Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/7LPP-0CimvoX8H5dSzxCY0E2ukA.cer
File: 7LPP-0CimvoX8H5dSzxCY0E2ukA.cer (raw, json)
Hash identifier: OePIQ8UMDp2vKj5drScjG3MNba+hZBJ8gwEMkBbGX94=
Subject key identifier: EC:B3:CF:FB:40:A2:9A:FA:17:F0:7E:5D:4B:3C:42:63:41:36:BA:40
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2CD9
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3614C03/0053EC7406B311EA9DC20648F8AEA228/7LPP-0CimvoX8H5dSzxCY0E2ukA.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3614C03/0053EC7406B311EA9DC20648F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:07:21 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 21739
IP: 196.202.248.0/22
IP: 2c0f:980::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11481 (0x2cd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:07:21 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3614C03AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c8:cc:11:92:3a:2a:be:d8:dd:38:f3:ce:8d:
7f:50:25:bc:dc:99:0c:d2:b0:92:48:d6:33:fb:0c:
e1:a6:e0:ae:97:b5:1f:79:18:6c:e6:50:a1:e9:67:
5d:89:cd:73:9e:b4:94:28:08:94:1a:ad:93:33:3d:
c6:a4:8d:1e:2d:11:ea:8d:f7:98:e6:23:8a:1d:a1:
fe:22:2b:e8:04:03:58:82:e5:c0:da:57:51:9d:f7:
ea:67:f3:99:80:3b:4a:3e:77:a7:0b:79:1f:fd:ec:
4f:fb:f2:b5:62:9c:16:87:de:92:84:62:56:70:b1:
db:7f:4b:73:dd:57:ea:cb:5c:e1:0e:e2:b3:13:29:
80:39:9b:db:2b:7d:45:14:b6:35:f6:1a:ab:7c:a3:
72:cc:53:37:a7:87:0e:b6:03:3d:c5:e7:db:c1:dc:
6b:2d:4a:87:b0:0c:8b:95:bd:7f:9d:47:a8:15:b1:
89:43:90:0f:3d:f5:2c:79:dc:8f:a6:67:d0:0a:8a:
b7:21:01:91:27:e9:22:f2:93:a0:b2:68:d5:fe:c3:
56:e5:cd:09:ee:34:5c:75:0b:b8:34:2e:31:e8:af:
cc:8a:2b:85:40:6f:a5:63:d6:43:af:7d:1b:70:37:
56:34:8f:33:53:40:cb:14:8c:b4:a4:5f:45:18:0a:
05:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B3:CF:FB:40:A2:9A:FA:17:F0:7E:5D:4B:3C:42:63:41:36:BA:40
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614C03/0053EC7406B311EA9DC20648F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614C03/0053EC7406B311EA9DC20648F8AEA228/7LPP-0CimvoX8H5dSzxCY0E2ukA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21739
sbgp-ipAddrBlock: critical
IPv4:
196.202.248.0/22
IPv6:
2c0f:980::/32
Signature Algorithm: sha256WithRSAEncryption
38:2f:aa:96:37:e2:7f:62:63:15:bc:76:b7:e9:0b:a5:2a:f4:
71:fc:2d:6a:ef:9d:18:35:ec:e3:50:33:d1:4e:57:a3:74:d7:
63:60:c0:09:5b:60:53:1a:53:7c:ec:8f:dc:19:1a:2d:c2:af:
a1:b9:8f:f3:79:2f:4a:88:a7:67:93:7e:30:4f:3d:b4:b3:62:
f2:1a:27:cb:c7:f0:4d:8f:88:42:a1:13:d7:48:bf:1e:a4:de:
a9:69:85:83:3f:82:58:0b:b6:f6:23:67:61:38:22:bc:b8:e1:
91:37:d4:34:e1:e4:c4:e3:0e:9c:03:23:39:c5:d4:bb:bd:55:
11:3b:56:4c:ba:c6:45:9a:f4:ce:65:22:a7:87:d7:81:7b:e9:
04:bb:6b:e0:a4:eb:fe:40:d6:49:e2:54:74:24:83:d3:34:52:
57:07:55:9e:e6:e4:f5:fa:4b:e2:a6:3a:b8:7d:fa:98:cb:af:
a1:aa:62:5b:d9:c4:07:93:d1:bd:7a:94:3a:a4:ca:89:5a:51:
bc:b7:70:b1:e7:5a:34:2b:7c:85:00:3a:53:68:51:be:e0:4d:
9c:41:9d:e1:f7:d8:bf:96:b3:cd:ff:f8:8c:b3:1c:8c:53:92:
70:9e:bf:7a:d3:3d:73:67:f9:00:ea:95:68:16:4f:20:66:84:
ad:86:8d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:49:26 2025 by rpki-client