Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/0cZXgBrfziVpTfuxqVxs2kR-O7o.cer
File: 0cZXgBrfziVpTfuxqVxs2kR-O7o.cer (raw, json)
Hash identifier: GpubxwYxVf0wVBAikD14jCWx8aYICgmuMyiYcgBkX7M=
Subject key identifier: D1:C6:57:80:1A:DF:CE:25:69:4D:FB:B1:A9:5C:6C:DA:44:7E:3B:BA
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2EED
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 02:02:20 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 36955
IP: 41.211.96.0/19
IP: 2c0f:f7d0::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12013 (0x2eed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 02:02:20 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3656387AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7e:a7:24:c2:26:22:5d:79:b6:9c:83:94:7f:
6f:fe:ee:f5:f6:3b:ac:71:50:f9:68:b3:09:02:47:
bf:4f:55:e4:c6:57:9a:6e:48:1e:c3:2b:b1:12:ba:
6d:aa:af:e6:fd:b1:f4:70:6e:88:df:e0:0e:a0:46:
05:2e:22:81:b7:e7:e3:e5:bf:e8:5a:09:07:c0:a5:
cf:be:92:89:8d:10:f2:bb:d3:f1:e4:f2:d3:f9:3b:
d2:7d:a0:27:b4:1d:47:d2:b8:ed:06:af:32:aa:89:
0a:b5:9a:e1:da:d9:25:d4:a5:a2:57:01:ee:3d:cb:
69:37:ec:0b:c5:4b:1a:8a:35:d4:bc:a7:83:14:20:
52:61:a9:84:d3:a4:bf:5a:4b:58:5f:e3:d6:35:3a:
22:fb:99:c2:f5:e4:c8:8c:4f:24:a6:e5:6b:d9:4b:
4f:5b:f6:db:0a:47:3b:db:bc:89:77:3d:c1:b3:8a:
5b:d8:6d:ab:f2:17:e0:e4:17:a5:42:16:db:0b:ac:
97:dc:eb:da:9c:53:62:b9:64:3a:49:02:06:71:13:
7b:1b:46:bc:44:a6:44:27:94:be:b9:3d:4b:dd:82:
83:0e:c2:17:c2:95:ee:a9:15:d5:b8:e9:3e:30:16:
93:08:54:52:91:1e:d5:92:e4:2e:af:4d:94:87:2d:
c4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C6:57:80:1A:DF:CE:25:69:4D:FB:B1:A9:5C:6C:DA:44:7E:3B:BA
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
36955
sbgp-ipAddrBlock: critical
IPv4:
41.211.96.0/19
IPv6:
2c0f:f7d0::/32
Signature Algorithm: sha256WithRSAEncryption
c3:e2:1a:ca:7b:14:16:c5:85:51:04:d5:f2:38:77:2d:51:e0:
25:c8:09:a3:19:fc:54:8c:45:da:d6:01:8b:ed:31:d0:bd:fb:
4d:e9:f4:8b:d0:37:30:8d:b4:55:f4:42:5b:af:90:31:e4:6e:
97:93:03:f4:0c:ff:15:88:71:d8:cd:e1:6f:06:61:f6:ab:42:
78:81:3d:92:15:00:cd:4c:37:48:52:b6:e0:71:34:ea:df:2a:
d6:bf:fc:c8:85:97:c4:85:e8:6d:22:ac:15:9d:9c:14:65:57:
dd:05:dd:33:71:0c:3f:64:e6:65:f6:ef:e2:03:95:f9:8c:e9:
a4:cd:62:0d:7f:78:26:50:21:61:69:13:ac:dd:b5:53:95:5d:
37:8c:3d:43:10:36:fd:0e:d7:37:ac:f1:14:a8:89:3e:dd:5b:
27:73:e8:f6:a1:83:fa:3c:ef:2f:86:75:db:02:73:f8:84:a3:
2d:a9:d6:cb:9a:84:3c:79:ba:4d:bd:b7:3a:de:4f:d8:0e:4d:
4a:4d:c2:71:96:ba:dd:7e:76:9a:36:9c:e1:20:6c:8b:4e:24:
4a:ef:21:53:dd:9d:ef:de:dd:81:d9:59:34:ac:94:cb:82:95:
d1:47:c6:86:2e:6a:24:99:43:ae:68:08:7e:c8:8e:fa:62:15:
65:e2:08:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:42:54 2025 by rpki-client