:df:a7:da:30:
7a:77:1e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:51 2024 by rpki-client on console-fra.rpki-client.org