Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
File: rHWTnKcrl03kXiFyCNngbn4brAI.cer (raw, json)
Hash identifier: 0E4tVVjitSniHsV5sfNNRTCuhWWL7x5lVM+vLNRdMhU=
Subject key identifier: AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 1428
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 01 Jan 2024 01:22:51 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 168.253.216.0/21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5160 (0x1428)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Validity
Not Before: Jan 1 01:22:51 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=F36D8637AR/serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:cf:dd:58:33:27:55:ed:71:fa:84:58:2e:
2d:71:06:66:f8:5b:82:36:aa:8b:a6:93:18:34:8c:
c9:b1:95:31:3c:ea:fd:2f:a3:fa:1f:c2:50:38:e8:
ad:67:8b:ee:05:98:0c:12:29:62:03:8e:af:a3:bc:
27:be:3a:fb:b3:53:b9:2b:3b:01:92:a8:4f:68:bc:
72:50:66:1c:bb:62:58:09:30:97:3d:0f:1f:66:d2:
c9:70:e4:82:f4:39:bc:f4:f1:bc:9f:9e:8a:45:ec:
07:df:03:18:7c:92:84:fa:31:df:b6:54:e4:f8:45:
65:c0:bd:41:f1:a0:ae:ff:f7:b1:be:41:2f:bf:f1:
55:57:4c:9a:8c:21:1a:44:e7:06:94:96:5d:03:4c:
e4:25:bb:c8:3a:55:ac:96:2a:c7:28:71:9c:c2:84:
82:59:85:f3:cb:5b:f2:75:6c:93:45:9a:c5:dc:47:
62:81:8b:d1:15:13:c5:0b:e9:0c:85:c0:79:01:24:
07:72:5b:fe:4f:fb:54:6c:1b:6d:68:37:c9:74:7e:
1f:50:c4:71:ad:4d:24:fc:3e:5d:91:14:aa:b7:f2:
e0:d5:40:29:6d:97:c1:6d:07:e7:6b:76:58:f0:8e:
b1:4b:53:83:5b:56:f8:d5:22:c2:39:a4:96:70:84:
e0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
sbgp-ipAddrBlock: critical
IPv4:
168.253.216.0/21
Signature Algorithm: sha256WithRSAEncryption
81:bc:12:99:52:55:0d:e7:a2:82:b0:87:2a:cc:a7:53:38:7c:
28:19:3c:07:91:7b:71:32:08:23:d2:3a:00:ef:67:e0:6f:ee:
97:0e:12:6d:65:f7:5c:29:e2:f8:4b:03:7c:97:bf:6f:8b:64:
d8:98:27:ce:52:5f:44:66:e6:d3:13:d8:e2:22:40:db:f2:27:
9e:2c:84:8d:10:09:6c:5f:74:89:58:e6:59:72:6f:55:2e:8d:
d8:19:f0:55:b3:0e:b1:81:a2:f5:75:49:56:c2:67:1a:bb:81:
cc:b3:19:d7:70:03:f9:03:d9:15:e9:d5:1b:79:07:4c:e1:2a:
a2:8b:7f:a3:35:87:19:20:32:b5:74:46:ea:8a:7b:b6:a6:47:
5e:df:c3:25:81:09:81:3d:61:f5:04:e3:03:66:c5:66:8c:4a:
3c:0c:c6:f5:4c:09:d3:0d:3d:bc:d6:e9:14:2f:51:07:2f:d6:
cf:f6:24:f5:45:de:27:3e:7a:bb:00:60:df:07:41:44:41:5f:
a4:5b:9f:e3:6d:82:ff:fb:45:49:ae:a7:88:4f:fc:42:c5:d0:
f6:0e:5f:00:55:7a:11:b7:07:2f:c7:5d:40:89:0c:bf:38:ce:
2d:93:54:e9:bc:72:fa:0f:36:b0:d5:fe:6a:d9:91:52:1b:36:
0d:8d:88:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:51 2024 by rpki-client on console-fra.rpki-client.org