Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/B0rky8vOb02Yhv7yEVKxOmrac9Y.cer
File: B0rky8vOb02Yhv7yEVKxOmrac9Y.cer (raw, json)
Hash identifier: NsXd/32nOrzKEe7nfpn8IaGtEdwMLDy0Nf+KuCk3654=
Subject key identifier: 07:4A:E4:CB:CB:CE:6F:4D:98:86:FE:F2:11:52:B1:3A:6A:DA:73:D6
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2F1C
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 02:11:41 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37511
AS: 327777
AS: 328013
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12060 (0x2f1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 02:11:41 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3659F9CAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c4:25:fe:60:ff:de:f0:9e:3b:e3:b2:b2:6a:
84:1f:f8:39:4a:b5:57:30:d7:d5:0d:de:cf:79:ba:
03:f1:df:96:c2:9c:63:ee:74:2c:17:c6:bd:12:53:
1e:1d:03:23:df:59:f5:4b:ca:8e:5e:68:0d:0f:64:
ea:82:bf:3a:58:26:aa:32:46:b2:fe:c9:71:3f:55:
58:a3:5a:a2:ac:a7:ef:9a:05:ef:dd:e2:1e:4d:a5:
25:07:b0:b8:a7:80:12:ae:6a:72:c9:53:8d:67:e4:
cb:b0:11:ea:9f:c4:ea:23:c7:98:cc:26:5b:64:ef:
12:a1:17:59:17:86:ca:32:bb:ab:e5:fc:5c:78:5c:
7a:0a:a5:0d:83:54:36:b5:0a:5e:48:ec:39:dd:0a:
26:74:e7:46:1f:66:2c:d2:85:25:1d:42:2a:80:c6:
04:75:6f:73:d2:fc:5b:f0:f7:14:1b:26:3c:f0:fd:
a5:2c:8a:5f:12:b2:00:a3:6b:c6:17:78:42:01:95:
99:90:38:a1:5b:4f:68:ed:62:69:44:85:46:b8:69:
ee:83:81:f1:2c:63:f0:30:92:44:f9:3a:89:44:18:
dd:1c:22:e8:e8:6e:58:fb:34:35:50:56:fa:5f:44:
4d:a2:d5:e7:b5:df:03:91:b6:b8:e1:1e:b8:f4:f8:
c8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4A:E4:CB:CB:CE:6F:4D:98:86:FE:F2:11:52:B1:3A:6A:DA:73:D6
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37511
327777
328013
Signature Algorithm: sha256WithRSAEncryption
77:1e:24:96:a4:85:e7:02:e4:a9:ab:ab:7b:3a:57:79:fc:f6:
4a:b6:f6:92:6b:9a:bb:6d:bf:5c:a7:e8:8a:b6:13:44:13:86:
1e:b5:8b:b2:20:57:b1:7f:54:2a:be:13:bc:f8:54:b7:ee:ed:
5e:ae:7f:b1:71:d7:d2:45:25:25:1d:c2:d5:58:5c:53:29:0e:
f9:90:3d:ba:6f:ff:1b:30:ab:cf:c4:dc:37:e0:cd:ee:ec:ea:
0f:b4:eb:fd:b1:54:64:29:74:01:21:a3:4e:48:d4:a6:7e:c9:
02:c1:c1:98:88:3c:8b:40:6e:df:d4:75:24:1b:22:d2:bd:cb:
f8:df:82:3e:9d:f5:96:13:b2:fa:e9:4d:8d:89:bc:a8:79:ac:
b1:51:36:bb:91:98:54:55:0d:22:cc:a5:eb:00:6b:fe:64:58:
b5:40:81:87:d3:7b:2e:f1:a7:38:a8:e2:64:11:23:4b:8b:e5:
2c:40:c9:81:84:02:fd:03:c9:57:0a:95:01:95:a5:36:a9:dd:
c6:e1:4a:c7:b2:07:09:50:e0:90:49:97:96:ea:9d:0e:96:94:
93:2c:8c:33:19:0e:55:07:fa:91:54:59:e4:2c:0b:84:fe:ef:
a7:e1:2d:d2:f5:16:c0:d5:9d:1e:41:fd:78:dc:4b:34:bc:16:
8e:20:9a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:47:02 2025 by rpki-client