Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/3tpMTzoxd7ojbORr1_95Ljxrw_Q.cer
File: 3tpMTzoxd7ojbORr1_95Ljxrw_Q.cer (raw, json)
Hash identifier: bz4rLh6S8PMbeKf6ePCMUj8CSLWP3HxQfj0q31Ao32Q=
Subject key identifier: DE:DA:4C:4F:3A:31:77:BA:23:6C:E4:6B:D7:FF:79:2E:3C:6B:C3:F4
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2CED
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F361609C/8C1B615283EE11EABE7A3161F8AEA228/3tpMTzoxd7ojbORr1_95Ljxrw_Q.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F361609C/8C1B615283EE11EABE7A3161F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:12:10 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37627
IP: 154.65.0.0/22
IP: 196.61.56.0/21
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11501 (0x2ced)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:12:10 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F361609CAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b9:78:02:84:36:c5:dc:e0:6d:00:c7:69:b5:
ff:58:4f:40:1c:dd:7c:20:64:93:85:00:c5:ba:a6:
f4:45:32:4a:e4:f1:e9:04:97:78:3d:93:59:70:28:
2f:b8:70:f1:58:46:07:05:83:11:ab:c4:5a:50:ea:
16:84:35:d8:c5:2c:96:9e:63:7e:9f:2e:d2:e4:af:
88:4a:8d:c9:ed:17:2a:ad:f6:06:8e:3b:41:59:21:
fa:44:03:bf:ef:eb:f0:8d:fd:c3:11:86:19:6f:90:
6e:59:c8:be:45:41:f8:b2:10:ef:6d:37:f0:0f:dc:
91:b8:71:84:43:65:e7:96:ba:b4:f3:0f:19:1b:ec:
26:cc:ca:db:36:23:2c:69:74:fc:8c:f4:c9:46:98:
3c:e0:fd:5b:15:3a:e2:f3:82:30:42:de:89:5b:48:
10:5a:a0:ca:a3:10:6a:d4:f6:37:05:72:47:33:17:
df:cd:74:1d:f5:e7:15:40:28:9d:62:45:54:22:02:
ff:ba:0d:89:43:12:b4:68:b7:b3:61:43:f9:c4:04:
9e:ba:20:83:39:2a:22:74:0c:75:92:0a:c5:aa:50:
9d:98:d0:1f:81:4d:cd:b4:11:19:7a:8d:c2:e8:92:
b2:6d:5d:ee:71:84:19:87:3a:64:41:6f:3d:3c:e3:
39:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DA:4C:4F:3A:31:77:BA:23:6C:E4:6B:D7:FF:79:2E:3C:6B:C3:F4
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F361609C/8C1B615283EE11EABE7A3161F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F361609C/8C1B615283EE11EABE7A3161F8AEA228/3tpMTzoxd7ojbORr1_95Ljxrw_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37627
sbgp-ipAddrBlock: critical
IPv4:
154.65.0.0/22
196.61.56.0/21
Signature Algorithm: sha256WithRSAEncryption
8a:22:62:5c:e6:5d:a9:55:59:2a:f9:3f:26:7f:e7:22:04:8c:
77:5c:58:d0:53:83:1d:74:de:f3:27:ff:05:ac:a1:a9:2f:c0:
96:5b:1a:9b:c7:48:e9:73:b4:f5:c6:06:34:6f:1a:1b:b9:74:
99:01:5f:1a:99:7d:0f:74:35:07:0f:35:35:ed:90:3f:68:90:
85:c4:5d:4e:30:df:f8:5e:7a:2c:8a:04:b4:a8:5c:a5:97:05:
c3:3f:42:65:24:7f:99:12:b0:12:6d:86:f9:4f:07:24:1f:93:
71:cf:ca:18:1c:56:1b:98:78:ab:e5:88:33:b9:5e:29:27:41:
a8:3a:ba:e2:86:c8:cd:75:d1:bf:1b:ed:de:5c:5b:5a:08:94:
71:3a:7c:30:d9:31:5d:07:1a:66:d9:9c:90:87:9c:88:8f:35:
41:e6:fb:61:b5:bd:15:3e:17:a4:a4:b9:e1:74:5e:92:42:c9:
37:4d:be:5c:28:31:0a:d2:4b:82:41:11:69:fa:95:1e:54:60:
a8:0a:d9:68:bf:51:a4:a4:ab:73:0d:52:b2:ef:36:d4:85:25:
e2:e5:d5:b8:04:c5:b6:5b:d8:7a:e2:66:21:61:a6:2b:7f:1e:
58:ce:57:52:a4:ef:2c:63:67:1d:dc:78:a8:f5:d4:f9:85:a2:
0f:8b:8d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:52:19 2025 by rpki-client