Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/1QtxHNd881kYPT_e5YqZVLbPdwg.cer
File: 1QtxHNd881kYPT_e5YqZVLbPdwg.cer (raw, json)
Hash identifier: 7LK1tEWGnK0nFDb0ouQ9oLFjk50EBIeelCgQW+5AsS0=
Subject key identifier: D5:0B:71:1C:D7:7C:F3:59:18:3D:3F:DE:E5:8A:99:54:B6:CF:77:08
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3082
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:23:55 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328210
IP: 102.128.144.0/20
IP: 2c0f:ee30::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12418 (0x3082)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 03:23:55 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F367FECCAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:f1:05:9c:a3:64:ea:f6:3c:fa:83:00:2d:
e4:de:9a:84:a3:ad:9a:2c:e5:1d:68:61:9a:f4:c7:
e6:8c:de:1c:6d:ca:26:2c:b3:ff:2e:62:7a:43:f1:
ca:e6:28:15:f5:98:9a:ce:7d:27:de:ce:fa:40:f3:
89:56:07:eb:94:2f:89:7f:71:fd:86:63:0e:d2:9e:
e2:33:59:ef:aa:c9:57:a7:5a:ed:1f:c9:d0:e2:3c:
0a:28:36:b5:5c:dd:55:0f:96:bc:94:d4:b6:45:e2:
39:6d:a6:23:95:1f:3a:2b:f2:cc:2a:64:92:a8:45:
e0:58:f1:0e:6f:6b:45:1c:e0:75:4b:11:7c:24:67:
f8:0d:07:e6:d0:a4:b2:95:ea:9d:84:c9:5e:79:e5:
66:1b:b9:d6:f6:e1:1b:91:71:e9:4a:f3:79:eb:c3:
d1:ca:49:c6:f1:d0:86:f2:30:d6:85:ac:a0:23:9d:
6d:22:40:e3:d7:03:64:ef:04:3a:bf:d2:20:ee:64:
4d:e2:4d:90:80:f1:3f:20:8b:9f:55:0b:5b:ec:4c:
67:ea:4f:98:15:4a:dc:03:d9:41:73:ba:50:e0:2a:
e5:c4:df:f6:31:ed:db:d0:94:53:be:4d:bb:7f:06:
df:0f:91:82:92:c1:bd:49:e1:b3:8e:4e:8d:00:df:
17:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0B:71:1C:D7:7C:F3:59:18:3D:3F:DE:E5:8A:99:54:B6:CF:77:08
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328210
sbgp-ipAddrBlock: critical
IPv4:
102.128.144.0/20
IPv6:
2c0f:ee30::/32
Signature Algorithm: sha256WithRSAEncryption
29:57:e1:0c:75:57:c1:91:c6:1d:8a:15:37:c6:74:1e:02:f0:
ac:1f:db:ad:0a:13:0b:24:c8:70:3e:14:90:16:80:9f:f3:5e:
db:d6:5d:c9:11:96:e7:86:6e:d2:70:ed:73:ad:a0:fe:da:31:
23:36:2d:e6:67:17:5d:1b:c5:42:a3:2e:90:72:b8:b0:57:5b:
1d:6d:50:1f:a0:47:88:bf:2f:79:ff:a0:8c:54:99:5c:fb:53:
67:8d:8f:a8:ea:68:8a:30:a5:e8:e0:8c:37:17:3a:24:dc:3d:
9f:7d:1e:ae:aa:53:e1:f5:f7:48:54:40:ba:69:f9:31:18:2d:
ed:91:7b:84:e3:e6:35:b8:5a:49:b2:9b:ac:25:e3:c2:4a:ca:
0e:f3:72:29:be:ff:77:52:c8:f7:03:4d:4c:61:2e:7f:36:32:
37:88:72:4f:fd:bf:ed:68:ba:c9:73:c2:b5:1f:e9:06:5c:4e:
e8:ae:ce:e0:12:89:44:be:08:33:71:4f:48:50:67:d3:cf:f0:
c9:8d:09:c1:6e:4a:36:ed:df:6b:cf:e0:66:d2:00:57:93:01:
2c:cc:88:28:fc:6e:17:94:0f:7e:a7:8d:ff:26:7d:c0:74:b5:
9a:56:b8:e8:e9:ee:14:4b:cd:12:b8:49:01:35:89:05:aa:f5:
6d:17:46:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:32:43 2025 by rpki-client