Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer
File: 2LbhjGXdH5bypUTKz8mAhq75KW8.cer (raw, json)
Hash identifier: 4rUS8L03lX4/745gTEVTiyiReEC2cWrfFhubUn3fjjQ=
Subject key identifier: D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 33AD
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 06:20:59 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 327790
IP: 154.73.248.0/22
IP: 2c0f:f760::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13229 (0x33ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 06:20:59 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36FA15DAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:90:f6:77:cb:a4:5c:c3:fc:3f:1c:c4:8f:
bc:50:ff:44:9d:45:54:88:fa:2b:ae:d3:7b:30:56:
64:da:13:c5:68:42:ad:a3:b6:d4:d3:cb:20:f1:5a:
a6:57:76:00:ae:f2:b9:f6:2d:00:d5:0d:31:89:84:
d8:e1:a9:2f:ea:dd:93:5d:6b:c4:34:c2:f2:fc:60:
4f:60:dd:84:99:bb:50:98:7a:3f:1f:b0:c8:2f:5f:
9d:fb:20:6a:67:83:c2:c5:b5:aa:da:56:da:8f:9d:
d3:ef:01:19:52:4c:dd:b6:49:ec:2b:8c:c8:1a:3f:
e2:07:c8:8b:d8:67:2a:9c:0d:d8:38:b3:eb:a6:3c:
e3:47:0a:fd:77:f1:9b:06:4d:e6:f5:7a:74:98:b1:
a7:6c:79:67:ed:90:b2:41:af:78:40:58:f1:41:bc:
c8:70:b6:2d:ad:19:32:23:61:12:b2:74:3e:f1:58:
1f:46:ff:98:ae:ca:67:18:6a:4f:02:af:7b:e3:5e:
a3:e6:94:e9:91:7f:19:48:4e:87:2b:47:18:5c:40:
92:d6:f1:ee:90:ea:48:05:d4:65:4b:d6:ae:54:8a:
06:81:ab:cf:2c:2f:12:bb:fe:5e:43:48:42:39:9b:
33:4b:7f:43:fe:7c:3b:92:a2:1b:a1:ac:60:2a:f5:
38:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
327790
sbgp-ipAddrBlock: critical
IPv4:
154.73.248.0/22
IPv6:
2c0f:f760::/32
Signature Algorithm: sha256WithRSAEncryption
8b:84:14:4f:ea:82:5f:43:c5:d5:02:36:02:a9:8c:a9:ed:76:
33:d4:9d:cf:dc:82:9c:95:7b:25:ec:66:30:35:c4:b4:e5:2e:
17:46:81:9f:b4:ac:ca:f6:91:1d:8f:64:58:29:de:dc:1c:24:
e9:4f:41:c1:e9:fe:6f:ed:62:71:0a:d3:19:1b:8d:b1:ac:7e:
4c:7f:ad:80:9b:3d:c0:71:18:f4:91:4e:a5:a5:42:0b:f1:23:
a4:81:ab:81:7b:69:24:1a:23:d1:90:35:90:99:35:fd:2e:71:
eb:a7:4b:72:c4:03:05:31:59:86:d2:c4:1c:9e:30:12:c9:69:
1e:57:38:0c:d8:1d:b8:87:18:10:56:1a:a2:9e:fd:0d:3c:29:
4f:f6:ce:ff:a1:7f:9b:3c:ca:ef:59:45:63:78:dc:0b:fc:d1:
ce:4e:3a:2b:97:ea:88:c2:7a:64:d7:b4:18:2e:ae:fe:2d:d4:
3d:e1:09:9d:54:0c:2c:d7:e2:ce:5a:26:71:b5:19:e1:fc:b4:
73:cd:08:0c:4f:0c:5c:6b:07:6e:39:0f:a1:06:4e:b6:e0:6a:
ea:a4:b9:aa:1e:a6:74:0b:71:96:df:97:f2:6c:b1:3a:44:fd:
00:f0:07:1c:01:5b:e4:8a:b4:0f:49:c0:95:57:0a:5d:3f:a8:
8d:1a:23:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:54:21 2025 by rpki-client