Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/OHYTW_ypqvCwC0LYdlGEbnCsR4U.cer
File: OHYTW_ypqvCwC0LYdlGEbnCsR4U.cer (raw, json)
Hash identifier: eNHZw0OrzwMbaxDVO2XGt43GLt0p4x2wecDFaSln46Y=
Subject key identifier: 38:76:13:5B:FC:A9:AA:F0:B0:0B:42:D8:76:51:84:6E:70:AC:47:85
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3211
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B4943/0196FAB6343911EDA3B58C87F1222468/OHYTW_ypqvCwC0LYdlGEbnCsR4U.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B4943/0196FAB6343911EDA3B58C87F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 04:48:39 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 327950
IP: 196.223.224.0/21
IP: 2c0f:f330::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12817 (0x3211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 04:48:39 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36B4943AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:eb:a7:ae:0b:36:87:e2:1e:41:91:20:c7:21:
30:e6:e4:72:ab:a5:9e:7d:d5:4f:6a:0d:22:53:eb:
d3:42:fc:77:06:82:ee:08:6c:86:ff:f6:11:66:90:
7d:a1:60:b4:b5:d8:fd:4b:eb:b3:ba:c8:e9:db:58:
04:8b:4a:08:3a:14:3e:57:ee:95:bb:9b:35:82:98:
6e:24:17:f9:a3:83:1a:46:86:9e:41:37:7e:1e:85:
74:07:14:ec:8f:16:00:f2:e1:70:a6:d7:26:4c:e0:
7c:86:a7:66:36:b8:db:0d:c4:e0:bd:2b:e7:72:a8:
b9:c7:b0:73:31:6d:be:f0:1a:5d:99:96:48:e4:51:
aa:03:58:4c:c0:11:f2:3d:0b:6b:7c:ca:ad:10:6d:
0f:c5:3b:67:a0:2d:14:45:75:06:a3:09:70:25:42:
8b:18:db:60:ef:a7:21:9d:b0:c6:38:d5:fa:0c:50:
1b:a2:26:a1:39:e5:be:44:f9:41:3d:41:83:3e:92:
56:37:6c:cb:d3:01:54:7b:54:ce:08:e1:d4:e6:21:
91:e7:5f:84:b3:2b:ed:4c:25:ac:47:68:01:01:da:
cc:02:e6:91:87:42:7d:f4:26:f3:65:1b:cf:79:60:
8e:1b:d8:26:ff:c9:00:dc:74:b4:0a:76:96:bf:0e:
9f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:76:13:5B:FC:A9:AA:F0:B0:0B:42:D8:76:51:84:6E:70:AC:47:85
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4943/0196FAB6343911EDA3B58C87F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4943/0196FAB6343911EDA3B58C87F1222468/OHYTW_ypqvCwC0LYdlGEbnCsR4U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
327950
sbgp-ipAddrBlock: critical
IPv4:
196.223.224.0/21
IPv6:
2c0f:f330::/32
Signature Algorithm: sha256WithRSAEncryption
0c:87:ba:8d:04:e3:09:bb:3d:2d:5e:99:65:d7:10:c4:c7:db:
fc:fe:94:e7:dd:93:18:10:4b:d9:71:63:25:3c:c6:68:1e:6b:
72:3f:bf:87:3e:c7:a2:b7:b6:47:d4:30:3f:28:fe:b0:9e:0a:
c9:07:c6:17:a2:d6:54:57:d4:b7:67:6c:5d:59:94:6a:82:3b:
28:4d:e4:df:bf:28:1d:e6:f4:0d:f8:02:30:74:dc:cc:25:ab:
b0:18:a9:64:ce:1c:ce:f2:af:24:ac:2c:36:26:ca:52:4e:7b:
e7:0f:16:c2:49:01:47:46:12:fe:7b:b6:b3:d5:43:c0:9b:68:
5e:81:fa:f7:02:43:0f:6f:87:ea:0a:23:ab:47:d7:35:0e:36:
8f:1d:63:17:17:cd:03:0e:d2:22:59:60:57:b5:2f:08:88:4e:
9b:9f:cc:9b:a5:fa:00:de:1c:46:95:c1:8b:33:8e:f5:94:c3:
4c:ab:c2:d4:fe:ce:63:11:93:b2:9d:12:8c:13:3a:ab:97:03:
6e:7e:4c:5e:d9:e4:ae:48:10:ea:60:6a:7e:d8:35:87:a9:8e:
95:1f:c9:02:ec:a1:1f:38:1d:7e:3a:7c:a2:d9:76:88:c4:d3:
8d:4f:f9:fe:88:14:20:6e:3c:83:30:41:09:c6:72:45:92:56:
fa:c5:2f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:50:10 2025 by rpki-client