Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/FJvWukypr0s2P6bjEnf8i8_TEW8.cer
File: FJvWukypr0s2P6bjEnf8i8_TEW8.cer (raw, json)
Hash identifier: tfeZYQLmndczd8GcOm7dFbL7ZMifBE5SEvXrhaJrJd4=
Subject key identifier: 14:9B:D6:BA:4C:A9:AF:4B:36:3F:A6:E3:12:77:FC:8B:CF:D3:11:6F
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2D45
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:33:04 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 102.211.176.0/22
IP: 102.220.216.0/22
IP: 2c0f:1d00::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11589 (0x2d45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:33:04 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3623C86AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:57:ba:72:c4:09:25:e6:6a:d4:2f:98:d0:f0:
6a:39:f2:c6:c3:1a:45:7d:cc:95:17:dd:c7:65:99:
05:c8:11:c9:30:26:b8:b0:12:da:22:92:e6:1e:86:
3c:3b:50:3f:3c:6f:7c:13:10:63:61:61:54:26:e8:
44:a1:dc:5a:70:b3:e0:9e:16:18:82:83:4c:2f:4d:
66:1e:da:5c:bb:40:1c:0a:6d:ed:2d:bf:f1:2b:1e:
7c:cc:3b:db:11:a0:18:46:7a:ea:dd:bb:6b:df:25:
de:61:2f:df:e7:02:66:71:e3:df:cb:47:89:dc:31:
96:6e:97:c1:6e:f7:d0:7b:f1:12:0c:de:d2:21:2a:
a7:11:8a:b1:2a:58:e1:b7:e3:f3:eb:cb:69:58:57:
d6:95:89:84:8f:05:c4:c5:82:6f:ea:d1:ad:8f:12:
0b:52:db:31:4a:b9:83:40:20:9c:f6:56:d0:e3:42:
38:2a:e4:97:1a:50:80:fc:47:5d:96:4d:a8:83:0d:
0f:52:f4:59:38:4b:dc:41:50:d5:dc:19:b0:d0:6e:
4e:b9:36:15:9b:3f:7f:38:8a:27:55:c6:ea:9c:39:
e1:07:93:2b:53:d3:33:da:f3:91:0d:b2:fc:b0:e6:
b0:6c:39:48:4d:cf:80:41:10:b8:d9:df:23:6e:0b:
83:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9B:D6:BA:4C:A9:AF:4B:36:3F:A6:E3:12:77:FC:8B:CF:D3:11:6F
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.mft
sbgp-ipAddrBlock: critical
IPv4:
102.211.176.0/22
102.220.216.0/22
IPv6:
2c0f:1d00::/32
Signature Algorithm: sha256WithRSAEncryption
91:20:11:44:99:0c:df:74:56:b5:b0:3f:6d:0f:68:4c:b8:17:
3c:df:ad:c4:7a:85:07:87:95:e5:ac:f3:cb:37:a7:25:a6:c6:
4e:fe:98:8a:f4:fe:17:83:87:96:5f:63:04:2f:7c:08:12:2e:
3d:bf:21:48:4b:97:18:f4:4e:16:0d:41:92:8a:8a:18:65:a9:
a1:5c:0a:16:87:0e:60:66:49:a2:51:30:3b:49:81:44:1e:e9:
07:85:96:2f:06:2f:fd:91:83:61:51:63:e6:f6:7a:4c:0a:97:
43:a4:d3:72:c0:fd:d3:a2:63:e6:d7:a2:75:c8:4d:56:bb:bc:
3d:7d:a0:0c:36:f5:13:e8:28:1b:24:9f:59:1e:26:aa:69:92:
df:ad:93:26:0a:b7:f2:37:5c:59:03:06:91:b2:16:2d:b9:99:
89:de:f6:6c:26:54:f3:a6:7b:b9:ff:d4:27:44:8f:6f:76:d4:
c2:5d:6a:ad:a6:cb:3e:a6:53:12:f5:e9:52:9e:f8:85:6c:30:
49:a2:79:8c:52:74:0e:68:d1:cc:5b:52:c8:8f:c0:7b:dc:95:
8d:e5:95:90:22:16:47:ec:73:b2:a5:1d:b5:17:aa:1d:40:ab:
a9:c8:78:f3:5c:1b:c0:6f:4d:5a:2a:36:47:41:e1:7f:2f:8c:
eb:7e:6e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:35:30 2025 by rpki-client