Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer
File: M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer (raw, json)
Hash identifier: MAQM7o2Ms+SFfAKrROUeU8TyGtWpTMHdrVu8TZY3wBc=
Subject key identifier: 33:D3:8C:44:11:A4:88:58:16:97:F6:1D:BF:5F:B4:FD:35:8D:82:1F
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2FAD
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 02:40:46 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 102.222.100.0/22
IP: 2001:43f8:1700::/46
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12205 (0x2fad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 02:40:46 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F366828BAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5f:d3:3c:f3:29:16:15:fa:6f:37:cc:f6:53:
a5:0d:28:3f:33:8d:9a:27:79:99:6a:48:be:a4:cb:
f2:b0:bd:bf:70:af:53:a7:a6:63:fa:45:a2:4d:16:
4f:19:81:b6:24:3f:bc:c7:19:67:b8:3a:93:d6:de:
e0:56:40:85:46:e8:f3:4c:8b:76:ea:04:6c:37:96:
c9:15:be:b4:a6:57:95:4e:d2:af:37:d5:f7:f4:f5:
d6:ec:2f:52:2a:fd:d8:d0:a6:4b:82:c4:66:06:d5:
cd:76:20:dc:fe:45:9c:9c:03:11:4f:aa:de:7c:5a:
e6:d3:4f:3f:72:e8:c0:3b:5c:06:87:03:35:af:60:
ff:1a:1e:96:26:ed:f5:b5:b4:b6:4c:07:b6:c6:24:
b1:9b:36:bd:cf:b9:6f:da:a2:9e:42:e6:44:cf:af:
cb:ad:52:e2:6c:d6:ce:52:e2:f7:bf:9a:f4:d9:0d:
52:ea:00:4e:f7:e9:99:5b:45:eb:fd:55:07:bd:05:
78:59:07:6d:c3:45:c6:c8:93:07:a3:66:5b:a2:d7:
30:34:74:85:57:d2:71:fc:b8:33:28:3c:8f:9a:a9:
2b:95:43:0d:ef:86:6e:42:8e:b0:a7:48:5f:63:5c:
a4:5e:bd:2d:90:94:11:2a:a0:65:af:7f:a7:ff:3d:
18:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D3:8C:44:11:A4:88:58:16:97:F6:1D:BF:5F:B4:FD:35:8D:82:1F
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
sbgp-ipAddrBlock: critical
IPv4:
102.222.100.0/22
IPv6:
2001:43f8:1700::/46
Signature Algorithm: sha256WithRSAEncryption
b5:4d:c0:ec:61:8a:ff:92:58:56:06:12:4f:d2:fc:3d:7f:44:
d8:ca:61:8b:e8:3a:f3:f5:c7:01:78:46:3b:73:4c:f4:71:f6:
34:e1:2c:b4:62:2d:bd:f1:80:16:fb:e6:70:4a:4d:40:47:93:
53:1e:ae:9b:c3:eb:6e:f5:63:6b:6a:64:35:c2:60:6d:8f:93:
05:68:e4:3e:24:8a:1b:b5:4b:2d:46:77:50:d5:92:97:fd:33:
98:f4:43:cd:06:b0:80:de:15:d2:9f:32:e3:2d:c6:7a:26:28:
d8:52:22:11:0c:3f:28:43:51:e7:e5:76:48:2f:96:cd:15:a8:
b1:c0:2e:17:86:da:76:c6:cd:1f:a7:ec:55:8d:7c:f0:df:21:
a6:d6:13:1b:90:6d:80:11:17:6f:ed:80:9e:cf:db:41:ce:8f:
ee:ee:d6:d3:6c:16:fd:db:14:80:4d:d1:8a:aa:46:06:5e:a4:
6d:e3:9c:fa:fc:03:fc:26:1f:df:ca:ce:7a:49:ad:cc:57:c6:
58:61:66:2b:4d:5b:55:33:92:6f:83:58:b3:c3:97:4a:6e:fa:
0a:66:29:f3:7f:32:2f:92:c3:c5:c0:aa:58:55:ca:77:65:a9:
7c:32:86:17:1d:7c:9c:1f:62:67:49:8c:c2:2c:6c:d2:cf:b6:
ec:e3:20:df
-----BEGIN CERTIFICATE-----
MIIGCzCCBPOgAwIBAgICL60wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwMjQwNDZaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjY4MjhCQUYxMTAvBgNVBAUTKDMzRDM4QzQ0MTFBNDg4NTgxNjk3RjYx
REJGNUZCNEZEMzU4RDgyMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDLX9M88ykWFfpvN8z2U6UNKD8zjZoneZlqSL6ky/Kwvb9wr1OnpmP6RaJNFk8Z
gbYkP7zHGWe4OpPW3uBWQIVG6PNMi3bqBGw3lskVvrSmV5VO0q831ff09dbsL1Iq
/djQpkuCxGYG1c12INz+RZycAxFPqt58WubTTz9y6MA7XAaHAzWvYP8aHpYm7fW1
tLZMB7bGJLGbNr3PuW/aop5C5kTPr8utUuJs1s5S4ve/mvTZDVLqAE736ZlbRev9
VQe9BXhZB23DRcbIkwejZlui1zA0dIVX0nH8uDMoPI+aqSuVQw3vhm5CjrCnSF9j
XKRevS2QlBEqoGWvf6f/PRiXAgMBAAGjggMAMIIC/DAdBgNVHQ4EFgQUM9OMRBGk
iFgWl/Ydv1+0/TWNgh8wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY2ODI4Qi80QTBDODdBMkQzMDEx
MUVBQjE0RjYxM0NGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NjgyOEIvNEEwQzg3QTJEMzAxMTFFQUIxNEY2MTNDRjhBRUEyMjgvTTlPTVJC
R2tpRmdXbF9ZZHYxLTBfVFdOZ2g4Lm1mdDAwBggrBgEFBQcBBwEB/wQhMB8wDAQC
AAEwBgMEAmbeZDAPBAIAAjAJAwcCIAFD+BcAMA0GCSqGSIb3DQEBCwUAA4IBAQC1
TcDsYYr/klhWBhJP0vw9f0TYymGL6Drz9ccBeEY7c0z0cfY04Sy0Yi298YAW++Zw
Sk1AR5NTHq6bw+tu9WNramQ1wmBtj5MFaOQ+JIobtUstRndQ1ZKX/TOY9EPNBrCA
3hXSnzLjLcZ6JijYUiIRDD8oQ1Hn5XZIL5bNFaixwC4Xhtp2xs0fp+xVjXzw3yGm
1hMbkG2AERdv7YCez9tBzo/u7tbTbBb92xSATdGKqkYGXqRt45z6/AP8Jh/fys56
Sa3MV8ZYYWYrTVtVM5Jvg1izw5dKbvoKZinzfzIvksPFwKpYVcp3Zal8MoYXHXyc
H2JnSYzCLGzSz7bs4yDf
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:39:30 2025 by rpki-client