Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/8CO5dwgZb_nyC8kofVbELKrlFA8.cer
File: 8CO5dwgZb_nyC8kofVbELKrlFA8.cer (raw, json)
Hash identifier: eVRPpzrhrEVHN0PLenhHP2bFZhGfMqnvbDyPtQvSfMw=
Subject key identifier: F0:23:B9:77:08:19:6F:F9:F2:0B:C9:28:7D:56:C4:2C:AA:E5:14:0F
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3270
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:08:40 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328169
IP: 102.214.160.0/22
IP: 2c0f:1580::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12912 (0x3270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 05:08:40 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36C11E4AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:40:ed:8d:e4:b3:23:42:2b:77:e5:0b:b2:1e:
13:9d:dd:76:45:13:fd:c2:65:8f:b1:08:51:83:87:
9e:14:a5:60:63:d8:25:e5:a1:37:42:e0:0b:30:b0:
8c:ad:e4:21:fd:24:b2:94:54:fc:bb:9e:f4:f5:ba:
86:42:82:ef:0f:37:27:db:fd:e3:82:65:d4:a7:4c:
7f:15:99:77:6c:89:98:8a:e9:90:1f:66:ff:dd:1e:
5f:48:dd:df:01:d9:8f:e8:20:1e:55:a4:b9:d0:85:
1f:75:fa:08:1f:c2:e6:cd:e1:65:0b:31:b1:83:f4:
cf:e4:9d:22:c8:f3:b4:ff:3b:36:0c:5f:71:8b:3d:
bc:97:07:be:49:de:51:6d:58:c7:86:b9:21:b9:44:
cf:6e:ff:78:d2:87:da:6f:fb:7b:34:45:da:52:2b:
90:c3:62:f5:14:3b:98:c0:47:b2:93:0e:f8:e0:a5:
fa:05:57:1f:f1:31:97:59:db:58:86:5b:a6:18:43:
0b:7f:7e:a7:9f:24:cc:00:e3:56:59:d5:51:05:0c:
13:8f:aa:c3:2f:1c:7a:9b:3d:1d:55:00:b0:65:a7:
db:a5:43:a3:87:d6:99:ca:8e:90:12:88:ee:59:a5:
b7:50:0f:c7:eb:cf:b8:c6:10:5c:4c:59:9d:53:b4:
c9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:23:B9:77:08:19:6F:F9:F2:0B:C9:28:7D:56:C4:2C:AA:E5:14:0F
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328169
sbgp-ipAddrBlock: critical
IPv4:
102.214.160.0/22
IPv6:
2c0f:1580::/32
Signature Algorithm: sha256WithRSAEncryption
7b:b9:aa:6f:8c:46:3a:f7:6d:cd:5e:fd:e4:9a:cf:a5:38:87:
48:b4:93:d8:3b:91:a7:53:93:1a:9d:bc:ac:f9:50:cc:ca:eb:
d9:f6:0e:a0:08:ba:48:4a:2b:ad:80:53:2b:e9:b5:1b:19:bd:
9e:45:87:13:b0:b9:a1:f6:6d:d2:85:5c:6b:dc:48:a1:9c:64:
93:0b:3e:b0:21:7b:2d:d7:20:53:4b:cd:10:c0:ee:07:53:ee:
3c:6f:b4:04:cd:fb:9f:67:4b:87:4c:44:5e:d4:98:2e:13:92:
91:68:7f:66:46:d9:62:0b:83:81:41:35:cf:d0:02:83:91:72:
37:00:aa:ef:7b:06:68:fe:b4:25:52:c3:f6:cb:24:3c:8a:a6:
0b:74:c2:aa:62:5b:b3:3c:a6:b1:d4:22:25:1d:43:69:c8:d6:
88:f0:38:db:68:28:c0:17:11:30:81:a0:44:49:2c:3e:4b:22:
2b:8d:7a:88:f0:39:d4:c7:96:99:55:2d:7e:88:ed:ea:ab:8d:
69:85:6c:c8:c1:d1:88:c1:3b:d0:14:20:35:72:8c:3b:e9:6b:
45:36:ce:eb:e5:56:2d:fa:29:51:96:ea:ee:58:4f:36:05:25:
e4:56:d4:49:de:2f:62:8c:a4:6b:33:ed:45:d6:0b:6f:d1:8a:
40:4a:64:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:45:48 2025 by rpki-client