Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/B6SJ-Z5KU9gpK_PE0U46I483Y34.cer
File: B6SJ-Z5KU9gpK_PE0U46I483Y34.cer (raw, json)
Hash identifier: cxPs+Uavym+g/vRM/QyKhDZQ09TtveRmP5JsHUDohxM=
Subject key identifier: 07:A4:89:F9:9E:4A:53:D8:29:2B:F3:C4:D1:4E:3A:23:8F:37:63:7E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2D27
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F361E6A3/ACF48D3886B811E9BEC99C2BF8AEA228/B6SJ-Z5KU9gpK_PE0U46I483Y34.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F361E6A3/ACF48D3886B811E9BEC99C2BF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:25:54 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328339
IP: 102.134.72.0/22
IP: 2c0f:ef48::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11559 (0x2d27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:25:54 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F361E6A3AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e8:11:68:17:0d:0e:3e:d4:4d:d8:bf:b6:b1:
4b:b4:d5:ef:8b:ea:5c:21:9f:cf:b9:e3:c6:ed:2d:
28:55:d5:e0:bf:38:56:3c:66:5f:f3:72:16:5b:46:
4b:f6:63:1b:92:aa:46:22:3a:54:dd:d4:bd:39:b3:
a0:ab:d6:ed:e8:2b:ea:19:16:69:65:b3:00:15:4c:
0b:f2:d5:13:56:c6:69:54:a4:0d:15:79:e2:b5:ce:
4f:ed:1d:df:b3:cb:63:01:6c:4c:b9:03:9c:8b:b8:
f3:37:d6:1f:d2:c7:eb:dd:83:91:a0:3e:01:11:22:
b3:e4:6c:2f:99:fc:f7:9a:18:19:21:2d:95:79:dc:
3a:d2:5a:15:f3:a6:bc:39:18:e1:a9:89:52:46:a3:
d6:a7:44:df:0e:cf:b4:2f:71:0c:5b:5b:73:e5:f6:
c7:64:9a:8b:7f:44:e4:b7:f0:39:0e:8e:8a:9b:b5:
6e:79:e1:71:a2:85:19:ef:4c:fe:92:2b:09:e1:6b:
33:b6:d0:0a:db:f8:62:90:e5:4a:ef:36:65:1d:88:
d1:01:7c:cc:45:5b:88:7c:61:be:e7:85:6c:c3:d4:
13:75:1c:6d:c9:50:6b:14:7d:fd:e4:4a:7e:0e:89:
06:6e:1d:3b:ed:07:1a:a4:3c:20:3f:4f:d6:61:a5:
55:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A4:89:F9:9E:4A:53:D8:29:2B:F3:C4:D1:4E:3A:23:8F:37:63:7E
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F361E6A3/ACF48D3886B811E9BEC99C2BF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F361E6A3/ACF48D3886B811E9BEC99C2BF8AEA228/B6SJ-Z5KU9gpK_PE0U46I483Y34.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328339
sbgp-ipAddrBlock: critical
IPv4:
102.134.72.0/22
IPv6:
2c0f:ef48::/32
Signature Algorithm: sha256WithRSAEncryption
75:c1:0e:85:5d:36:3a:bc:cf:35:a3:86:40:53:18:c7:45:83:
78:70:21:6d:64:6f:4e:9e:7f:dc:05:3e:c9:03:f7:d7:54:f7:
c4:c0:29:d7:b6:46:e2:41:1c:81:3d:1e:e4:d7:bb:35:6b:8a:
c0:86:fd:fc:e5:a6:2e:57:ea:1c:f4:a8:0a:a0:de:14:37:b5:
41:ea:b5:6e:df:24:38:e4:ba:1e:bb:91:d4:fb:d5:6c:21:8a:
72:1f:dd:91:b0:60:e2:98:83:09:c5:1d:40:ad:79:0c:60:02:
36:8c:2e:27:de:a3:52:af:ee:76:29:15:81:04:9a:00:1c:34:
ba:8c:50:77:af:c8:16:0c:dd:0b:34:6f:0d:ae:e4:0e:eb:84:
95:6c:62:6b:3d:64:9c:e3:60:73:a0:d5:da:fd:be:bd:72:21:
11:d8:42:f9:3f:35:96:12:25:88:8f:ef:7f:3d:44:03:88:b1:
10:4c:1f:65:98:05:13:12:20:8a:cc:46:c8:17:0c:de:cb:5d:
3d:04:4a:41:93:24:8a:96:e9:71:9d:91:ca:e9:0e:a8:0c:20:
9e:0d:69:b5:b8:ff:28:40:73:e8:f3:e3:d8:9c:d0:8a:92:ef:
c8:09:0a:e7:82:f6:47:72:a7:ec:97:7f:41:76:f5:6d:53:9e:
e3:04:44:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:41:44 2025 by rpki-client