Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer
File: 1-l-xBu1iYDED-Sp42wBC8ABPTE.cer (raw, json)
Hash identifier: W2Ngr9RUf0R4nNu5jlh5nOoaQyQhw5ZfQ49liOboZrU=
Subject key identifier: D7:E9:7E:C4:1B:B5:89:80:C4:0F:E4:A9:E3:6C:01:0B:C0:01:3D:31
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2CEF
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:12:38 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329506
IP: 102.207.128.0/22
IP: 2c0f:11c0::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11503 (0x2cef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:12:38 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F361610CAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ca:b2:f6:55:c8:45:dc:ff:8e:9a:4c:3b:d5:
37:0c:6e:66:13:5a:c9:f4:dc:00:f9:ea:eb:b1:f3:
6d:3b:87:55:a6:11:25:f4:53:a1:8b:39:e1:a9:94:
66:b0:9a:ef:8e:03:67:73:2d:aa:e6:80:6f:01:37:
37:d3:0c:ab:0b:90:0a:31:f7:4a:d0:44:f8:8c:dd:
8b:8b:ef:78:02:93:6f:57:da:37:e6:be:cc:68:12:
f3:74:42:a8:39:3b:37:82:15:f3:ce:39:cf:60:3b:
8c:7d:d7:9f:ca:f7:cc:71:eb:c6:be:90:43:b9:3c:
4d:8f:62:20:dd:63:3c:53:e5:35:3a:5a:9a:6b:76:
4b:4d:f2:49:e5:80:66:23:ac:a5:72:37:96:a8:a4:
3d:54:e3:06:60:ea:23:7a:ad:6c:7c:b0:7c:99:12:
db:73:bc:e2:f7:85:fe:29:47:2b:a9:62:1d:2f:81:
bb:ea:17:f1:81:1a:7c:6e:b7:52:51:37:7b:40:86:
76:6a:25:4e:df:e4:17:e6:ed:64:c4:bd:59:36:cb:
f8:23:69:03:e7:08:e2:ad:03:bf:cd:1a:a6:83:b9:
6e:10:f6:ad:6b:19:7f:e1:97:97:7b:0a:d9:95:f5:
56:c1:6b:05:b1:70:dd:4a:64:87:cc:24:5c:ea:91:
ba:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E9:7E:C4:1B:B5:89:80:C4:0F:E4:A9:E3:6C:01:0B:C0:01:3D:31
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329506
sbgp-ipAddrBlock: critical
IPv4:
102.207.128.0/22
IPv6:
2c0f:11c0::/32
Signature Algorithm: sha256WithRSAEncryption
42:6d:98:8f:50:2b:33:35:d8:66:1d:2f:2e:b2:65:c3:9e:16:
92:36:1c:38:3e:a4:06:f7:24:ec:57:4f:c6:90:99:bb:2b:c6:
fb:8e:b8:e2:26:7b:d1:53:dc:bc:3e:4e:c1:c0:27:fa:ca:79:
8d:48:3a:01:a2:40:17:0d:17:43:22:fd:0a:51:5f:9e:f4:77:
81:3d:56:4c:bb:05:2a:03:a7:0c:00:b1:7f:c2:0d:4e:d5:d0:
3a:f7:bf:7e:77:f9:73:a1:1e:a3:11:88:9d:c1:66:21:f2:50:
43:3f:be:a0:d8:18:3f:28:c8:aa:84:04:64:2c:62:31:35:e2:
68:64:4d:7a:68:f8:0f:89:3d:aa:fd:df:b8:0f:7e:ef:57:86:
df:72:a9:78:82:d0:8c:14:c1:2b:26:e8:f1:09:cb:83:17:7c:
0b:2b:03:6e:75:ec:9c:65:4d:e0:48:e1:29:16:b8:9d:3a:32:
eb:c7:2d:b6:b4:4d:ee:28:38:d0:c6:c6:f1:be:8b:85:ad:27:
66:f3:56:c1:9b:09:a2:43:03:1a:de:33:1e:54:e4:4c:ac:bc:
f4:8c:19:1c:80:a6:05:98:fe:7d:5d:ad:ac:32:74:e0:21:23:
08:9e:3f:3a:52:4f:1c:97:55:eb:5b:7c:74:e6:b7:05:75:77:
36:8b:d4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:06 2025 by rpki-client