Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/DwVtu0sgGDx0BK0862l8lsYuvIE.cer
File: DwVtu0sgGDx0BK0862l8lsYuvIE.cer (raw, json)
Hash identifier: rrZ1oF5YXr13Pm5uQPL9eYAp52Of/tJyWeM48hjjHtY=
Subject key identifier: 0F:05:6D:BB:4B:20:18:3C:74:04:AD:3C:EB:69:7C:96:C6:2E:BC:81
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2F58
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F144C/7C12AB22D2E511E98E28C968F8AEA228/DwVtu0sgGDx0BK0862l8lsYuvIE.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F144C/7C12AB22D2E511E98E28C968F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 02:23:41 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328209
IP: 2001:43f8:d20::/44
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12120 (0x2f58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 02:23:41 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36F144CAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:a4:8b:7b:4b:25:40:34:a8:ea:de:57:a9:
81:e5:63:b6:ff:5f:1e:0b:37:48:a8:bf:bc:f5:79:
b4:e5:d3:0f:3d:8c:a6:d8:fc:fa:fc:b5:53:dc:0e:
e3:50:9c:f2:7b:0f:4f:07:85:b9:58:db:26:be:bc:
14:cd:d9:1d:63:b9:a7:a2:56:e9:36:be:26:a7:5d:
34:63:f3:e5:48:49:ab:d6:45:ea:73:72:5b:a5:a6:
18:87:9f:43:d5:c0:9c:b1:30:e4:dc:fc:ec:bb:e5:
6e:1a:4e:75:71:ab:73:5c:4d:e5:c9:63:a9:86:c6:
5e:78:76:9f:70:e0:b5:ae:1d:d5:52:d5:27:4e:94:
66:59:7f:e3:f9:b4:62:d7:9a:25:2b:4d:35:a3:10:
11:a6:1a:73:c3:83:f2:70:e7:e3:de:5b:c1:6d:05:
8b:25:8d:4b:50:77:5e:73:c6:f1:1f:66:ed:7e:73:
2e:e5:be:3a:25:0e:75:da:96:44:0b:24:0d:20:24:
25:6c:b3:a4:8b:04:d0:ca:9b:0e:ad:fc:01:0f:34:
09:fe:34:ee:30:79:9a:48:21:c3:c8:9d:a9:0f:cd:
af:4e:b5:42:ad:46:59:5e:2d:c7:31:e4:32:87:ed:
7f:fd:19:6b:da:9f:c3:9c:2f:9b:32:26:f0:47:16:
81:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:05:6D:BB:4B:20:18:3C:74:04:AD:3C:EB:69:7C:96:C6:2E:BC:81
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F144C/7C12AB22D2E511E98E28C968F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F144C/7C12AB22D2E511E98E28C968F8AEA228/DwVtu0sgGDx0BK0862l8lsYuvIE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328209
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:d20::/44
Signature Algorithm: sha256WithRSAEncryption
80:46:4f:93:3f:64:cd:4b:48:28:95:da:dd:7e:52:cb:2f:ce:
43:de:71:d7:ef:05:0e:1f:f2:47:bd:58:78:5a:c7:8a:ae:c0:
16:59:f2:6c:ee:c7:14:9a:fc:17:13:5e:be:df:30:17:a6:db:
83:84:26:c0:9c:ae:b4:bb:7b:53:fd:ff:c0:49:cc:00:fd:81:
b4:07:a6:59:ca:d0:26:f4:e7:a0:44:de:cc:96:41:e2:d9:64:
97:98:58:82:a9:b3:c5:a2:6b:f1:39:55:6f:6c:90:26:b5:5f:
e6:c5:39:1e:97:e6:00:79:3a:af:ce:2c:ec:ab:03:fa:7f:cd:
3f:b6:a0:b2:79:4f:a1:4f:88:c5:c2:38:35:67:ce:ff:77:cf:
30:20:cd:67:96:8d:f3:84:95:31:d1:2a:d4:3a:2e:6d:df:3a:
e2:60:0e:16:8b:05:77:36:79:6d:4e:85:4d:ff:78:a8:a3:ca:
2d:9d:9c:c1:eb:25:c8:43:ed:cb:76:8b:0c:33:11:08:eb:2b:
4b:ec:d1:ac:7d:97:73:6d:7e:6e:83:8e:11:b7:bc:5b:87:06:
15:b1:c7:21:03:7c:9c:d5:9c:e8:65:24:26:2a:77:d3:70:db:
73:5e:32:77:01:c2:0a:29:33:17:8f:67:cc:1e:5c:ed:08:8d:
76:1f:5e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:53:20 2025 by rpki-client