
Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/37GYokEhr76oC-bCVT7Qn4UiUDI.cer
File: 37GYokEhr76oC-bCVT7Qn4UiUDI.cer (raw, json)
Hash identifier: sBIhnTCju+RLf3cGlOSyESqdIYxr8P0RI/jlLEBQyhU=
Subject key identifier: DF:B1:98:A2:41:21:AF:BE:A8:0B:E6:C2:55:3E:D0:9F:85:22:50:32
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2E47
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:28:05 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328112
IP: 2c0f:f3c8::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11847 (0x2e47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 01:28:05 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36E1839AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:43:17:5b:36:46:26:77:9e:87:79:81:7b:35:
75:9c:65:d5:1c:b9:80:fb:bd:d3:53:59:d1:d8:28:
0c:9a:6a:e2:b7:8b:c1:ac:cc:b3:7d:d9:79:09:f6:
6d:51:85:87:5f:76:d5:d5:a0:97:5f:ba:b8:e7:fa:
46:9c:83:19:c0:73:c2:1e:eb:ff:ae:ae:42:ff:a7:
9e:de:95:1f:14:e2:2b:a3:3a:60:eb:aa:72:4a:60:
be:7b:78:c4:fd:ef:d8:c3:20:24:62:4b:57:34:29:
81:9e:69:02:6f:d4:c6:8f:7a:a4:44:e6:c1:19:e8:
44:41:6f:dd:d2:ed:a8:cd:7a:04:66:98:ee:8b:93:
f8:60:b8:3e:e0:d6:02:43:de:09:73:69:f3:2c:9a:
c1:82:1e:df:76:7a:80:cd:ff:55:1c:48:77:00:ee:
d4:a0:b9:eb:2a:79:6b:bf:cd:c0:2f:c7:62:70:b0:
d2:c3:65:64:60:1f:7f:7b:98:48:6e:e7:5d:85:98:
d1:99:95:6f:15:89:31:42:51:94:d8:eb:b9:99:ac:
8a:ec:9d:6d:b4:11:8f:6a:4e:80:bf:70:d5:6c:2f:
54:ad:fc:5a:5c:a8:4a:2a:12:9a:9c:00:74:80:d8:
9d:8d:e0:1e:81:a2:a7:a7:f2:9a:e1:d5:ae:fd:30:
dd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B1:98:A2:41:21:AF:BE:A8:0B:E6:C2:55:3E:D0:9F:85:22:50:32
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328112
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f3c8::/32
Signature Algorithm: sha256WithRSAEncryption
90:05:37:5b:1b:46:f4:cd:b3:22:d2:a1:ab:6b:22:85:7f:79:
c7:ec:d6:bb:54:06:a0:32:7d:4c:26:ac:92:9b:53:e6:ea:38:
98:8e:cf:d8:fe:a9:dd:3e:39:c9:3f:d2:dd:a0:1c:16:d4:2b:
f6:58:af:ea:99:44:69:98:cf:f5:42:46:7c:0b:92:33:44:ed:
d9:8d:90:99:28:3e:3b:3a:d4:56:a1:20:4b:05:eb:75:37:c7:
a0:86:8c:e4:f5:09:8d:22:dc:57:07:82:fe:58:f2:9e:90:16:
3b:25:00:f4:21:31:ff:9b:ac:f2:51:d0:c2:96:08:9e:5d:a5:
c9:f5:cc:2f:e8:1b:b0:11:4d:76:21:6d:12:77:85:8f:c2:9b:
3e:ed:ee:c4:bf:8e:8c:a1:5f:7f:c5:ac:1d:6f:e2:9f:f6:3a:
9e:1c:1e:2b:63:36:94:eb:af:85:8d:f2:22:bd:56:e8:d4:b0:
67:a1:fc:5d:68:a5:3a:71:47:1d:49:4f:2b:5b:fa:85:6e:4b:
c9:97:dc:23:d8:bb:9e:07:d5:25:cf:ff:3a:6d:f8:a6:2c:58:
f8:fa:39:dd:1c:35:e7:4a:e1:b5:aa:60:e5:4e:b9:1b:ff:af:
00:f7:57:46:41:7e:9f:25:6c:04:e8:67:cf:94:98:03:71:a2:
18:69:61:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:28:44 2025 by rpki-client