Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer
File: 3XSZqMjBKrZ-FetJKAimku1LWfQ.cer (raw, json)
Hash identifier: 3cvUQucfb9n/SsAv4nbhVL9HT8mbSy1A/BmYjhFZO/w=
Subject key identifier: DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2F3A
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 02:17:30 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328732
IP: 102.209.232.0/22
IP: 102.216.220.0/22
IP: 102.221.216.0/22
IP: 2c0f:e9a8::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12090 (0x2f3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 02:17:30 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F365C79EAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b9:86:ad:c3:be:e3:19:86:fc:7a:62:48:f5:
37:9c:c2:cd:31:ec:2d:98:eb:77:0f:b3:2a:c3:90:
46:d8:d9:e4:99:6c:43:a1:09:96:ff:82:dd:d1:e9:
df:1e:81:73:a1:80:9f:39:cf:f0:56:cd:58:f3:f6:
bf:4a:0b:71:a6:7e:61:d4:53:a7:12:a5:96:75:41:
1d:79:1d:1b:ff:c8:14:04:c1:f0:49:70:8d:6b:de:
7e:cd:9c:6c:59:b3:17:ad:97:50:00:cf:81:30:c4:
16:d7:3c:2a:a1:81:58:b7:9b:33:cd:c0:a3:4f:b4:
45:8f:81:a2:f2:2c:9a:a1:bb:2d:d4:79:8d:57:d6:
89:20:92:7e:de:ac:dc:04:8c:14:fa:f9:2a:a1:c5:
db:d0:ea:e3:43:06:ba:26:ad:bf:29:c8:b3:13:60:
26:e0:49:f3:a2:87:7e:7a:82:c4:70:fa:4c:bb:22:
e5:95:dd:2b:19:3b:f2:16:1e:9d:1f:a3:3c:8c:ad:
23:69:2f:af:ed:e1:2b:79:2f:ab:00:8d:d3:35:03:
64:62:93:4f:74:17:29:26:4b:4d:cd:2c:21:98:bb:
ce:cb:38:09:5f:4e:a8:9c:53:52:a5:13:41:6b:82:
29:5e:d4:5e:d6:e7:e3:cc:0c:22:fc:b2:2d:46:0f:
09:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328732
sbgp-ipAddrBlock: critical
IPv4:
102.209.232.0/22
102.216.220.0/22
102.221.216.0/22
IPv6:
2c0f:e9a8::/32
Signature Algorithm: sha256WithRSAEncryption
2b:25:21:29:ee:be:23:8b:34:36:74:18:97:4e:ac:40:53:df:
be:6e:6a:8d:b4:a1:c5:4a:ab:d3:13:f5:c3:1c:cf:a0:ac:a9:
ab:83:d2:33:f3:97:fd:ab:d3:5b:94:70:43:d4:b6:c2:05:b5:
2e:89:2e:1c:af:ed:18:93:48:24:f2:f0:17:e4:69:2b:22:0a:
70:8f:66:3d:7d:84:e7:e5:d9:59:26:9b:75:14:3b:fc:ee:92:
d8:e7:91:41:09:7d:06:88:1c:18:2c:61:11:e5:a0:dc:59:f0:
85:fb:0e:f1:c9:4a:7f:d1:d7:d3:f8:f0:89:66:7a:1a:7e:92:
f5:77:1f:f1:86:50:5f:1a:a0:8a:e5:af:53:3b:9b:3e:83:88:
73:40:24:92:77:35:00:52:24:ef:57:16:2b:8b:db:4c:c1:c9:
6e:2e:29:66:fb:a1:5d:52:00:9d:d3:6f:40:1b:fd:3a:75:9d:
79:51:37:9a:df:be:4b:25:25:56:8d:85:c3:2b:5f:24:7c:aa:
bf:f2:d0:24:32:41:22:6c:6a:c2:ee:e6:ae:89:34:4a:16:d4:
05:a9:a9:e3:d6:1a:a7:b8:8b:af:49:60:82:11:e8:a3:e1:af:
70:bd:73:64:1f:28:dd:4d:e8:1c:ca:5d:a7:09:af:b3:82:b3:
7a:8d:56:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:55:23 2025 by rpki-client