Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/4WUzuvkP3-YfiCB-2uAE_ctS-jA.cer
File: 4WUzuvkP3-YfiCB-2uAE_ctS-jA.cer (raw, json)
Hash identifier: 4fUiZXiCMMz/xzEmN3VSA5546M7vyUjQUVw95llAb84=
Subject key identifier: E1:65:33:BA:F9:0F:DF:E6:1F:88:20:7E:DA:E0:04:FD:CB:52:FA:30
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3415
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/2AD08F1CDCDB11EFB46B417A762E951A/4WUzuvkP3-YfiCB-2uAE_ctS-jA.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/2AD08F1CDCDB11EFB46B417A762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 27 Jan 2025 18:19:04 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328330
IP: 2001:43f8:1190::/48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13333 (0x3415)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 27 18:19:04 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36EEB6BAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e3:12:52:a7:e0:97:43:d4:43:6d:42:e9:ad:
d6:6f:a3:00:6f:2f:fe:5a:f3:36:93:27:2e:ca:e1:
91:34:50:95:cd:36:16:61:cb:f9:68:da:27:6f:94:
f0:67:5f:41:13:29:94:2e:db:36:d7:ba:84:d4:dd:
5a:fd:b8:16:8b:76:76:f3:ed:a4:05:63:b5:8f:0e:
ed:10:11:12:84:29:01:27:da:1d:1c:85:7c:db:81:
61:64:04:2b:55:b6:ff:52:2d:18:eb:3e:0e:46:59:
af:93:cc:3d:74:a9:f4:5f:1f:70:3c:19:e8:60:db:
ba:47:31:16:68:01:29:9d:f4:be:54:18:7b:f3:2d:
bd:c9:56:23:55:d5:1a:81:29:33:85:02:ff:92:15:
2a:1a:77:1c:1d:c0:b4:b1:12:aa:80:c9:9c:54:ab:
33:d2:ca:c3:e0:cb:81:d7:81:3e:4a:b1:a9:28:a4:
48:db:17:7a:67:19:ad:48:8f:1d:45:c1:77:63:8e:
22:e0:33:1e:7b:1a:c2:52:84:b5:74:f7:4c:29:25:
2b:8a:9c:59:0b:02:cf:b2:57:93:cd:4b:50:91:12:
f3:14:4b:54:75:a8:14:bc:c0:68:1a:34:52:9f:95:
ac:50:0a:38:79:b7:a1:0b:b6:87:7f:96:37:71:cc:
a0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:65:33:BA:F9:0F:DF:E6:1F:88:20:7E:DA:E0:04:FD:CB:52:FA:30
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/2AD08F1CDCDB11EFB46B417A762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/2AD08F1CDCDB11EFB46B417A762E951A/4WUzuvkP3-YfiCB-2uAE_ctS-jA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328330
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:1190::/48
Signature Algorithm: sha256WithRSAEncryption
09:aa:59:37:91:24:d7:b5:5d:c1:4f:c7:d2:de:89:d4:aa:7e:
19:de:69:69:0b:2a:84:41:e1:87:64:3e:39:e5:fb:b1:5d:c8:
27:83:12:bd:5d:38:c6:bd:dc:e8:46:7e:72:2c:13:79:6a:d0:
b8:e5:17:83:d5:c8:45:3b:bb:3f:73:43:bf:8a:ef:4b:fd:78:
f1:db:f4:c9:1f:ae:c0:b4:3e:04:30:fb:83:43:bf:a5:be:0b:
b8:ce:8b:c4:88:9c:24:ba:76:17:a8:34:c9:f2:98:9d:2f:68:
a7:22:46:4f:47:f0:80:9b:c1:61:a9:74:da:30:89:ff:4c:f8:
d5:c6:74:c0:02:c3:bb:6c:2a:5a:89:d9:33:96:1f:d2:a6:27:
f6:df:b0:5c:6b:c7:18:ff:f0:9b:49:c0:22:05:f3:bb:1b:73:
f6:f3:09:76:07:e1:4f:73:ba:03:31:b6:0d:3e:2b:59:a5:9e:
2a:e9:53:85:f9:0b:5e:c7:32:69:3b:f3:79:1b:f4:6c:ae:7f:
9a:d2:38:08:10:ae:0c:35:4b:40:8e:65:b9:e7:7b:da:b5:54:
5b:04:dd:1d:cc:33:0c:2b:a3:d9:e4:f3:2b:29:3c:51:14:0e:
94:c2:d2:3d:3d:09:f7:36:a0:40:4e:a9:c1:88:a0:be:b3:5b:
a6:07:66:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:55:23 2025 by rpki-client