Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/G0qwtyDYObeamJIyOw-r7ZZwWqI.cer
File: G0qwtyDYObeamJIyOw-r7ZZwWqI.cer (raw, json)
Hash identifier: cQ6AspPJaLe8vgwiJVomeELI1az4eDwWL2PvZ6ESnRk=
Subject key identifier: 1B:4A:B0:B7:20:D8:39:B7:9A:98:92:32:3B:0F:AB:ED:96:70:5A:A2
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3012
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:01:05 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328334
IP: 102.134.88.0/22
IP: 2c0f:ef30::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12306 (0x3012)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 03:01:05 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F367426AAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:64:81:d5:68:b3:dd:49:fc:ee:2b:dd:2b:29:
c4:80:f2:f0:c2:09:2b:a3:18:64:29:d3:00:a6:81:
20:f8:cf:99:0b:9e:1a:71:88:dd:6d:f7:a0:32:e4:
b7:12:88:1e:2e:97:79:51:94:58:3f:39:5b:e7:ef:
ad:36:7f:01:f8:15:ea:63:56:ca:55:81:af:be:c4:
41:f4:b2:2b:c8:d8:7b:1e:d6:58:62:2d:27:ba:83:
2e:8b:cb:b0:07:db:2f:54:c8:6c:37:d2:91:68:0c:
e3:ec:48:06:e6:38:3d:f8:d5:e2:79:9a:78:1f:b6:
c6:81:46:6f:39:a0:d3:92:3c:c1:2f:3f:92:ae:32:
72:19:98:e9:f7:31:01:c2:f5:8c:e0:ee:6a:80:1e:
1a:7c:29:65:ea:6d:b0:68:66:3e:2d:b9:5c:58:47:
18:51:6e:bb:77:dc:78:92:6f:47:ff:1d:ed:eb:7d:
a6:31:8e:34:15:41:d2:47:02:cf:53:97:7d:ef:6e:
af:44:82:69:21:dd:5c:b1:09:f4:eb:69:9e:06:48:
1a:9f:a0:bb:57:1d:eb:8f:d6:a9:43:43:c2:f4:ef:
08:9f:2f:40:ab:14:ec:78:8c:91:d1:b2:22:01:0a:
dc:64:af:db:94:dd:ae:1f:45:70:30:fd:21:67:2f:
69:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4A:B0:B7:20:D8:39:B7:9A:98:92:32:3B:0F:AB:ED:96:70:5A:A2
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328334
sbgp-ipAddrBlock: critical
IPv4:
102.134.88.0/22
IPv6:
2c0f:ef30::/32
Signature Algorithm: sha256WithRSAEncryption
71:f6:71:a5:f3:83:89:2d:08:bf:03:28:4f:e5:5b:59:9a:b8:
60:6f:20:59:60:a5:77:3e:a1:3b:5b:32:51:59:b0:ff:3c:34:
66:a1:70:2f:a8:40:81:3d:df:23:4e:ef:a2:0a:d6:b3:ce:20:
c0:9f:55:f2:ab:95:d8:e9:b8:3b:a3:12:d8:a6:d9:a7:af:f6:
93:c2:19:25:be:7d:f2:38:69:28:b0:b4:6a:51:a2:ef:92:12:
c2:0f:ed:ff:a8:ae:0f:1b:8c:56:f8:08:00:61:0d:d1:ba:9c:
cb:66:6a:e5:f5:57:79:ca:4f:ba:39:27:8e:7b:65:5b:32:76:
d4:70:a4:9b:f6:de:91:ad:1d:90:de:db:06:d0:08:49:29:34:
f8:c9:9a:5d:17:e3:d0:75:34:cd:a4:0f:22:18:e3:52:25:01:
7f:e0:97:38:0c:5b:99:48:25:ce:d2:88:25:c6:e1:ec:d0:48:
5e:e6:f6:5b:6b:65:a1:06:46:d5:7f:e5:51:67:b6:ff:05:eb:
c2:8c:34:a0:21:93:8b:ac:3d:3e:8e:1a:8c:8c:2a:6d:4a:99:
0b:d5:e8:fb:b9:36:5e:2a:f2:8d:e5:4b:fa:66:b5:fe:be:81:
92:3e:68:79:e6:bb:3c:85:26:83:17:d1:b0:0e:7a:5a:d0:bd:
f8:7f:ff:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:41:45 2025 by rpki-client