Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
File: 3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer (raw, json)
Hash identifier: 6NTX81XSHVeJlHCepOf9SeiBTIh8Z9T3OExE5CLa/ps=
Subject key identifier: DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 33A6
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 06:19:26 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 41.208.64.0/18
IP: 41.252.0.0/14
IP: 2c0f:fb10::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13222 (0x33a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 06:19:26 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36F8F4FAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:aa:44:cb:3c:e2:90:5b:cb:de:b2:bd:88:
68:52:5a:15:01:fe:ec:1e:94:ad:4e:0d:e9:b3:67:
d2:e9:06:e9:55:67:1d:68:c2:e9:1e:7a:90:75:ca:
c4:2c:3c:fe:25:61:1b:04:e2:0d:37:40:1b:c6:8e:
b4:d4:3f:9b:44:1e:22:fc:7c:8c:97:38:1b:62:cc:
98:7a:b9:ed:9e:06:9a:49:4d:13:65:f9:a9:e5:80:
ab:44:20:b2:3e:7b:b7:bc:07:ff:f9:ff:2e:18:8a:
a9:81:79:9a:46:a6:d0:e2:50:c6:1a:c5:d8:28:b3:
4e:e4:c0:97:73:36:6e:f2:4f:b7:df:cb:62:5d:c2:
e1:50:20:8f:df:dd:fc:fe:6d:75:d9:b3:fc:dc:96:
f9:ae:a4:25:6b:b7:ac:9f:83:d5:fe:07:8d:6c:3a:
11:2d:f2:34:62:74:9a:b8:f8:73:7a:2b:ce:33:3a:
eb:b2:c1:93:00:73:f3:ce:cb:6e:f2:43:34:7d:ba:
1c:d1:4f:c4:a3:75:84:c4:ee:a3:d3:c8:75:d3:2f:
48:72:72:c1:91:13:54:93:66:18:9f:5a:3d:ab:05:
0c:8d:9e:72:22:4e:76:b6:96:f6:5a:b5:ad:b2:ec:
59:a9:65:0b:91:e0:a2:d3:37:9d:fa:2c:f6:99:d4:
c2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft
sbgp-ipAddrBlock: critical
IPv4:
41.208.64.0/18
41.252.0.0/14
IPv6:
2c0f:fb10::/32
Signature Algorithm: sha256WithRSAEncryption
b7:6c:33:2f:91:69:83:b3:0d:2d:85:78:b2:1a:7e:43:c4:1e:
a4:7a:34:f7:c1:99:06:a2:fa:02:be:1b:dc:96:7e:cd:7b:af:
f9:a4:a2:92:4b:2a:07:7b:7e:1a:c7:78:bd:9b:91:70:bc:3b:
d8:ce:00:29:03:19:83:20:5a:c8:31:4c:a3:46:00:aa:57:49:
7d:fb:2e:87:05:a4:91:f6:4b:9e:be:44:60:4a:0b:78:5f:13:
b1:df:e0:eb:62:ef:42:48:d7:0f:0b:f6:2b:f1:6d:3e:57:0e:
8a:d6:40:2e:80:af:40:bc:56:36:52:df:b3:8a:fc:82:57:46:
f7:6f:9e:8a:cc:4a:76:22:42:02:88:82:21:5e:88:da:1e:c4:
8a:fc:81:67:eb:9c:5f:65:69:a3:00:7b:b6:63:cc:8a:b0:b5:
5f:ab:ad:56:58:1d:5a:0e:29:9e:a9:bd:cb:68:e8:a9:29:8d:
c7:66:03:81:74:6c:fd:2e:ce:15:e3:db:68:98:5c:a5:bf:47:
67:55:cf:8e:e8:d5:cd:d6:3f:66:d5:a0:75:4f:5d:35:9a:0b:
fd:a3:9d:af:6e:19:12:c6:1c:75:4f:a2:f0:b0:40:0e:86:67:
e5:4e:fa:b3:8f:79:bd:6c:6b:67:29:e5:16:53:3d:d2:da:b8:
22:ee:d2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:51:16 2025 by rpki-client