Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/J8yUlEs4mAyi4IYqXfxE2GQEF88.cer
File: J8yUlEs4mAyi4IYqXfxE2GQEF88.cer (raw, json)
Hash identifier: 0zidVjKsNmXLUp5kwDUTfb4h3oMdiTgbVTv2sjQnnbA=
Subject key identifier: 27:CC:94:94:4B:38:98:0C:A2:E0:86:2A:5D:FC:44:D8:64:04:17:CF
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3143
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 04:04:07 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328975
IP: 102.218.124.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12611 (0x3143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 04:04:07 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3698401AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:77:de:6a:5f:37:39:e9:16:0b:c4:6c:6a:94:
0c:35:9a:9b:00:7b:1f:25:54:86:39:a5:d2:42:26:
14:24:1f:24:f7:57:8d:6d:49:82:84:94:13:24:d9:
83:c8:93:57:74:7e:cb:d8:6d:88:39:89:c3:d4:41:
1f:37:5a:e7:9c:33:98:02:e1:bc:66:c0:b2:c0:5e:
da:ea:90:30:d7:6b:2a:8e:55:0f:95:18:20:15:9f:
b9:5a:9c:9c:64:50:59:b8:66:9b:02:93:de:66:5a:
0f:18:60:10:74:9f:a3:e5:e7:be:a9:0c:ae:4a:5f:
97:fa:01:22:9c:59:28:92:cc:72:a0:1c:3e:62:b1:
e6:ee:2f:1c:94:b2:91:23:72:51:d9:de:5b:f5:9d:
fd:63:de:fa:e6:ee:b7:14:45:89:c5:12:63:7c:27:
af:93:d9:85:6b:d0:12:a9:d2:6b:71:fe:e1:f4:86:
a2:bd:66:23:f9:4d:fa:ba:28:a3:02:14:e1:2f:ca:
75:37:9e:c7:55:92:4a:bf:17:b4:7d:b9:9b:87:ce:
6b:04:87:5c:e7:54:7a:68:7f:22:1a:08:3c:75:b3:
2a:3f:c8:79:c7:5e:07:cd:0e:4e:4b:6a:94:c4:3a:
1a:16:56:d9:20:31:43:b1:d8:ff:95:de:f8:53:35:
ea:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CC:94:94:4B:38:98:0C:A2:E0:86:2A:5D:FC:44:D8:64:04:17:CF
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328975
sbgp-ipAddrBlock: critical
IPv4:
102.218.124.0/22
Signature Algorithm: sha256WithRSAEncryption
39:66:fb:0f:01:dd:47:eb:73:8b:c3:c9:61:6f:44:48:b0:e9:
07:56:c6:aa:f0:9c:91:0f:7f:2d:8d:86:cc:05:60:10:83:44:
f7:2b:94:75:4a:1e:fd:0d:56:90:d0:8e:70:1b:39:ce:df:53:
dc:04:83:35:74:15:f8:7d:fa:a1:20:32:31:29:67:81:6c:be:
5f:69:03:7b:f9:5c:b3:1b:05:97:18:f6:87:ec:06:f4:db:9a:
d6:23:5a:87:c7:2f:26:ab:cf:38:32:26:b5:1b:be:dc:2c:0e:
8b:e8:80:2b:90:c2:9e:57:0a:de:af:6d:23:04:b6:a4:db:d3:
93:f6:bc:88:c4:5c:23:44:4d:c1:1b:d7:47:dd:73:b1:59:5a:
5e:b6:c6:19:fc:02:60:36:07:26:e7:29:db:1a:6c:ca:73:7f:
33:7e:97:ce:3f:bc:3a:99:e6:2e:84:a3:91:36:18:36:b7:86:
7b:9b:9e:93:ee:aa:74:ea:ae:cf:31:b4:a9:5a:fb:cc:58:51:
4f:01:5d:a8:8c:08:5d:37:06:6b:30:e0:90:ae:b9:9c:d5:0d:
59:af:cd:58:74:af:ca:dd:e9:7e:d8:30:10:0c:c3:3d:16:ad:
da:2e:7f:b7:f5:29:30:f5:36:60:f0:a4:f7:21:01:8e:55:fd:
33:e6:78:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:50:12 2025 by rpki-client