Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/7GwN3it-gbOk5sxGye8OxVb-0zo.cer
File: 7GwN3it-gbOk5sxGye8OxVb-0zo.cer (raw, json)
Hash identifier: w8+YZSYvagshtrA8aEogC7vLJBPyONONtd25iy8lXhQ=
Subject key identifier: EC:6C:0D:DE:2B:7E:81:B3:A4:E6:CC:46:C9:EF:0E:C5:56:FE:D3:3A
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2D33
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3620624/DF05C77C3C2D11EEA9AA684E4AD9E6FC/7GwN3it-gbOk5sxGye8OxVb-0zo.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3620624/DF05C77C3C2D11EEA9AA684E4AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:28:44 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37157
IP: 41.78.36.0/22
IP: 102.128.136.0/21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11571 (0x2d33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:28:44 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3620624AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:69:f6:89:6b:44:ae:d0:ff:02:17:b2:60:08:
26:51:b1:62:6c:d6:00:87:aa:10:8b:82:e6:58:43:
1a:de:ed:d9:3b:9d:7b:56:79:5a:d2:94:b4:fe:7e:
54:04:87:57:e2:41:23:4e:19:80:b1:6c:c0:a9:5d:
2a:fc:4f:5c:31:88:75:31:12:7b:f4:b3:a8:37:ae:
66:1b:65:73:6b:58:98:47:d6:57:81:29:d3:c0:96:
bf:83:ff:cf:13:88:aa:27:f3:2f:5a:32:ec:27:83:
f6:14:42:52:ae:70:b8:8c:47:1e:99:99:f6:b0:49:
78:72:d3:99:bb:bd:31:e5:9f:51:e0:74:9d:9b:a7:
14:d3:13:b4:60:01:e7:f1:90:98:54:80:fb:d9:a5:
f0:0c:be:d6:27:01:f8:15:4c:9c:92:e1:ce:f5:ba:
8a:db:8b:f5:9f:ef:88:fd:92:8e:9c:c1:92:1b:a0:
49:be:38:93:c9:31:f7:4f:bb:13:74:29:b9:aa:45:
53:3b:76:c5:18:6e:4d:73:7f:ea:58:ea:aa:83:95:
78:ff:55:a0:39:70:dd:f0:c0:8e:9e:fd:34:fa:da:
eb:ab:87:81:5b:01:5a:f3:e7:4a:d5:df:99:cf:04:
b7:8f:86:01:fc:9b:c9:7f:77:70:f8:c4:d4:d6:04:
34:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6C:0D:DE:2B:7E:81:B3:A4:E6:CC:46:C9:EF:0E:C5:56:FE:D3:3A
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620624/DF05C77C3C2D11EEA9AA684E4AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620624/DF05C77C3C2D11EEA9AA684E4AD9E6FC/7GwN3it-gbOk5sxGye8OxVb-0zo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37157
sbgp-ipAddrBlock: critical
IPv4:
41.78.36.0/22
102.128.136.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:bb:a8:56:f4:47:1f:df:a1:ef:d7:46:36:e7:a9:ff:00:20:
44:1c:ed:57:a8:5d:dc:e8:d8:92:86:ed:75:7f:8f:9c:3e:73:
cf:28:ff:96:88:66:a8:6a:df:56:b1:cc:49:90:05:41:3c:52:
4d:30:8a:b3:0c:0c:e0:e2:d9:00:b3:0e:f6:80:63:cd:5d:a5:
56:25:7c:df:f7:f5:75:fc:b0:e7:06:6f:de:77:c1:0d:a9:d5:
a5:96:d4:a3:19:90:19:dd:79:f7:ac:8e:e9:f1:af:38:17:a8:
e3:57:b3:3f:5b:76:36:8a:75:78:4e:60:fe:6c:c5:8c:55:fd:
c2:b7:91:6f:13:8a:d1:7c:d2:ce:d7:88:41:5b:ed:29:a7:6c:
9b:fa:d9:27:9c:37:89:9b:a9:fe:83:59:d0:42:30:8b:59:42:
71:22:4b:69:4b:c7:42:54:b9:3b:49:c0:12:39:cc:de:d5:7e:
14:1a:ea:84:a8:5a:c3:2f:05:ec:ff:bc:3a:a4:3d:48:3e:1d:
5f:50:70:96:53:9f:9e:cd:d0:9a:50:3c:aa:e9:84:03:80:c0:
c0:2f:26:3f:5d:1e:94:60:11:d7:71:b1:a3:b8:83:85:2d:98:
21:b0:f1:b3:1a:16:8f:33:b1:a0:1e:8c:8b:b3:56:b4:fb:22:
19:44:20:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:57:28 2025 by rpki-client