Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
File: 58aANgAk7bnzRR3JE-ozBZvJBKU.cer (raw, json)
Hash identifier: 2OgH/A7pz/ws4rV6BgD+/nksEq1Ak5pAL/CtlKUpP3Q=
Subject key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3161
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 04:10:25 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 327980
IP: 41.216.176.0/20
IP: 2c0f:f570::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12641 (0x3161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 04:10:25 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F369AFDDAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:70:9b:2a:2b:5a:1a:3e:ac:16:99:64:ad:9f:
f6:a6:db:41:a3:a2:04:86:77:49:ea:f1:95:19:38:
f4:b8:8b:49:4b:a9:79:08:94:29:b8:60:f6:94:dc:
42:a0:f4:c1:98:64:aa:2f:96:a8:82:91:d9:df:e7:
f1:f6:2f:01:6f:95:81:be:3b:a7:04:b2:bc:a5:8c:
8e:b1:a7:7b:c3:e4:3e:52:4a:02:99:a2:0a:a9:b2:
68:71:08:c1:ff:e1:f0:74:99:6e:9d:82:88:8d:d2:
96:18:bc:30:81:60:d6:ea:96:ab:1b:56:9b:e7:41:
f2:0b:f2:b8:61:9e:82:79:e7:ef:9a:e1:da:fd:41:
61:31:1e:21:e0:79:04:92:81:a0:a2:10:49:03:18:
ed:82:13:7d:e0:66:b8:89:a7:b9:68:18:92:55:63:
79:16:08:f9:8a:d2:14:8c:8b:c1:45:2d:c2:3c:d9:
66:19:12:40:0e:cb:0e:8a:e9:c0:7d:4c:c5:ca:ca:
ee:47:d8:c2:e0:f2:41:bd:bb:da:2c:33:57:6e:b1:
d3:c7:64:fc:dd:5d:42:11:28:7a:10:0d:c3:cf:79:
3a:36:0d:3f:39:26:fe:21:63:09:17:5e:36:a4:bf:
ac:ca:e2:76:7f:0c:39:57:9e:79:70:87:cc:05:b4:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
327980
sbgp-ipAddrBlock: critical
IPv4:
41.216.176.0/20
IPv6:
2c0f:f570::/32
Signature Algorithm: sha256WithRSAEncryption
95:65:4f:f5:3f:82:1a:b6:2e:ae:62:ea:99:55:bd:33:de:c8:
dc:ed:2d:08:26:54:65:d4:cd:17:22:c4:f1:e6:8b:0d:00:69:
69:8e:b6:42:52:8d:eb:fd:d1:06:d9:f9:3d:86:e0:6f:65:0b:
a8:65:89:a6:2f:6b:b5:8b:dc:99:12:c2:b8:4f:5f:f2:5d:c3:
f7:04:7d:09:a0:9b:17:d6:96:f5:05:f3:98:4b:e8:bc:95:fe:
a3:3b:ca:50:6e:be:1f:02:46:96:4d:22:4f:e4:a3:53:8f:f1:
1d:a2:0d:ca:03:67:50:d9:2a:1c:23:3e:46:0d:08:1a:9b:f5:
32:ff:4f:74:fd:26:2e:04:b7:b8:da:11:43:18:1c:aa:d5:5e:
4a:0a:23:7d:f0:3b:35:50:85:1f:ed:44:27:db:28:28:6d:35:
d5:8e:2a:95:6e:50:37:87:3f:0c:23:58:30:b4:e3:02:b7:61:
71:41:f0:84:e6:96:d4:70:a0:a4:6d:b2:2c:78:2b:16:a1:48:
1a:00:d4:01:16:42:51:6e:7c:cf:00:8b:43:60:14:4f:29:2f:
74:6a:a2:db:28:17:78:27:78:b0:cd:a9:5a:24:f9:dd:5e:28:
92:42:2b:e9:8b:de:b3:06:f7:31:d7:5d:9a:1a:e7:eb:9d:e7:
06:90:93:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:51:19 2025 by rpki-client