Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/4sEXgjtyd70rre-ytXfGz5x2TY4.cer
File: 4sEXgjtyd70rre-ytXfGz5x2TY4.cer (raw, json)
Hash identifier: SlcHfS5tmuIW6s92oesHyo0X5FrZtvjZgH+bvdrRDLQ=
Subject key identifier: E2:C1:17:82:3B:72:77:BD:2B:AD:EF:B2:B5:77:C6:CF:9C:76:4D:8E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2F0D
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 02:08:43 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328076
IP: 2001:43f8:300::/48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12045 (0x2f0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 02:08:43 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36592B4AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:22:8e:48:8b:17:01:de:63:18:92:78:ef:29:
eb:5b:66:55:d4:1d:a6:6d:02:80:c6:b5:69:65:de:
27:d2:53:f2:ce:bc:13:4f:2c:5d:94:f5:ab:25:cd:
96:a7:8e:34:34:f4:d4:fc:0a:5d:c6:f3:11:27:f9:
5c:bc:06:65:50:ad:a3:18:1c:8a:77:b2:be:7d:b4:
8b:31:d9:e9:5b:07:86:cf:04:65:fe:d5:5a:54:a6:
5a:43:27:0d:c4:f7:f0:68:8b:dd:83:b6:ee:1d:bb:
a5:0f:ae:e0:aa:e0:70:f2:1f:fa:f6:e5:8a:d7:d9:
6d:4b:50:1d:88:69:c3:31:20:de:d9:2b:d1:79:c8:
6b:42:de:44:2c:71:dd:44:d8:48:c6:19:ed:94:07:
be:3d:93:39:78:56:01:c5:74:a9:7a:c5:3f:0a:c5:
8e:aa:f1:0e:05:f2:c0:17:e3:7d:5e:df:19:77:4f:
4a:6c:93:20:f3:13:f3:dd:af:3f:41:63:0d:a5:30:
1a:0b:1d:66:be:5f:4d:7d:83:12:c4:2f:0d:79:cb:
16:ba:64:c7:f2:05:60:2f:ea:74:cc:dd:ef:61:92:
01:c9:d2:f8:ef:f9:8e:b4:e9:75:08:af:5b:f3:70:
74:89:85:0c:23:58:2a:0b:48:98:b1:bb:85:f1:d4:
be:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C1:17:82:3B:72:77:BD:2B:AD:EF:B2:B5:77:C6:CF:9C:76:4D:8E
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328076
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:300::/48
Signature Algorithm: sha256WithRSAEncryption
3c:6f:33:6b:95:3b:76:6a:f3:0b:21:9e:f2:9a:bd:4f:54:be:
1e:08:59:b3:24:32:a7:f5:9d:d1:da:77:70:fe:9e:13:d9:0e:
6e:46:04:15:76:71:91:a4:05:cc:bd:88:96:d6:3b:cb:32:ec:
36:a5:ac:31:d0:33:ba:cc:66:be:6c:cb:89:42:cc:cc:20:70:
33:b0:4b:a2:bc:f7:0d:26:aa:e8:3d:89:71:86:d0:2e:bb:05:
53:86:15:09:ba:f6:b4:44:41:0e:ac:db:19:c8:31:c4:0d:e8:
06:c3:2d:10:62:64:62:4d:bd:a0:89:fd:87:b3:04:c4:2b:33:
2a:95:43:b4:0b:6a:0a:84:6f:45:ac:0c:da:ab:fb:43:77:73:
da:5c:2b:ba:e9:3d:41:9f:fc:3c:16:e1:ca:45:57:a7:b4:38:
01:42:b1:4d:2d:77:73:6a:75:ed:34:86:c3:46:80:e4:e4:c8:
30:5b:de:2e:03:c8:f9:61:70:9b:83:3d:a7:00:f8:d1:1d:f1:
81:48:28:7e:a0:95:12:b0:82:ce:59:ea:35:b5:fb:06:76:5b:
09:11:80:05:89:17:89:f7:e1:cb:fd:13:c0:16:01:dd:3e:68:
91:9f:37:95:90:98:97:41:83:1f:be:37:4f:e2:e7:84:84:c8:
1e:87:e1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:56:24 2025 by rpki-client