Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
File: 4qOmjo-ihl0uVH2MskMPqyH8oG0.cer (raw, json)
Hash identifier: mnQFrjSSUyaF3V6ShKPQKdznojjabNXSzNrAaN2btgs=
Subject key identifier: E2:A3:A6:8E:8F:A2:86:5D:2E:54:7D:8C:B2:43:0F:AB:21:FC:A0:6D
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2D7B
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:45:51 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328925
IP: 102.218.152.0/22
IP: 2c0f:3500::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11643 (0x2d7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:45:51 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F362A2E1AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6c:67:6f:33:e8:05:a2:bf:70:3b:f9:fd:4d:
2b:d0:fa:e3:b6:ab:b3:0b:a4:ab:79:98:74:21:3e:
2c:34:04:5c:0b:57:03:c3:34:33:16:66:40:74:91:
79:85:20:9d:53:59:ee:d6:e4:90:87:ca:f7:d7:d6:
ff:61:da:d0:e0:ae:b8:f2:ba:bf:df:4e:6d:f7:b3:
c7:de:39:c8:b8:37:fc:42:d0:cd:49:70:b2:cc:82:
ed:b8:73:d0:30:81:bd:cd:80:d0:74:2f:14:c5:80:
de:b4:cb:a9:e4:7b:e5:0e:3f:7d:fc:4c:af:11:c7:
58:88:e7:48:5e:81:fd:60:a4:ee:2f:03:f0:01:ff:
55:72:51:0f:5b:7a:e4:92:51:bd:55:74:d7:b6:48:
cf:b4:62:a8:06:75:0f:ca:53:1e:c0:7a:80:af:90:
f2:19:ac:09:3d:ac:dc:b4:9f:41:2c:43:9f:28:e7:
8d:9f:71:ec:c4:81:9e:eb:0e:48:b3:bb:f6:b2:47:
28:70:b7:f4:c7:31:d5:d4:d0:a8:1e:b0:ee:0f:2a:
8e:7e:13:66:a0:79:65:db:12:9a:80:38:35:6e:8b:
0e:da:d3:bf:7f:a5:94:69:df:5e:e1:37:08:1e:4b:
f1:82:8f:a9:7e:b4:e7:2b:94:5c:0a:41:84:19:9d:
22:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A3:A6:8E:8F:A2:86:5D:2E:54:7D:8C:B2:43:0F:AB:21:FC:A0:6D
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328925
sbgp-ipAddrBlock: critical
IPv4:
102.218.152.0/22
IPv6:
2c0f:3500::/32
Signature Algorithm: sha256WithRSAEncryption
87:19:a1:1c:4c:14:30:27:cc:d2:a8:81:96:5c:30:8d:01:68:
07:2f:a6:e5:8b:57:7c:2d:32:b8:09:3a:46:81:dc:50:db:27:
ff:88:4c:0e:4b:3b:0e:e9:77:72:10:6b:e2:43:35:a3:db:3e:
16:d9:77:09:29:94:92:a0:6b:95:b4:cc:8a:03:10:94:88:6b:
8c:40:61:de:7a:ff:9a:63:75:ab:eb:eb:ef:48:ac:ae:59:9e:
6d:ac:e5:83:16:83:04:5d:f0:ae:2b:d2:d0:93:5e:dd:d5:23:
a0:de:74:f4:bf:e0:f1:d7:3a:e1:22:99:c9:a1:ed:d2:3a:00:
54:eb:37:d2:ba:2a:28:28:31:b8:14:a7:ea:ee:f0:8b:48:60:
33:cd:72:5a:21:85:02:45:7a:74:32:f2:a2:91:16:99:81:94:
28:57:51:26:72:25:51:82:2c:ed:98:60:de:0e:cf:7f:ce:ae:
1d:6b:8a:89:97:2b:e9:45:eb:7e:bf:55:b0:8d:a3:30:c5:d0:
90:28:36:66:4d:ec:83:ed:a7:18:14:c3:18:b6:67:44:df:e0:
c1:27:c4:5d:b3:2f:a2:67:92:98:c6:6b:1f:4f:d9:27:23:19:
eb:34:b7:e6:75:d9:5e:19:99:21:8e:9f:25:55:35:74:be:b2:
72:46:a0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:47:02 2025 by rpki-client