Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/GsJxHeVgUeDNZwEEHR2CBHEL3fU.cer
File: GsJxHeVgUeDNZwEEHR2CBHEL3fU.cer (raw, json)
Hash identifier: 5Z1CFdS3BnrdJRMSWI/DuB+y8yK2ZqV815oVqvL/B6w=
Subject key identifier: 1A:C2:71:1D:E5:60:51:E0:CD:67:01:04:1D:1D:82:04:71:0B:DD:F5
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 301A
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/GsJxHeVgUeDNZwEEHR2CBHEL3fU.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:02:42 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328275
IP: 102.165.120.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12314 (0x301a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 03:02:42 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36750E0AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d2:44:a4:20:0b:60:45:f5:d2:0a:4c:92:ea:
f5:a0:78:98:5b:8c:04:0e:d4:97:fe:42:0d:6e:b1:
33:bf:2e:7f:24:f0:db:3c:da:12:c6:d6:d0:bf:45:
6b:df:05:4c:ab:8b:6d:13:b5:98:3d:76:2e:0e:0c:
f0:d3:fb:11:7b:e4:b8:74:d4:a0:b9:01:32:ba:2c:
ef:5e:a0:8e:f6:9f:c4:05:da:fd:d1:9e:45:4c:41:
71:a0:e3:58:ef:f6:cf:69:06:88:8e:57:82:16:31:
ba:72:aa:03:f8:42:96:95:bc:5f:71:a7:c5:fc:2c:
2c:0f:27:ee:9a:3d:e1:c7:14:7a:6f:d8:1f:d6:d3:
b7:50:f0:c8:fb:58:b6:ec:05:79:f9:32:9f:7b:3f:
65:61:49:0c:8e:4f:20:49:72:84:b0:a4:42:e4:71:
b5:ee:d6:ad:1a:ea:94:4b:c6:be:7d:c8:b8:eb:04:
a9:1c:c4:e3:fa:70:43:fd:04:e9:ef:02:a6:3b:b3:
da:93:f0:27:74:54:29:34:31:28:c2:5a:15:cb:46:
74:35:6c:b8:34:67:4a:ae:3e:d6:34:3b:92:60:1d:
82:c8:b3:dd:a1:99:4a:2c:54:d7:4b:de:07:a4:2a:
a8:4a:8a:bc:56:bf:27:2c:91:a1:99:51:da:c1:05:
81:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C2:71:1D:E5:60:51:E0:CD:67:01:04:1D:1D:82:04:71:0B:DD:F5
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/GsJxHeVgUeDNZwEEHR2CBHEL3fU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328275
sbgp-ipAddrBlock: critical
IPv4:
102.165.120.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:b8:27:37:1f:7a:80:01:db:cd:99:87:93:c8:a3:4a:d2:8b:
68:36:02:21:c4:80:94:e4:1e:91:ea:90:79:a8:00:eb:03:1b:
61:19:22:90:fc:be:00:d7:ad:6b:8e:a4:43:01:a0:20:60:73:
fd:03:4b:4a:c5:f0:87:dc:c8:9f:7c:4c:7f:ba:a7:14:69:9b:
b8:0c:e9:86:63:d4:a1:58:ec:4b:21:a8:b3:4d:b1:7d:44:99:
29:4f:8c:ef:cc:af:08:9a:ad:e9:c7:b9:7b:37:fa:f6:c7:b5:
7c:6d:e6:e0:be:2f:93:d6:4f:cf:87:8e:08:c0:24:04:80:c5:
ef:f5:05:81:1f:e3:0f:18:24:58:c0:55:32:5d:74:e7:94:1e:
dd:f5:f4:83:15:c1:9b:ea:bd:51:0f:8d:ad:32:88:b1:3d:6f:
71:48:39:e9:f5:d4:0c:3b:5e:8f:bd:ee:6b:ef:63:d8:a2:04:
98:1f:75:33:9b:ea:d1:3b:9c:8d:97:63:6e:51:a8:00:a6:c3:
51:cd:cf:d6:2f:52:46:be:0b:2c:30:e5:25:02:da:68:35:4e:
bc:b4:2b:b3:e3:6c:06:96:0b:93:9f:77:8e:b3:5f:7a:d2:81:
57:57:42:b7:7a:34:31:e4:77:c9:fd:b8:68:a6:04:42:cf:f1:
f5:0d:b9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:43:56 2025 by rpki-client