Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/On6mEjuyi5myrc0qWftjiY7momU.cer
File: On6mEjuyi5myrc0qWftjiY7momU.cer (raw, json)
Hash identifier: mD6RaLiCxAdw0b0UJ0PYBvG9Q+bgIYqBqYN5hFfyrqk=
Subject key identifier: 3A:7E:A6:12:3B:B2:8B:99:B2:AD:CD:2A:59:FB:63:89:8E:E6:A2:65
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3422
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Fri 31 Jan 2025 07:21:11 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37328
IP: 196.43.215.0/24
IP: 2001:43f8:2f0::/48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13346 (0x3422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 31 07:21:11 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36A0B3BAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e7:92:31:84:f2:86:92:fc:14:25:d7:76:1f:
54:af:c9:bc:b1:83:fa:c6:d1:dc:c4:40:40:ad:4c:
07:66:9a:e3:88:12:50:23:f3:65:13:8c:2f:e6:e3:
00:26:a7:0e:c0:97:f0:e9:d1:4f:ee:7d:80:8d:2a:
dd:cd:e4:bb:77:73:49:b7:5a:fc:ac:cb:b0:46:25:
41:73:b6:ef:59:75:bb:6b:f7:47:17:e2:91:87:a2:
44:ad:cd:ec:f4:eb:f9:63:08:a2:42:e0:95:94:6b:
b4:2c:2c:cb:70:80:ad:2d:d9:07:c0:88:09:e0:d0:
26:0a:05:d5:69:c4:21:d2:a4:d0:50:80:66:ac:7b:
23:89:be:a3:12:a7:6b:b2:cf:b3:02:1c:63:42:78:
eb:32:9a:fb:5c:57:96:20:d6:b7:6f:92:95:c7:82:
ad:25:a6:29:1b:0d:c3:44:06:c9:53:8f:ef:2c:a2:
ad:44:84:f2:05:3f:4c:31:b1:99:27:2b:a7:11:75:
91:34:2f:1a:25:dc:c2:28:78:75:e3:b7:54:6e:1d:
a1:b3:b3:c1:a5:ef:91:55:ea:a7:d6:ab:6e:e5:c5:
e6:c8:f1:12:03:b5:35:95:b4:df:4b:96:d3:78:0c:
19:54:4f:ed:04:bb:a2:08:2b:cb:73:f5:9a:44:54:
db:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7E:A6:12:3B:B2:8B:99:B2:AD:CD:2A:59:FB:63:89:8E:E6:A2:65
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37328
sbgp-ipAddrBlock: critical
IPv4:
196.43.215.0/24
IPv6:
2001:43f8:2f0::/48
Signature Algorithm: sha256WithRSAEncryption
40:2e:7a:f9:10:d1:c1:e3:58:30:00:e6:85:f8:05:19:48:ec:
3b:70:34:d9:bf:1f:4d:15:39:d5:13:c5:b9:d4:b6:32:93:48:
31:b4:89:d9:7a:65:c4:75:4a:b4:48:1a:89:ac:7d:b1:15:22:
31:3c:fe:5a:93:b6:4c:14:5d:3d:1a:52:1e:f0:3e:dc:fc:1d:
c3:93:83:f1:78:a9:63:79:4e:4c:52:e7:86:98:ab:d5:ee:45:
74:72:fd:c1:19:4b:8d:bd:df:b4:e9:19:57:3d:06:35:3a:24:
27:ca:55:0f:c4:aa:ee:74:59:69:19:85:1e:17:74:6b:49:b0:
97:80:27:cc:0a:2a:ff:59:2a:b3:9c:c6:0d:0b:fa:25:42:e4:
2f:f4:13:d0:a9:1c:7d:3c:04:1c:d6:57:d6:f7:b8:d5:14:58:
43:1c:21:df:18:ac:14:c9:68:04:07:3f:1a:c7:b4:45:69:11:
2c:b4:c1:17:d1:0d:5d:2d:7f:6a:2f:71:a4:f8:0a:e9:62:37:
2b:ca:63:9d:6b:77:07:03:c1:4d:6e:3f:2a:4e:a7:2c:e3:1a:
44:2d:ac:2f:d8:3a:41:23:4b:dc:c2:50:f7:6f:26:44:23:61:
97:de:f7:10:30:7b:96:90:fe:95:e2:78:96:1c:9e:d8:b6:4e:
f5:ea:18:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:57:25 2025 by rpki-client