Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/M1pTwRMuVAw6td9C8UiHszJN60Q.cer
File: M1pTwRMuVAw6td9C8UiHszJN60Q.cer (raw, json)
Hash identifier: 4ZkVESgLnOkh5Dmr6GwdaTNghhpr2eU3WSHtnJ4L8j8=
Subject key identifier: 33:5A:53:C1:13:2E:54:0C:3A:B5:DF:42:F1:48:87:B3:32:4D:EB:44
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 31A6
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 04:25:25 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 327817
IP: 102.222.28.0/22
IP: 154.73.216.0/22
IP: 2c0f:f798::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12710 (0x31a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 04:25:25 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36A2CD2AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e6:6c:f1:52:57:87:f9:16:a6:71:ca:aa:96:
cb:4c:c0:84:a8:b1:8b:a1:70:36:88:72:ca:fe:5f:
52:c7:87:86:8f:24:f8:14:cc:bd:f6:bd:3a:c7:84:
2d:a0:65:c3:a5:97:5f:ed:6a:af:f6:26:3b:2d:58:
4d:7a:b0:be:c6:5c:de:27:80:a0:b4:02:60:a9:be:
3e:9a:51:5e:04:1c:39:b9:96:06:54:2e:3c:bc:18:
7f:f6:2a:2a:a2:79:ab:91:ef:92:d6:3a:7f:6a:b5:
f2:cb:b4:3f:a4:64:ce:df:5f:1d:71:a6:28:86:ed:
f3:0b:cb:89:20:1d:5d:df:9c:d3:4c:83:2e:0d:de:
0b:67:83:ae:a3:df:7b:de:6d:3f:e2:65:26:32:fb:
06:d5:24:fb:f4:df:22:63:c5:40:55:ca:3e:0d:00:
aa:e2:3e:10:8f:50:d8:a0:23:b5:9e:0d:0f:56:4f:
cf:74:a7:2a:6d:7c:f5:44:08:af:2e:01:d0:fc:ea:
00:84:a8:dd:de:d2:8c:2e:9e:26:1f:11:d9:26:1c:
9a:b7:40:ea:0e:94:52:8a:bf:4a:37:71:9a:c8:f2:
12:f3:65:1d:1f:5d:cb:03:c6:25:0d:fb:e4:1c:a4:
a5:70:1f:49:2b:a2:a6:c6:80:c1:66:3c:3f:90:de:
b7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5A:53:C1:13:2E:54:0C:3A:B5:DF:42:F1:48:87:B3:32:4D:EB:44
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
327817
sbgp-ipAddrBlock: critical
IPv4:
102.222.28.0/22
154.73.216.0/22
IPv6:
2c0f:f798::/32
Signature Algorithm: sha256WithRSAEncryption
14:8f:02:51:47:27:93:78:e8:b6:40:44:ec:da:d0:ad:00:f4:
6c:ab:3e:f6:dd:15:a2:cf:3e:69:5c:80:ef:b4:ac:f3:a2:9f:
f8:fb:8d:4f:64:4c:93:58:03:fd:38:7a:35:82:ce:48:1b:1e:
f9:e7:0d:ea:72:e0:32:64:10:7b:5e:02:72:3e:76:17:5d:f9:
d2:b1:69:a0:39:ac:3c:76:67:bc:4b:ad:17:e2:5e:40:09:af:
8e:19:43:16:01:34:cb:78:eb:fe:4c:ad:bf:d0:fc:2e:33:5f:
4b:55:9c:b0:b0:e7:d6:b6:39:ff:f9:2d:91:7a:5a:c9:57:0a:
26:4d:f7:1f:8d:1a:7a:cc:f9:37:c2:cb:c2:00:88:f2:e4:7e:
90:42:74:3f:58:53:0f:25:16:3a:6d:0c:96:b9:af:fc:6e:0e:
2a:f7:60:5c:d1:ce:b7:8e:b0:39:d2:40:e1:99:f8:96:9d:84:
80:11:21:eb:03:ea:8a:8e:bc:0d:54:46:ae:c3:6d:88:06:bb:
d1:23:46:63:26:d3:0c:0a:16:c0:b5:c7:6d:83:df:a3:ff:50:
3c:ee:c7:a3:d4:70:9d:11:d3:2b:3c:77:92:0b:af:14:b5:c4:
3b:fb:b4:e4:8b:a5:eb:80:88:cf:d7:bf:87:76:57:25:a8:23:
c8:27:a3:fe
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:51:16 2025 by rpki-client