Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.cer
File: Jj7R5WFAIUsbLr-1VmemfOVZRkQ.cer (raw, json)
Hash identifier: R0t/g7npbOIOi1ZJn5XO7br3B9szblwgw26vWPo3INU=
Subject key identifier: 26:3E:D1:E5:61:40:21:4B:1B:2E:BF:B5:56:67:A6:7C:E5:59:46:44
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 333C
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:54:17 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329101
IP: 102.215.76.0/22
IP: 2c0f:2880::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13116 (0x333c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 05:54:17 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36E4A6EAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5f:c9:dc:e7:9a:e2:f4:0a:4d:c3:c6:a8:18:
66:05:29:52:ec:52:86:47:ec:27:50:27:3a:ab:5a:
c9:d3:78:b6:15:2b:2b:05:b7:d4:1b:2d:3c:d0:0c:
03:8b:d3:e3:76:0b:32:80:15:a3:b1:5f:9a:0f:d4:
b6:3b:88:7a:24:d9:b0:8d:dd:b7:87:06:ec:44:be:
4d:09:63:72:ec:b5:ca:a0:27:6a:e4:6d:6e:eb:44:
89:86:95:1c:b9:b0:bc:d2:bb:bd:23:81:e9:54:87:
44:2c:a8:f7:92:43:2a:c1:6c:4e:fc:60:87:18:b4:
4e:75:89:8e:8b:a0:68:a4:3a:ed:55:9b:93:a4:d8:
01:1b:d9:9f:4e:19:8a:25:29:e6:fd:42:0e:88:29:
7e:85:12:b3:a2:03:cf:6c:db:af:c2:7c:68:ee:43:
ee:bd:05:ea:33:4d:9b:83:27:b6:af:b9:35:3e:ef:
04:af:54:5c:e5:2d:31:ba:f7:92:ae:a8:83:35:41:
ae:56:62:9e:03:2a:9b:c5:83:03:34:d4:b7:23:14:
a5:ea:7c:29:d5:19:cb:c4:c8:6b:16:d8:b2:d0:c2:
3d:4f:2c:ec:7b:60:5e:e9:18:80:69:26:8f:91:6c:
a0:71:2d:77:a9:34:da:41:61:57:50:63:9c:d4:6a:
c5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3E:D1:E5:61:40:21:4B:1B:2E:BF:B5:56:67:A6:7C:E5:59:46:44
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329101
sbgp-ipAddrBlock: critical
IPv4:
102.215.76.0/22
IPv6:
2c0f:2880::/32
Signature Algorithm: sha256WithRSAEncryption
81:92:87:5d:5a:89:ff:39:b6:cd:6e:a9:5e:da:35:10:7e:f5:
0f:23:23:7a:6c:b7:b8:41:33:03:93:f1:d1:34:7a:96:3a:21:
b0:81:b0:a1:16:f8:17:ca:22:b3:61:9a:f6:91:2e:6a:7d:3e:
97:68:0f:18:9e:05:91:4c:dc:ac:69:fc:87:2f:af:42:38:13:
53:9e:eb:77:b1:d4:2f:90:93:9a:33:06:2c:ce:ba:df:19:0b:
cb:6e:68:d9:8a:94:77:4b:bb:f3:b9:a5:33:81:ac:f5:f9:82:
d5:5c:d5:ed:70:d7:6e:8e:01:f6:76:2d:94:31:6b:0c:6b:2b:
0e:90:47:30:d3:18:df:71:08:50:3d:e3:48:b3:b9:91:6c:83:
e8:87:a9:e4:47:19:d6:5e:ad:e6:e7:69:21:40:d6:64:0d:81:
7a:e9:a9:20:f0:16:b4:71:64:bf:db:07:3c:a6:97:b0:32:d9:
45:9c:59:57:85:90:78:9f:02:84:3b:0d:97:89:f1:6d:40:46:
b1:79:28:0f:c5:72:e5:b2:0c:0f:c0:dd:6c:3a:a3:42:77:81:
a2:ee:6f:3d:6f:8f:2f:67:0b:0f:5e:b7:fb:ae:f6:c8:0a:dd:
97:b0:87:fe:0b:fd:21:d8:15:5a:87:64:8b:fe:e8:a3:85:3a:
fb:c8:a0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:36:31 2025 by rpki-client