
Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.cer
File: Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.cer (raw, json)
Hash identifier: A6l16A9iLvHIwjeFIyEkWknIfLHbSmEMlW97DN9Q3s4=
Subject key identifier: 13:1D:DE:4F:00:37:9C:F4:F1:43:D5:D0:0E:13:7D:69:7A:0E:B7:83
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2CE9
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:11:12 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 36914
IP: 41.89.0.0/16
IP: 41.204.160.0/19
IP: 197.136.0.0/14
IP: 2c0f:fe08::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11497 (0x2ce9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:11:12 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3615A34AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bc:d4:e9:ef:45:59:66:84:45:5c:f2:0d:66:
dc:6a:5f:0f:a2:5f:97:44:45:82:8f:ef:13:f5:bb:
ad:84:2d:38:ba:79:08:86:6f:9f:53:c8:0d:1f:aa:
62:84:1c:48:da:62:28:19:bd:f6:c1:6b:15:1c:71:
bf:a5:2f:2b:25:18:a1:f5:da:74:de:4b:50:aa:ad:
89:25:97:cb:90:86:cb:e8:83:76:75:21:ed:c2:ff:
34:5a:43:7b:8d:c5:a5:9c:78:57:94:a1:a1:da:be:
58:de:79:93:df:a0:87:52:cb:79:74:b6:d6:3f:47:
2e:4e:56:7a:b0:9f:13:f5:66:cd:e6:bd:ae:7c:55:
cb:ea:ce:ce:4a:2b:a5:7f:c2:69:29:4e:f3:f6:6f:
34:98:f9:38:14:b9:0f:84:7d:31:59:e0:16:fd:89:
d4:e2:32:6b:3e:02:e9:51:ce:3c:15:42:90:bf:dc:
18:a7:a5:17:1b:d1:f4:cc:a3:e6:e1:8c:24:91:51:
11:c0:23:a8:77:f7:72:36:3d:aa:8d:37:e1:b2:17:
e8:2e:9f:ae:16:56:46:ca:d4:0a:b4:65:f4:36:ef:
4d:ad:44:70:c2:0f:a3:0b:74:01:c2:fe:a7:2a:fa:
35:6e:9d:f0:eb:4a:e9:4e:e1:96:63:83:9e:b0:08:
fe:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1D:DE:4F:00:37:9C:F4:F1:43:D5:D0:0E:13:7D:69:7A:0E:B7:83
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
36914
sbgp-ipAddrBlock: critical
IPv4:
41.89.0.0/16
41.204.160.0/19
197.136.0.0/14
IPv6:
2c0f:fe08::/32
Signature Algorithm: sha256WithRSAEncryption
80:50:a3:17:2b:1f:a9:13:33:e1:31:0e:dd:dc:31:9d:a2:26:
ff:95:16:2c:28:91:f3:b4:c1:d6:97:de:34:67:9d:4d:d7:2f:
78:0e:96:93:cc:a4:69:1d:00:cd:f7:1d:5b:8f:49:b1:83:b2:
4c:70:56:4b:5c:90:05:79:41:03:f1:3b:2f:dc:81:2b:f1:46:
57:bf:7c:5f:da:63:40:72:e5:01:d4:0b:d0:2b:04:da:11:ab:
8e:9b:d7:cc:b5:10:48:b2:2f:d7:88:84:7d:66:b9:46:8d:ef:
e8:cc:96:db:b9:61:f7:05:15:5d:d3:8f:81:c9:8a:e9:1f:50:
cb:d4:8c:8c:98:8b:c2:1f:02:1c:e8:52:dd:3c:be:8b:33:b9:
3d:8d:36:4b:4e:ff:b5:ec:2b:19:25:1f:12:21:5b:a8:29:21:
e0:58:d5:c1:1e:73:e4:38:8a:d8:b6:01:6b:36:45:7f:07:04:
46:2c:7c:be:ea:4f:0e:23:b0:43:ff:1a:99:3b:f6:82:0f:7c:
d0:d7:a8:40:b2:ea:c3:fd:48:24:ec:e2:91:ba:27:5c:97:0a:
12:23:b3:ce:fc:a1:90:2f:6f:5b:19:ba:53:32:7b:cc:6e:3b:
b4:02:fd:87:54:d3:e7:45:c5:cc:13:7f:f8:d7:ca:db:6f:63:
c7:22:e4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:54:22 2025 by rpki-client