Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
File: JIykhYdpP_HNXYNmIkrKDSuXyjs.cer (raw, json)
Hash identifier: Bpm8tnJ38eBT0FJjGikm+QCaERHUt3cnh9Dmz938hjg=
Subject key identifier: 24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3380
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 06:10:43 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37410
IP: 41.57.80.0/20
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13184 (0x3380)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 06:10:43 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36F387AAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:47:23:0c:96:02:2f:de:08:d4:82:11:6c:12:
7a:17:0e:9e:8e:38:fd:60:8d:54:22:97:38:a9:1f:
2a:40:a3:52:02:c6:bf:52:85:91:75:35:3d:f8:9d:
bc:35:8d:be:97:7a:f9:4e:cb:ff:bf:02:e0:90:4f:
87:17:a7:a8:52:d1:c6:13:36:02:61:a7:89:0d:dd:
65:61:e7:39:45:63:7c:c1:1d:b2:28:32:3a:a5:1a:
77:e7:f4:c3:83:a6:26:7a:18:b6:c2:f4:77:a2:f6:
c1:3a:93:0d:48:0d:aa:6f:21:dd:27:ae:9c:36:77:
1b:87:c2:f0:cb:7d:3f:96:b2:bd:aa:4a:56:6f:a4:
1d:08:87:f6:f1:e8:31:e9:29:b9:47:6a:72:e4:94:
1f:c1:28:bb:d3:a3:3d:75:1e:08:b5:4a:8a:d4:23:
d8:db:79:67:6d:be:05:fc:1c:73:94:0f:b4:2a:93:
39:45:d3:39:b9:26:b6:8b:7a:a1:1e:31:b0:ac:45:
e6:f0:f2:b0:96:22:f3:af:e5:6a:31:1d:c1:80:29:
a6:ee:b6:47:9d:f5:99:11:40:2b:65:01:fe:b7:6d:
44:da:af:6d:cd:f1:79:75:2a:f6:6d:bd:ce:e3:55:
6a:5c:7f:2d:0a:38:b8:8f:0c:c3:9d:41:d2:ae:b8:
d7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37410
sbgp-ipAddrBlock: critical
IPv4:
41.57.80.0/20
Signature Algorithm: sha256WithRSAEncryption
03:e9:1e:42:ab:f8:78:b2:9f:02:d4:56:28:bd:db:38:dd:d3:
2d:16:de:fc:99:b3:63:ed:55:49:33:a1:a7:da:e6:9f:34:6d:
ee:1e:78:ac:72:5e:ba:2f:60:52:ec:30:93:37:25:71:6d:4b:
b3:49:19:06:17:a8:0a:3a:90:10:d0:44:f4:5e:7b:68:9a:2e:
4e:f6:10:4c:51:10:2b:70:cf:29:0b:c1:04:55:88:d0:e9:45:
5b:d6:5c:e7:15:e3:89:87:40:87:39:9a:b1:16:19:07:df:13:
3d:4d:b4:7f:09:34:42:43:cd:68:39:d8:09:24:78:a2:1d:e6:
75:66:0e:ff:fa:d9:3a:b9:83:60:43:c7:f8:91:43:fa:c8:71:
45:ff:15:e2:1a:75:fe:ec:14:34:51:94:7e:96:32:60:8f:b3:
4c:7e:48:77:53:5d:f1:02:d2:60:89:9a:19:ab:4f:c4:ed:fe:
04:16:a7:8c:97:80:cb:61:ec:8f:a5:a6:8f:15:92:36:5e:6c:
09:8b:b1:a4:a9:75:ea:0d:85:16:23:da:18:3b:86:d3:7b:4b:
01:34:c6:e3:0c:ee:49:5f:44:27:8d:45:c0:03:d4:3d:38:22:
3f:ff:ea:06:ea:94:db:e8:ab:54:8e:5f:4c:9f:d1:98:93:26:
d2:97:71:23
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgICM4AwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwNjEwNDNaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkYzODdBQUYxMTAvBgNVBAUTKDI0OENBNDg1ODc2OTNGRjFDRDVEODM2
NjIyNEFDQTBEMkI5N0NBM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCqRyMMlgIv3gjUghFsEnoXDp6OOP1gjVQilzipHypAo1ICxr9ShZF1NT34nbw1
jb6XevlOy/+/AuCQT4cXp6hS0cYTNgJhp4kN3WVh5zlFY3zBHbIoMjqlGnfn9MOD
piZ6GLbC9Hei9sE6kw1IDapvId0nrpw2dxuHwvDLfT+Wsr2qSlZvpB0Ih/bx6DHp
KblHanLklB/BKLvToz11Hgi1SorUI9jbeWdtvgX8HHOUD7QqkzlF0zm5JraLeqEe
MbCsRebw8rCWIvOv5WoxHcGAKabutked9ZkRQCtlAf63bUTar23N8Xl1KvZtvc7j
VWpcfy0KOLiPDMOdQdKuuNe9AgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUJIykhYdp
P/HNXYNmIkrKDSuXyjswHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGMzg3QS8xQ0E3MTBCMEM0RDUx
MUVFOTlGMDI0NkE3NzU0MTJFNi8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjM4N0EvMUNBNzEwQjBDNEQ1MTFFRTk5RjAyNDZBNzc1NDEyRTYvSkl5a2hZ
ZHBQX0hOWFlObUlrcktEU3VYeWpzLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMAkiIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQpOVAwDQYJKoZIhvcN
AQELBQADggEBAAPpHkKr+HiynwLUVii92zjd0y0W3vyZs2PtVUkzoafa5p80be4e
eKxyXrovYFLsMJM3JXFtS7NJGQYXqAo6kBDQRPRee2iaLk72EExRECtwzykLwQRV
iNDpRVvWXOcV44mHQIc5mrEWGQffEz1NtH8JNEJDzWg52AkkeKId5nVmDv/62Tq5
g2BDx/iRQ/rIcUX/FeIadf7sFDRRlH6WMmCPs0x+SHdTXfEC0mCJmhmrT8Tt/gQW
p4yXgMth7I+lpo8VkjZebAmLsaSpdeoNhRYj2hg7htN7SwE0xuMM7klfRCeNRcAD
1D04Ij//6gbqlNvoq1SOX0yf0ZiTJtKXcSM=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:41:43 2025 by rpki-client