Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/HIATGRbyhVyxdDXLrvJmjeFVlsE.cer
File: HIATGRbyhVyxdDXLrvJmjeFVlsE.cer (raw, json)
Hash identifier: 48CSlLHQ1SsRhM+OT3WqThw7riB6MTKQtYumFfhsRKw=
Subject key identifier: 1C:80:13:19:16:F2:85:5C:B1:74:35:CB:AE:F2:66:8D:E1:55:96:C1
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 32C5
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36CB8DF/54C57C588A4611EE8FFA9F0E4AD9E6FC/HIATGRbyhVyxdDXLrvJmjeFVlsE.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36CB8DF/54C57C588A4611EE8FFA9F0E4AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:26:44 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37085
IP: 196.216.247.0/24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12997 (0x32c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 05:26:44 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36CB8DFAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:13:06:0c:29:f1:ec:8d:77:27:a9:5b:49:2b:
0f:4b:dc:3c:49:58:66:68:5d:59:79:e9:ba:b9:d6:
97:21:43:14:9f:19:8d:7e:0e:9c:f7:16:21:63:9b:
25:2b:36:f7:08:a4:43:91:50:4f:c6:7c:b7:f7:2c:
22:d5:78:05:9d:5b:2d:ab:1f:d9:53:cc:63:79:07:
f4:df:e1:a0:8a:a5:ba:47:77:17:f8:06:43:f6:c8:
25:52:96:e7:1e:3b:2b:e5:5b:b2:a0:ca:b1:ac:13:
91:21:3f:35:9c:4e:3e:97:6d:f7:db:f8:c3:48:45:
ed:85:ab:fd:28:a0:3a:b1:9c:5b:f5:17:b3:5c:13:
e7:b1:e4:3d:71:53:fc:dd:91:06:b1:16:13:8f:26:
25:bf:f7:30:9c:dd:d9:29:0a:3d:e4:40:c7:f2:1c:
84:6b:a1:62:0c:e8:55:b5:bd:d2:07:a7:43:37:ce:
76:96:03:cb:c6:ce:0b:fd:43:74:1b:4e:18:44:52:
e2:76:88:39:69:7c:3c:fe:2e:62:0d:25:d4:05:1c:
1f:5a:3e:39:fa:22:59:cb:29:35:06:13:7b:c6:97:
9a:bf:72:7c:c6:58:32:64:f3:bc:fa:55:cc:92:d8:
66:e9:6b:a5:ba:57:65:ad:75:06:73:cb:d2:2b:6f:
f5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:80:13:19:16:F2:85:5C:B1:74:35:CB:AE:F2:66:8D:E1:55:96:C1
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB8DF/54C57C588A4611EE8FFA9F0E4AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB8DF/54C57C588A4611EE8FFA9F0E4AD9E6FC/HIATGRbyhVyxdDXLrvJmjeFVlsE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37085
sbgp-ipAddrBlock: critical
IPv4:
196.216.247.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:c5:19:92:30:be:6e:9e:b2:22:f4:42:09:2e:72:ab:df:81:
8c:d1:12:38:9a:7e:b9:02:1f:24:69:3e:b5:e5:1f:0a:96:53:
18:b6:c6:5c:9f:0f:30:36:30:50:15:ad:5e:39:b9:ea:0d:73:
9d:e9:ad:f6:5a:c2:6b:bd:1a:b8:a4:37:9b:66:27:8f:cd:13:
2a:c8:d9:5b:7d:43:38:74:43:bd:31:f4:53:42:1c:da:50:01:
46:b0:24:17:92:e2:16:08:80:17:44:a9:f8:8c:e7:53:99:fc:
d2:63:4c:db:c0:ed:48:5e:de:5b:39:9d:a9:05:c8:0d:26:bd:
4b:09:c2:79:e9:37:48:06:ed:dc:85:6d:9e:ca:09:af:4e:7b:
a4:a3:3d:f4:42:96:3f:b8:60:d0:1e:99:75:05:64:c8:99:53:
7a:c8:12:c6:8c:2e:95:18:5a:88:99:6d:d9:ce:b8:8b:1b:ae:
e9:81:e1:48:47:49:08:7e:9e:32:1e:3d:83:11:53:c8:aa:a5:
b9:56:cd:ef:c6:e0:40:b1:5d:fc:08:50:a6:3a:83:e7:61:19:
06:34:0d:ac:03:32:9e:64:4f:39:e7:fa:df:13:7d:49:19:ff:
02:89:99:3e:b2:64:b6:f2:79:dd:4d:30:84:8a:66:74:46:20:
34:43:07:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:50:10 2025 by rpki-client