Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.cer
File: OZ0E8RaOZZdtGtbo7MXAFBR4HtU.cer (raw, json)
Hash identifier: 4qVd/yLLvGtYgXC64O1ZWBWbE38RK7FGb8Mb35BxL2Y=
Subject key identifier: 39:9D:04:F1:16:8E:65:97:6D:1A:D6:E8:EC:C5:C0:14:14:78:1E:D5
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2F4C
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/377530C4DAAE11ECA024B6D3F1222468/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/377530C4DAAE11ECA024B6D3F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 02:21:16 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328164
IP: 102.36.248.0/22
IP: 2c0f:ebe8::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12108 (0x2f4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 02:21:16 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F365E0EFAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9a:2f:13:ab:e6:4e:ec:f2:ac:4b:ac:6d:a8:
87:e5:80:c1:7f:98:ad:42:3f:22:85:5a:56:35:de:
a2:4c:4e:e4:56:e4:ef:f1:21:e4:12:7e:1e:dc:b3:
bf:56:e5:0b:2b:3b:c4:a4:00:0d:87:1f:c8:33:0e:
8d:86:27:d6:40:f6:c9:e1:e7:60:8b:5a:97:68:77:
ca:fb:5c:09:10:28:e4:68:66:1b:bd:5b:42:e1:53:
d0:90:be:f0:78:ce:77:cd:aa:80:54:b0:fb:25:95:
51:ab:a3:2d:e5:47:ae:60:29:59:4a:aa:18:dd:f2:
43:43:c9:50:cb:05:6c:c9:48:9d:91:47:fa:3f:5d:
2e:7d:6e:15:4a:20:af:53:e9:e7:97:2f:76:86:a2:
28:f9:71:5a:10:9c:eb:d4:98:68:4f:be:eb:b2:8e:
45:8a:37:a8:4f:85:ff:b6:5e:53:5d:14:e2:fc:f0:
e8:9d:5f:99:8a:31:85:e7:29:11:d7:fb:a9:a2:da:
c4:0c:0e:1f:a9:bc:cb:44:f3:99:31:d6:e6:0c:38:
61:a4:4f:46:25:93:ae:ca:e7:45:35:1b:5f:37:6b:
11:c5:09:7c:17:e5:4c:53:69:c8:72:ea:e8:1e:42:
52:d1:a9:61:4a:7c:50:45:c0:b2:83:2c:ff:06:d3:
b4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9D:04:F1:16:8E:65:97:6D:1A:D6:E8:EC:C5:C0:14:14:78:1E:D5
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/377530C4DAAE11ECA024B6D3F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/377530C4DAAE11ECA024B6D3F1222468/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328164
sbgp-ipAddrBlock: critical
IPv4:
102.36.248.0/22
IPv6:
2c0f:ebe8::/32
Signature Algorithm: sha256WithRSAEncryption
2c:63:38:e4:c7:bc:ce:8d:61:30:8a:dc:9a:7d:e5:ce:7a:db:
21:7e:0f:86:d4:41:99:14:4b:6f:9d:79:02:a4:c0:3d:4e:bf:
64:9d:cd:70:82:a8:d7:30:1c:da:73:45:a0:2f:65:0a:19:c1:
b5:43:85:81:6e:26:31:4c:e2:93:3f:1f:f0:c3:d6:9b:d6:c9:
55:77:f4:10:f0:e7:76:81:8b:1c:0f:66:6f:44:55:e4:ac:24:
fb:3f:ca:4e:f9:cd:d8:04:61:47:2c:9a:71:41:a0:26:84:46:
26:35:00:3f:c1:e8:5f:35:74:59:af:81:7a:01:e5:19:2a:7d:
4d:9d:32:8d:d2:1d:d5:47:87:76:bb:90:8b:1d:6f:37:d8:93:
f9:90:66:49:09:f2:a1:87:64:44:4a:6d:af:5c:a4:a3:fc:ce:
1e:88:f6:76:3a:db:71:06:c1:67:13:ec:f8:1c:7c:34:29:41:
75:7d:0c:b7:11:60:3e:cb:97:0c:e9:10:52:14:dd:35:46:2b:
41:56:65:5f:25:8c:2c:57:b9:51:5b:e0:23:ed:59:d4:5a:c6:
c2:d2:df:a8:5d:a3:eb:4a:1e:e4:60:17:0f:5e:57:9a:93:0d:
c3:12:76:b0:0a:82:64:2a:9f:4b:6b:ce:e3:cf:58:8f:5c:0f:
b6:96:eb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:53:21 2025 by rpki-client