Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/LNMcPCUfXtoYP5OOf8s6Sh26id0.cer
File: LNMcPCUfXtoYP5OOf8s6Sh26id0.cer (raw, json)
Hash identifier: Iq7gSHZ6zmhj5XtWGLFWBNUs6CWMDr2TEvS+52QK4Bo=
Subject key identifier: 2C:D3:1C:3C:25:1F:5E:DA:18:3F:93:8E:7F:CB:3A:4A:1D:BA:89:DD
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 33CA
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 06:27:50 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 36933
IP: 41.206.0.0/19
IP: 41.220.64.0/20
IP: 102.88.0.0/13
IP: 197.210.0.0/16
IP: 2c0f:f5c0::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13258 (0x33ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 06:27:50 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36FDDEEAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:15:2e:af:57:77:a8:cf:b7:13:e3:67:ef:
66:9b:93:c6:ba:15:e4:ab:97:59:ed:90:1c:78:03:
d8:4d:00:ae:95:ac:a2:84:ca:e2:68:72:f2:76:c8:
d8:b5:e6:fd:58:d5:f7:bc:a6:ce:80:f7:c3:1a:a7:
b9:dc:8f:68:45:47:77:54:c3:20:6f:a5:5d:44:f4:
92:49:19:81:7c:43:e5:1d:d1:32:ba:df:be:70:a2:
19:0b:2c:7e:9a:92:0c:54:24:84:6d:af:c0:e5:aa:
4b:47:92:d7:b7:d2:95:e3:0f:c9:0c:d3:69:00:b3:
84:46:63:4d:d6:bd:97:89:3d:71:ec:f7:49:95:4f:
ae:2d:05:c6:aa:c4:4a:43:3f:61:c8:f2:61:a0:86:
05:7c:26:a7:15:0c:8a:12:c0:4a:48:6e:b9:4e:bb:
89:e0:6b:f7:dd:33:29:e0:38:6a:f0:d6:d6:3c:fe:
29:cf:ad:c8:53:0f:e1:1d:44:23:8f:8b:f0:70:17:
7a:81:61:03:0d:de:c7:77:6e:e6:a7:fb:23:7b:dc:
f0:d0:01:ad:6a:ed:ca:79:ad:18:4e:25:e7:75:be:
c3:cd:02:75:cd:dc:91:10:6d:16:88:dd:80:c7:16:
cb:48:b9:21:c4:15:59:1d:09:b0:44:07:40:57:5a:
dd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D3:1C:3C:25:1F:5E:DA:18:3F:93:8E:7F:CB:3A:4A:1D:BA:89:DD
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
36933
sbgp-ipAddrBlock: critical
IPv4:
41.206.0.0/19
41.220.64.0/20
102.88.0.0/13
197.210.0.0/16
IPv6:
2c0f:f5c0::/32
Signature Algorithm: sha256WithRSAEncryption
93:c6:82:25:d0:0f:9e:19:35:f9:84:a0:ce:9b:e0:4a:77:13:
a0:0c:22:d8:37:c6:b3:b0:68:80:2d:da:7c:f0:c4:9c:8d:19:
d4:f7:b6:23:1d:bf:ef:21:90:ab:81:81:12:51:b6:4d:ef:3c:
06:f2:07:84:5e:d9:ae:f0:10:cc:c0:32:de:00:0f:a2:f3:03:
a0:07:e7:60:73:17:5c:aa:7f:77:89:34:30:ed:db:b7:cb:74:
c8:65:f8:b8:6f:eb:b1:31:d7:8c:42:67:33:02:02:aa:2e:ea:
44:ff:a9:94:dc:4a:40:82:2b:a4:10:9f:58:6e:2b:a2:0f:67:
9e:eb:7b:9d:3f:de:77:d5:78:14:1d:fd:da:b2:d4:70:b0:ce:
80:be:b4:ca:04:47:84:8b:96:f1:74:a4:48:6a:43:2b:39:8d:
d4:27:cf:28:a4:b8:2b:2f:d8:49:30:fc:0b:a1:0b:1c:0d:79:
7f:a3:c5:d1:94:1b:dd:76:de:52:3e:db:5c:19:ad:21:4a:53:
cb:56:83:44:06:48:f8:b9:5f:bc:38:a0:2f:da:12:0d:38:a1:
27:00:4b:82:cf:3d:55:40:df:66:57:17:cd:f3:e8:09:58:a1:
77:e6:b1:fa:cc:52:61:de:a8:2a:10:b3:d5:18:47:23:b5:7c:
5e:72:bc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:31:12 2025 by rpki-client