Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/EMcGKPchX_ouw73-RZaG9Fy-5S4.cer
File: EMcGKPchX_ouw73-RZaG9Fy-5S4.cer (raw, json)
Hash identifier: TmMZE0+H7ZyPNS+kG8dTqNgct16G0R89N8BYIqsH0ew=
Subject key identifier: 10:C7:06:28:F7:21:5F:FA:2E:C3:BD:FE:45:96:86:F4:5C:BE:E5:2E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2F3D
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F365C895/056264AE85DD11E9B4EDE70BF8AEA228/EMcGKPchX_ouw73-RZaG9Fy-5S4.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F365C895/056264AE85DD11E9B4EDE70BF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 02:18:14 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328174
IP: 102.165.188.0/24
IP: 2001:43f8:1070::/48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12093 (0x2f3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 02:18:14 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F365C895AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9a:e9:c5:e4:97:03:51:4b:d8:5c:22:06:a0:
30:9d:c0:89:a1:20:5e:02:f8:15:fb:da:bf:da:39:
90:5f:f4:56:0e:50:e1:7b:4d:27:e0:23:b8:cb:48:
f2:05:f2:d5:67:b0:09:de:4c:b5:11:89:52:1c:70:
b0:1e:d0:3f:ec:8d:96:b4:e8:ce:aa:ba:41:9d:02:
30:73:ab:8e:75:21:fd:a9:2d:42:21:33:7d:72:b2:
7d:81:7e:5b:b8:5d:22:4d:3a:12:65:86:29:80:8b:
68:6e:05:3a:89:1e:e6:a9:85:55:04:a7:00:61:27:
01:01:e0:d9:9f:5e:37:f0:48:73:cd:8d:1d:81:40:
29:26:85:2e:54:ce:9c:81:0d:35:23:1a:95:ad:1b:
76:dd:e8:f0:43:0e:55:70:40:7f:4e:83:29:a7:1b:
72:60:98:dd:dd:7b:98:68:30:0e:b9:44:41:90:ac:
0e:21:b2:8f:b4:23:a1:9e:32:b0:75:a3:07:91:5e:
04:01:71:a8:3f:a6:20:f5:8e:74:56:68:bd:2a:ba:
71:f1:c3:29:ee:c4:0e:b2:31:e1:46:52:fe:59:d5:
17:5f:28:82:df:f9:60:f5:28:ec:a6:49:97:ca:cf:
72:97:ab:88:fd:86:d0:eb:02:35:c4:83:a4:2c:7e:
b0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C7:06:28:F7:21:5F:FA:2E:C3:BD:FE:45:96:86:F4:5C:BE:E5:2E
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C895/056264AE85DD11E9B4EDE70BF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C895/056264AE85DD11E9B4EDE70BF8AEA228/EMcGKPchX_ouw73-RZaG9Fy-5S4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328174
sbgp-ipAddrBlock: critical
IPv4:
102.165.188.0/24
IPv6:
2001:43f8:1070::/48
Signature Algorithm: sha256WithRSAEncryption
98:53:42:cf:5a:e6:59:46:96:aa:c5:33:39:d6:96:19:ab:81:
c3:50:87:fa:a4:d4:39:4e:6e:9e:13:28:04:15:75:18:52:44:
0c:36:4a:10:e1:8c:89:38:92:7d:0f:34:55:76:6c:40:53:bb:
75:47:8a:5b:23:c8:e3:20:3f:bc:d0:ce:ba:e4:89:00:63:9e:
bc:12:51:24:5a:5a:af:25:60:e4:e1:91:3c:5f:5b:36:b3:6c:
3b:80:6a:a7:50:cf:75:50:a5:17:af:67:dd:50:95:58:cf:ea:
8c:3f:15:65:b3:8c:d1:88:1f:21:2e:cc:27:ac:ee:89:e3:fd:
98:0c:74:48:cd:f3:63:15:22:17:5e:17:cf:5f:35:5f:e5:cd:
94:2d:66:8e:11:51:a8:0d:41:14:b4:14:d0:56:43:45:92:63:
0f:72:c0:10:e2:3e:11:ea:d6:d5:65:87:7c:74:98:a9:62:2c:
e4:69:ee:54:38:80:10:c0:f3:9a:ab:81:49:6f:15:4e:be:c3:
5e:70:5d:bc:94:27:ec:1f:d2:48:6e:94:e3:97:c3:dd:31:44:
98:4f:7b:31:ed:59:8f:20:86:c2:6e:d7:0c:fc:7a:3e:f5:c5:
b9:e4:aa:d8:15:38:59:bb:f4:06:f3:3e:eb:0d:34:40:0c:81:
57:9b:60:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:34:29 2025 by rpki-client