Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
File: CbNOEzY507TuNRYTuKYNaxkCrWM.cer (raw, json)
Hash identifier: o+qZrkJgH+gJnP/sXS021654z0fbyMWxS7GyKxUEjjY=
Subject key identifier: 09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3113
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:54:01 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328586
IP: 102.22.232.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12563 (0x3113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 03:54:01 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3693AE0AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2f:2d:d2:9b:ab:e3:e7:1c:25:aa:c5:df:13:
35:02:17:05:8a:4b:2b:ad:68:83:6e:4c:b4:d4:41:
05:c7:ba:e9:99:91:86:4d:3d:5f:0f:38:bf:33:c8:
f6:8f:5c:aa:53:fa:c4:ff:51:15:4c:cd:a7:62:87:
fa:f9:22:a5:57:a0:bc:2b:73:4c:ba:27:93:6f:5d:
6f:5a:b1:42:15:e0:9c:c9:24:4c:e6:76:f7:ae:cb:
96:c0:f0:5e:ae:c0:ef:b7:4e:f5:a4:2b:a0:f1:f2:
35:81:02:08:0c:ce:d5:ba:19:6c:52:bf:d9:a8:3a:
e5:8b:64:08:4b:b3:eb:28:51:9d:43:d2:ec:43:12:
39:9c:1e:96:6d:8c:ac:4d:df:1e:be:82:83:28:2a:
99:48:34:97:a3:f4:0b:3e:76:a4:b9:0d:ed:2f:db:
a5:93:1b:80:68:1c:37:5b:64:13:06:2b:e1:2c:10:
4d:d4:16:2e:ad:c2:a3:d5:ed:50:fb:7f:1d:79:e9:
5f:fd:67:f7:31:eb:09:b5:a1:84:10:d5:49:f5:31:
41:6d:9b:df:bc:94:53:64:41:eb:79:1a:7f:56:0e:
d7:69:76:aa:bd:db:ad:82:34:f6:65:1d:8a:63:93:
e8:66:5f:07:e2:35:31:3a:7c:e6:6c:46:77:b7:86:
06:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328586
sbgp-ipAddrBlock: critical
IPv4:
102.22.232.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:61:27:84:c1:8d:9e:44:16:8f:fc:82:ca:2a:eb:a2:0e:0f:
00:9e:9c:58:6e:42:46:96:a6:20:27:12:9a:44:0c:90:7f:ef:
a6:bb:95:37:c1:16:af:67:51:de:e8:bd:44:fd:1c:03:e2:fd:
36:22:f9:17:42:2a:00:56:93:f6:32:75:07:09:be:bb:ca:d6:
23:f7:24:a7:2e:b9:90:e8:e8:da:20:db:6d:21:2a:9f:87:25:
0e:dc:69:72:28:ed:88:b3:42:bc:19:1d:4f:62:dc:1f:8f:a2:
68:92:56:02:c9:23:3a:96:62:aa:d3:88:dc:97:cd:11:af:f9:
00:9f:71:28:13:ea:29:39:d4:57:f6:af:57:f4:33:f4:2a:09:
1e:d9:12:ca:2b:cf:4e:66:9e:df:92:1c:12:65:a9:ab:1e:aa:
8a:e9:b1:d5:51:84:15:68:02:82:4c:78:9a:b0:27:32:17:3b:
9b:60:70:2a:28:84:50:04:3e:7f:9b:3c:f8:ab:15:63:03:89:
4f:2f:47:c2:c5:d3:47:1d:48:ee:a3:1e:5a:b3:13:40:73:7b:
bd:41:75:81:ee:9b:a8:32:45:99:7f:44:2a:e1:86:59:c4:cd:
15:e3:29:2a:a9:47:c6:a9:6f:4c:c6:32:17:a3:db:1b:66:05:
75:62:fd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:44:56 2025 by rpki-client