Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/4LRXYprC1N58lOp7iBVXQdHsICQ.cer
File: 4LRXYprC1N58lOp7iBVXQdHsICQ.cer (raw, json)
Hash identifier: V87/W5k0xY3A8LixcaNbY9x4lDWsYNbNkZbcBWo6rJw=
Subject key identifier: E0:B4:57:62:9A:C2:D4:DE:7C:94:EA:7B:88:15:57:41:D1:EC:20:24
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2D90
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/F649106CE8D811E986B0B040F8AEA228/4LRXYprC1N58lOp7iBVXQdHsICQ.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/F649106CE8D811E986B0B040F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:50:42 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 22572
IP: 2c0f:e9e0::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11664 (0x2d90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:50:42 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F362C7E9AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f2:06:6f:85:85:74:09:46:44:1f:37:3d:7f:
9d:22:dd:99:4a:cf:60:a2:bb:53:44:56:d7:51:d1:
f0:19:c8:99:59:b9:45:42:18:b5:4b:e8:21:d1:af:
fe:42:80:4a:3b:4d:6b:f0:49:01:04:d9:e1:13:a3:
64:f9:fc:1f:7a:d8:7f:c1:56:a3:cc:f5:a7:75:59:
74:81:2f:ae:83:4a:0f:5a:35:9d:30:11:b9:38:3b:
4f:43:91:6a:66:07:3f:c2:4e:75:92:aa:de:1d:e7:
a1:8d:54:3f:7d:51:24:f8:5e:bf:f8:a8:a8:5c:1f:
24:14:3e:50:40:3f:10:e9:fc:0a:af:27:da:06:e3:
6b:89:1f:cc:51:ba:ba:0a:97:ff:f2:c4:5b:2b:ad:
8c:03:e2:61:09:50:39:dc:bf:a9:68:e2:8a:c9:2b:
a2:21:38:1d:d2:10:70:40:b6:0f:fe:d5:0f:15:13:
57:b0:be:d1:9e:03:e8:ce:85:a4:89:07:16:2e:71:
8b:b7:89:0f:89:45:08:ca:98:64:dd:00:24:fb:3f:
7e:56:98:de:28:34:fe:68:73:fa:ba:8e:f2:bc:f0:
f0:ef:4f:50:44:05:3f:1d:e5:57:a7:f1:1b:d3:ce:
55:de:ff:a4:4a:30:46:8e:54:c7:2d:cc:23:2b:4d:
44:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B4:57:62:9A:C2:D4:DE:7C:94:EA:7B:88:15:57:41:D1:EC:20:24
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/F649106CE8D811E986B0B040F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/F649106CE8D811E986B0B040F8AEA228/4LRXYprC1N58lOp7iBVXQdHsICQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
22572
sbgp-ipAddrBlock: critical
IPv6:
2c0f:e9e0::/32
Signature Algorithm: sha256WithRSAEncryption
49:c0:d4:5f:8b:ac:0e:27:81:0c:b6:99:92:99:6d:12:d4:62:
5a:4f:2a:c8:47:39:1e:5e:d6:f1:f3:d2:39:88:5f:70:6d:8c:
27:e3:bc:26:14:e3:d0:1f:b0:8d:c2:17:fc:fa:26:6a:2f:ea:
73:f9:e9:61:a3:26:ec:0a:74:4c:dc:13:af:ff:8e:b6:b8:c7:
0d:35:06:30:0c:ab:f3:c2:92:f0:18:07:fd:53:35:f2:54:8e:
fd:69:22:62:ba:f5:fa:de:1d:b5:71:c6:1f:5d:d9:bf:a9:2d:
56:c3:1e:42:c5:07:85:0f:41:00:04:eb:75:6c:69:4f:5b:ce:
27:e4:25:89:07:1e:71:1e:61:36:54:b8:c2:58:dd:5a:ee:d4:
48:7a:68:7a:ab:ba:08:50:97:15:03:d5:87:6a:50:79:aa:a6:
7f:d8:83:0e:1b:d6:5c:c3:b1:6a:24:4b:eb:55:c5:40:fa:de:
f7:76:8b:58:31:2a:ee:45:94:f3:bf:6b:97:5a:c0:83:b2:78:
1a:af:1f:b2:3f:ee:8a:c4:23:65:42:c7:0e:b6:08:2c:f8:d3:
84:31:07:30:2d:75:05:be:03:04:3c:f8:0e:96:27:ae:68:98:
d4:76:c8:2e:ac:ec:ac:04:65:03:8f:d7:db:f0:cd:74:98:c6:
ee:c1:ce:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:52:18 2025 by rpki-client