Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Ho4GD8DqacvW-tSkvG7THSnI5Go.cer
File: Ho4GD8DqacvW-tSkvG7THSnI5Go.cer (raw, json)
Hash identifier: KiG36Zpm49rOqlrguXbaR7OJQiXwdaYLFyw0cTDgt3E=
Subject key identifier: 1E:8E:06:0F:C0:EA:69:CB:D6:FA:D4:A4:BC:6E:D3:1D:29:C8:E4:6A
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2E0F
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:16:31 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328737
IP: 102.222.8.0/22
IP: 2c0f:e9d8::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11791 (0x2e0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 01:16:31 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F363D435AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7f:04:66:02:95:d8:41:fb:c2:ae:0c:2f:98:
d0:22:cf:16:40:40:f9:7d:43:cb:c6:b9:a3:32:37:
2f:84:53:4f:46:bd:46:e9:24:f9:43:12:50:9d:97:
82:f2:7a:a2:5e:85:b3:ca:7b:ba:4c:c0:ca:b1:8e:
18:26:0b:84:31:50:07:9a:36:fb:e1:42:4b:fc:6c:
60:9b:da:e1:5e:25:fa:e8:52:3c:c2:b6:dd:2d:13:
4a:b8:7d:df:c9:95:41:20:cd:4a:e5:2c:2d:c0:17:
3d:a1:a2:c3:a6:36:b7:4b:dc:ec:0f:f5:ec:1d:90:
ab:0d:c4:b5:05:a3:32:86:3c:8b:90:2c:44:32:57:
df:ce:c8:a9:c1:db:5f:fc:b1:b2:b1:4c:11:16:85:
be:99:b6:de:f9:5d:e3:3a:a1:91:2e:c1:b3:24:3c:
9c:21:c4:af:8a:04:21:43:81:4b:92:aa:59:74:c6:
fa:31:fc:fc:4d:fc:a8:86:ff:5b:07:78:44:ac:b4:
6e:00:1c:6b:8a:eb:c8:87:14:2f:4e:d3:61:93:f0:
db:b6:c7:72:38:c9:cc:c1:36:54:d4:04:ef:87:ec:
82:e0:43:36:46:fb:27:c6:7c:9e:78:7a:f7:ef:c7:
26:00:31:82:a2:93:88:98:e1:a0:7d:b9:4e:79:34:
f6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8E:06:0F:C0:EA:69:CB:D6:FA:D4:A4:BC:6E:D3:1D:29:C8:E4:6A
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328737
sbgp-ipAddrBlock: critical
IPv4:
102.222.8.0/22
IPv6:
2c0f:e9d8::/32
Signature Algorithm: sha256WithRSAEncryption
85:b0:85:9a:3e:da:42:88:a6:44:f1:09:ba:b5:f3:95:a3:25:
8a:64:f0:43:3a:b9:a6:e3:d1:a6:ec:2c:9d:14:c0:0f:a8:ad:
84:e8:8f:f8:67:e1:76:96:81:ab:e9:6e:df:c5:c2:92:6b:b2:
b4:de:0a:a7:8b:e6:bd:a7:70:6e:a0:2b:90:08:9b:1d:e1:d3:
53:b2:23:db:64:63:0f:9d:b2:48:6c:25:1e:9a:0e:0e:b1:27:
70:15:e4:17:21:c7:3f:15:ff:05:b1:db:cb:d3:c7:53:b6:95:
2c:11:1e:bc:f1:52:90:20:fd:58:df:4b:62:bb:42:9e:0a:47:
68:47:8b:b1:ea:89:30:a1:de:55:a8:05:3c:b2:3e:91:04:8b:
5c:9b:f4:1f:3b:7d:2e:b5:a7:2c:6e:25:9f:27:22:db:2a:f8:
91:60:c2:7c:08:2e:62:83:a1:b0:de:59:d0:09:73:7d:5a:64:
7d:53:62:d1:ec:ac:87:6b:43:60:79:42:ac:0a:90:32:59:69:
db:c3:97:9d:3c:93:4c:b5:09:fb:d0:81:77:93:67:77:56:31:
be:4a:39:65:9e:85:cc:56:76:b0:5d:34:40:1a:9d:45:ec:ac:
1e:31:8b:20:72:d0:f6:fe:09:a0:08:9a:27:f7:f1:4c:94:01:
7a:7e:54:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:34:29 2025 by rpki-client