Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
File: OCSsXuAEOe7aIaGhAQnov3bk-rg.cer (raw, json)
Hash identifier: 6NoEfOB4LUctUzdqssV0cjHukfmwSjeR1XVJifpO35U=
Subject key identifier: 38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2D2B
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:26:51 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 22355
AS: 328410
IP: 41.85.0.0/17
IP: 41.206.192.0/19
IP: 196.1.56.0/21
IP: 2c0f:ffc8::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11563 (0x2d2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:26:51 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F361ED63AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ff:a4:14:c3:75:ae:b5:09:c2:5d:cd:8d:9f:
b4:57:4d:1b:e9:6b:f4:b7:4c:dc:43:01:5f:7b:76:
de:2a:2f:ac:de:3a:70:10:c6:0d:24:97:a2:49:c8:
44:63:8b:eb:98:fd:6d:59:06:a2:4e:80:9a:dc:49:
b1:b4:78:e2:2d:26:fb:ec:ac:2e:f6:60:e7:7d:30:
a0:9b:17:3d:75:b2:13:d9:0d:b4:6b:8c:80:7e:42:
ff:cf:45:a5:a6:eb:42:29:7a:92:a6:9b:f0:2a:07:
72:1b:0a:ed:4b:bb:e6:11:80:68:9d:99:1d:14:3f:
79:b3:37:05:87:fa:81:8b:de:79:94:ef:93:c3:12:
2d:db:77:b6:ad:99:95:4c:a8:09:41:ef:a8:63:a7:
cd:78:ac:bf:00:71:14:27:89:a4:78:df:60:2a:50:
d1:70:04:e5:ff:b2:b2:24:5c:37:4e:b5:2d:e0:d7:
0f:31:5a:97:ea:99:3f:97:0a:03:a1:f0:c4:9d:28:
ed:f1:47:0c:79:14:7f:47:db:ea:05:2f:82:8c:0c:
0b:ef:81:9a:99:7c:6c:59:73:3a:a6:45:33:6b:d6:
12:ef:d1:7e:e1:e2:44:33:f7:5d:ed:5b:6d:65:70:
9d:95:e1:28:34:3c:bf:0c:dc:e4:66:76:20:90:4d:
8a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
22355
328410
sbgp-ipAddrBlock: critical
IPv4:
41.85.0.0/17
41.206.192.0/19
196.1.56.0/21
IPv6:
2c0f:ffc8::/32
Signature Algorithm: sha256WithRSAEncryption
9a:13:dc:78:14:90:ba:35:07:a2:2b:61:34:20:f2:43:75:6c:
5e:ff:5d:e8:2b:3a:7f:8d:95:7b:f7:dd:80:16:b7:b8:84:a4:
34:a5:e1:8e:d0:f7:76:c0:26:db:18:55:af:f8:c3:2b:09:7a:
c0:ed:f1:b5:5c:2b:46:db:39:4a:44:79:25:c2:89:53:de:26:
9e:1b:bd:03:d3:c9:2f:bc:99:cc:71:b2:5a:89:25:1e:90:38:
e3:ef:39:18:a7:39:b0:bd:c4:51:e0:84:b5:f5:44:38:fb:b8:
ed:5a:7b:0a:07:4d:9e:6b:19:c0:b6:6d:3b:91:d7:6c:75:56:
13:50:b3:68:5a:1d:60:23:8c:f6:aa:30:d8:fa:37:4f:ca:8e:
fd:44:9d:96:26:b6:c5:86:c0:b8:9c:3b:8d:17:58:de:cf:76:
fa:85:31:18:52:1f:44:25:3f:d4:08:b3:52:46:36:d6:20:3a:
69:bc:cd:5d:33:b8:5c:3c:67:32:26:6f:14:88:b4:9e:e8:86:
0f:67:96:7b:f1:c9:d3:b9:c2:27:7d:cb:dd:d1:91:7e:66:16:
c6:14:96:9b:57:fc:b2:eb:41:3c:96:8f:85:d8:9a:b7:74:de:
9f:53:3d:35:93:ae:18:4d:36:09:73:10:a2:62:a0:0e:5c:5c:
a1:cd:8a:27
-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgICLSswDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwMDI2NTFaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjFFRDYzQUYxMTAvBgNVBAUTKDM4MjRBQzVFRTAwNDM5RUVEQTIxQTFB
MTAxMDlFOEJGNzZFNEZBQjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDv/6QUw3WutQnCXc2Nn7RXTRvpa/S3TNxDAV97dt4qL6zeOnAQxg0kl6JJyERj
i+uY/W1ZBqJOgJrcSbG0eOItJvvsrC72YOd9MKCbFz11shPZDbRrjIB+Qv/PRaWm
60IpepKmm/AqB3IbCu1Lu+YRgGidmR0UP3mzNwWH+oGL3nmU75PDEi3bd7atmZVM
qAlB76hjp814rL8AcRQniaR432AqUNFwBOX/srIkXDdOtS3g1w8xWpfqmT+XCgOh
8MSdKO3xRwx5FH9H2+oFL4KMDAvvgZqZfGxZczqmRTNr1hLv0X7h4kQz913tW21l
cJ2V4Sg0PL8M3ORmdiCQTYobAgMBAAGjggMqMIIDJjAdBgNVHQ4EFgQUOCSsXuAE
Oe7aIaGhAQnov3bk+rgwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYxRUQ2My9CQzcyRDZCNkNBQTQx
MUVCOUMyQTRBNTJGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MUVENjMvQkM3MkQ2QjZDQUE0MTFFQjlDMkE0QTUyRjhBRUEyMjgvT0NTc1h1
QUVPZTdhSWFHaEFRbm92M2JrLXJnLm1mdDAeBggrBgEFBQcBCAEB/wQPMA2gCzAJ
AgJXUwIDBQLaMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQHKVUAAwQFKc7A
AwQDxAE4MA0EAgACMAcDBQAsD//IMA0GCSqGSIb3DQEBCwUAA4IBAQCaE9x4FJC6
NQeiK2E0IPJDdWxe/13oKzp/jZV7992AFre4hKQ0peGO0Pd2wCbbGFWv+MMrCXrA
7fG1XCtG2zlKRHklwolT3iaeG70D08kvvJnMcbJaiSUekDjj7zkYpzmwvcRR4IS1
9UQ4+7jtWnsKB02eaxnAtm07kddsdVYTULNoWh1gI4z2qjDY+jdPyo79RJ2WJrbF
hsC4nDuNF1jez3b6hTEYUh9EJT/UCLNSRjbWIDppvM1dM7hcPGcyJm8UiLSe6IYP
Z5Z78cnTucInfcvd0ZF+ZhbGFJabV/yy60E8lo+F2Jq3dN6fUz01k64YTTYJcxCi
YqAOXFyhzYon
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:42:56 2025 by rpki-client