Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/8-JOWpt2_k0l0xdcOl98Kcb7BIg.cer
File: 8-JOWpt2_k0l0xdcOl98Kcb7BIg.cer (raw, json)
Hash identifier: nNI9S8l6isLVcClGRGRxmt2dBfL2O9E5JghxmPuJtdY=
Subject key identifier: F3:E2:4E:5A:9B:76:FE:4D:25:D3:17:5C:3A:5F:7C:29:C6:FB:04:88
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3120
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/8-JOWpt2_k0l0xdcOl98Kcb7BIg.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:56:44 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329211
IP: 102.212.236.0/22
IP: 2c0f:3980::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12576 (0x3120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 03:56:44 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36952BDAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:72:e9:46:5f:1d:a1:bf:68:6c:29:cb:c4:39:
e5:f3:6b:15:88:b8:dc:0a:3e:25:f1:9d:2a:8f:7e:
5c:d8:5e:65:0a:02:a6:04:72:0d:5c:f1:3e:2a:13:
d4:8f:63:b1:39:bc:1e:2c:85:a5:88:b4:a0:a7:6e:
3f:7d:07:8c:91:60:f7:64:8d:84:9f:f1:33:c9:aa:
9f:9f:71:12:6b:03:00:52:57:2b:45:2f:1d:ab:fc:
de:06:ea:a8:f5:98:9e:1f:21:51:4f:a7:ee:60:c2:
f5:69:4b:76:d0:d2:56:94:47:af:02:42:48:a7:fb:
59:14:d6:a6:9e:d7:40:65:ab:26:20:d7:45:b4:ea:
79:c8:24:4d:58:77:cb:c6:d8:74:57:9d:fe:3d:ae:
c2:84:a5:1a:8a:a0:a0:20:07:5c:9a:a4:47:96:3d:
cc:e3:97:eb:68:94:26:96:99:5a:30:c8:0e:29:53:
2d:79:69:91:2c:18:ed:5a:f1:da:e2:2e:c3:bf:b6:
06:07:46:4b:fc:d1:54:02:bd:35:70:96:64:f5:4d:
09:d3:91:16:bf:d6:9f:b8:ae:59:97:38:6e:c8:4e:
a8:05:55:27:ef:e9:ae:fb:df:1a:16:fd:5e:77:ac:
ac:94:74:33:5f:1b:f4:37:9b:9d:ac:c0:27:6d:42:
fa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E2:4E:5A:9B:76:FE:4D:25:D3:17:5C:3A:5F:7C:29:C6:FB:04:88
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/8-JOWpt2_k0l0xdcOl98Kcb7BIg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329211
sbgp-ipAddrBlock: critical
IPv4:
102.212.236.0/22
IPv6:
2c0f:3980::/32
Signature Algorithm: sha256WithRSAEncryption
7d:60:a8:77:ae:62:ca:37:bf:28:c8:e7:77:ae:18:a0:86:ab:
c3:be:93:e1:87:f5:79:bc:c7:22:c6:66:6a:69:28:3b:12:cc:
58:cd:97:73:fd:c4:16:a1:37:77:db:e4:79:c2:29:7e:00:54:
28:5f:18:1d:12:81:53:f2:1c:f0:e9:cf:17:8e:26:e0:59:ff:
45:8c:3e:9f:d4:1b:ea:08:71:56:a7:22:09:3e:9b:c9:87:25:
7f:5f:7f:ef:22:05:0e:a6:8f:ec:36:55:88:90:db:6c:a5:f8:
fc:35:5e:53:2f:f2:a1:e1:f1:a4:b1:02:67:f2:ed:42:65:6b:
9b:de:bb:48:e0:73:d2:c2:7c:8a:25:3a:54:7c:4d:98:85:58:
24:15:69:67:13:c0:4c:06:e7:90:1e:ab:1b:68:35:23:4f:bc:
15:aa:ae:1f:07:c0:10:d6:ac:65:ea:30:70:a0:4f:49:7c:ed:
64:6a:c2:10:b7:ce:e4:55:71:c5:9b:bc:36:1c:ff:b2:f3:35:
7e:17:ae:75:53:39:1d:74:4e:31:03:db:28:b4:2c:42:1d:a6:
70:ae:2f:0a:28:fa:5d:b9:91:6d:67:3f:2a:da:9d:01:92:9a:
33:0b:ea:92:cd:34:4f:e5:ed:aa:b0:aa:a7:10:88:44:69:12:
c2:e8:bd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:31:53 2025 by rpki-client