Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ADC3ppFCyYxGFBU3Pf8w4gfJHaU.cer
File: ADC3ppFCyYxGFBU3Pf8w4gfJHaU.cer (raw, json)
Hash identifier: nFQZ8SzaG5BMDpKjLITa4Vumi4yPqOlTwtbiXHAmrMM=
Subject key identifier: 00:30:B7:A6:91:42:C9:8C:46:14:15:37:3D:FF:30:E2:07:C9:1D:A5
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2F84
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36924C7/C6A8CFA6085811EA914C3E80F8AEA228/ADC3ppFCyYxGFBU3Pf8w4gfJHaU.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36924C7/C6A8CFA6085811EA914C3E80F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 02:32:35 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328521
IP: 102.36.196.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12164 (0x2f84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 02:32:35 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36924C7AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:e8:24:da:64:dc:9d:f0:63:c4:b4:c5:a5:
a1:4a:77:2d:b7:06:8a:c2:11:ee:19:dc:21:56:74:
a6:54:a0:d4:a6:c8:a1:18:62:5e:e2:c2:7d:c4:ea:
f5:a3:45:73:50:23:5d:64:96:30:ac:52:25:c5:6e:
a9:d7:99:62:ea:5a:84:fa:ea:06:8a:56:28:f4:b9:
00:7a:35:dd:83:dc:11:23:2f:17:2f:58:4e:a1:f0:
d0:4f:d3:56:ea:32:ca:83:39:6e:06:77:2d:6e:d0:
16:54:b9:6d:39:2e:7a:fc:1e:de:15:45:87:8a:cd:
d5:ff:c0:22:b9:89:da:27:c7:9a:bf:26:d1:13:70:
42:bc:01:f2:79:28:fb:ea:f3:c9:6f:fe:eb:81:e0:
90:d6:30:ef:07:8d:09:69:f4:4b:8a:3c:66:9c:0a:
3a:27:37:91:97:7a:1a:51:c3:35:53:1f:fc:96:89:
66:62:5c:26:92:15:c7:70:23:83:9c:da:e3:79:3c:
c4:67:da:51:23:c3:c6:ef:d2:36:a5:14:10:1a:f1:
69:67:5a:85:0b:1b:9d:51:de:1a:c7:ef:16:50:0b:
ea:90:67:43:2e:b4:f1:3b:c6:94:f4:dc:22:0b:99:
fe:38:00:99:17:0b:f3:ce:d1:73:86:8e:60:e6:68:
e1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:30:B7:A6:91:42:C9:8C:46:14:15:37:3D:FF:30:E2:07:C9:1D:A5
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36924C7/C6A8CFA6085811EA914C3E80F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36924C7/C6A8CFA6085811EA914C3E80F8AEA228/ADC3ppFCyYxGFBU3Pf8w4gfJHaU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328521
sbgp-ipAddrBlock: critical
IPv4:
102.36.196.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:1a:56:8a:32:be:ce:6a:1c:0a:96:d7:c1:1b:06:cc:2c:a9:
6f:18:b3:74:c4:b5:8a:88:e3:63:52:fd:fc:b1:40:88:15:2b:
cb:02:f3:87:37:a0:2a:0a:02:aa:fc:49:fc:2b:96:f9:96:0c:
b3:9e:d6:1b:c2:f6:7a:ab:c3:2a:ba:5d:d2:96:ea:cc:b9:40:
35:7f:d7:0b:10:4c:f9:8f:8e:57:39:c2:69:d6:15:ce:c5:5a:
2e:b9:ab:0c:b2:78:83:80:88:1c:76:91:07:f7:f4:52:67:67:
ea:82:a3:e7:b8:19:77:bc:0a:ee:f0:69:14:19:2a:4a:8c:19:
35:22:5e:4d:d5:e2:0d:a0:49:f6:3a:5e:f1:b6:2f:8b:30:c3:
21:87:cb:4f:d6:88:fd:57:e7:d1:fc:af:ac:f7:33:6a:84:6b:
7c:22:80:a1:1c:66:37:e4:54:01:6c:c3:2e:24:4f:4c:17:81:
ee:cd:0c:59:1d:cc:11:a9:75:32:02:90:5c:10:d9:53:88:b3:
7d:c1:7b:66:7b:a0:cc:b4:d4:16:d9:8d:1d:36:af:0f:be:d8:
5e:00:58:72:d7:34:61:6a:04:e8:eb:a8:3b:fd:61:12:ce:5a:
89:53:2f:03:1f:3f:07:e1:e4:95:32:08:73:dd:b8:9d:66:cb:
a4:88:a3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:45:49 2025 by rpki-client