Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.cer
File: EeI-iyyLw5z6J1GYIBdqyzQ9yEY.cer (raw, json)
Hash identifier: 8Cvp291zjIhB1oWfacssIMbatwXb4xRcCJoiMtyLzEQ=
Subject key identifier: 11:E2:3E:8B:2C:8B:C3:9C:FA:27:51:98:20:17:6A:CB:34:3D:C8:46
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3108
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3692425/1F2C5EA2081F11EF8401B10E017001B1/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3692425/1F2C5EA2081F11EF8401B10E017001B1/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:51:44 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328492
IP: 102.68.143.0/24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12552 (0x3108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 03:51:44 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3692425AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:87:b6:5a:d2:1b:61:27:17:83:41:7f:a6:fd:
ef:99:cb:d5:10:d6:5a:db:b6:48:d9:e3:0d:37:ce:
e3:1b:1a:36:28:ad:f1:47:38:35:ae:f1:d1:c1:49:
ab:68:56:40:21:e0:ba:d8:a0:52:74:6b:4b:6b:f8:
ca:74:e4:60:6f:46:67:09:d8:19:e9:0f:b1:86:2b:
72:28:35:20:44:e6:21:37:b1:e2:20:6f:50:48:a2:
cc:06:17:83:3d:c5:7f:65:79:f4:8f:f3:22:07:15:
25:92:8a:48:6f:81:fb:78:50:6b:51:da:f0:db:ab:
18:ed:cd:0e:e2:32:83:57:9d:86:41:59:11:b3:b7:
93:88:62:a1:70:2b:9b:c0:d2:df:39:bf:d2:30:1c:
bf:04:3b:32:cd:fb:23:26:2e:c1:bb:15:0c:e2:f8:
28:72:9f:f6:51:ad:1d:ec:f0:ee:15:cd:07:cc:3d:
2b:de:fa:01:f2:96:81:67:85:57:91:98:34:35:22:
ab:a9:16:fc:6d:86:ff:58:2e:81:30:db:09:ee:24:
ba:8c:ae:3b:ae:8a:c1:4c:2b:be:42:31:93:8f:54:
75:bc:4d:9b:54:1c:2f:c4:74:fb:b0:6d:81:fe:8c:
e4:b0:9b:94:3e:90:26:97:0b:b4:05:97:a0:77:41:
42:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E2:3E:8B:2C:8B:C3:9C:FA:27:51:98:20:17:6A:CB:34:3D:C8:46
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692425/1F2C5EA2081F11EF8401B10E017001B1/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692425/1F2C5EA2081F11EF8401B10E017001B1/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328492
sbgp-ipAddrBlock: critical
IPv4:
102.68.143.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:c9:50:c1:de:7e:c7:a5:d0:9a:fb:fd:ba:91:a0:d5:8b:4d:
3a:25:4f:76:2c:f5:b5:0d:e8:bd:65:25:84:af:60:39:a7:29:
93:c2:ba:5c:bc:8f:13:12:b2:30:a2:5c:79:d6:c8:39:a7:69:
12:46:ff:9d:c9:69:c8:7a:52:0d:bd:06:fd:ad:11:94:43:d3:
a2:c6:b0:5d:0a:14:e1:43:f5:de:f3:03:4f:5e:e1:43:ef:65:
f1:83:89:2d:5f:f7:8e:2c:b8:c6:74:69:2f:f2:fb:ff:49:8d:
83:a6:a0:f4:f3:ba:53:41:82:94:da:b2:e1:4e:de:05:21:95:
69:e1:77:e2:29:18:fe:e0:63:46:e7:17:e1:23:b7:ef:9c:07:
d7:5c:0c:53:b1:b5:f4:8a:3d:1a:9e:90:3a:70:5b:df:55:3d:
b8:62:3f:84:e2:d2:6d:a8:1b:9c:bd:7b:3b:78:9c:a3:51:b7:
25:6c:63:ac:2a:31:51:0b:e7:70:60:bd:0d:c0:f3:b1:b2:6d:
2e:1e:d3:e0:5b:b7:e5:91:5a:60:c7:6b:4d:eb:bb:11:d1:42:
7c:6d:c2:5c:83:9e:a3:49:c8:94:84:eb:b7:cc:c4:b2:13:a7:
b4:34:4f:32:83:29:e7:0d:1c:f1:01:f4:54:cd:f7:9b:0a:a7:
73:e6:51:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:57:27 2025 by rpki-client