Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.cer
File: Oo8wjBHfLbt0_rbMWcZkCYbJy2U.cer (raw, json)
Hash identifier: 5RF5iqBsUijW3EKRVHkcllIdXOJZH1c3aKxjm+hX4wQ=
Subject key identifier: 3A:8F:30:8C:11:DF:2D:BB:74:FE:B6:CC:59:C6:64:09:86:C9:CB:65
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 31AA
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 04:26:21 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 327960
IP: 102.219.144.0/22
IP: 2c0f:f2a8::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12714 (0x31aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 04:26:21 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36FC328AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e4:8b:f7:1c:8c:7e:72:0b:01:3c:63:11:ae:
ce:d1:5a:23:ae:92:94:e5:d0:1c:f8:b7:83:57:3e:
44:3c:a8:e5:1b:87:7e:cb:fe:fb:99:f6:b4:c4:c7:
6d:2c:50:ba:2b:c5:87:fb:d0:53:57:53:4f:a2:c1:
08:41:15:b2:9c:5d:80:9c:04:f5:45:1c:30:94:50:
84:99:55:54:a3:5f:93:1c:5c:66:a2:ae:c9:bb:93:
48:22:9c:d6:8b:82:0e:b3:4a:ce:99:8b:29:86:e0:
96:43:c9:1d:7f:7c:29:3c:2e:dd:47:fc:cb:8a:2b:
59:c7:a9:70:bf:96:cb:38:4b:79:65:74:02:a6:c1:
a0:cb:ac:a2:cc:87:e7:3f:8f:d6:40:e9:bd:85:37:
eb:d0:86:68:03:cc:de:46:c7:c4:83:86:78:ce:84:
4f:f7:7c:5e:a4:20:10:3d:fc:b8:e1:1a:68:4d:70:
0c:19:e8:2d:e3:ce:6d:95:f7:b3:2a:28:ea:e5:34:
91:d0:2f:80:df:c4:c7:a9:64:d3:a8:27:2f:53:7c:
24:ea:7b:28:25:3c:18:3f:28:7e:38:e2:88:4a:07:
c6:8a:2b:8e:66:13:77:40:95:0d:d3:a3:1a:2e:76:
91:4d:23:e6:7f:00:a6:25:6f:61:b5:56:eb:7b:2e:
73:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8F:30:8C:11:DF:2D:BB:74:FE:B6:CC:59:C6:64:09:86:C9:CB:65
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
327960
sbgp-ipAddrBlock: critical
IPv4:
102.219.144.0/22
IPv6:
2c0f:f2a8::/32
Signature Algorithm: sha256WithRSAEncryption
10:dc:fc:2b:22:02:3e:aa:cd:5e:94:8c:43:7c:a7:c0:d6:55:
0f:1b:36:61:09:0c:86:42:4c:bf:d0:ab:1f:6d:9c:99:5a:7a:
1f:36:68:12:a1:4d:29:e2:23:f2:e5:f8:83:9e:62:9a:8f:cb:
48:29:b7:89:fc:42:f8:f3:b4:a6:f0:ee:b3:d0:54:9e:9b:16:
6f:01:5b:a3:ea:9e:9b:f2:f8:8e:06:67:6b:97:2c:6c:fd:8d:
c3:5a:63:9a:32:85:6c:66:4d:0f:ab:33:fe:38:8a:ea:83:f1:
b7:de:17:d4:cd:96:57:18:d9:60:de:18:ec:f4:6c:fe:6b:36:
93:27:82:b1:ad:0b:85:d9:f4:f8:48:62:5d:e1:90:b2:f3:39:
07:df:fd:78:ee:67:98:68:c2:33:4e:8b:a9:c6:c5:13:27:ed:
88:f9:37:20:65:47:44:bb:bc:61:86:9b:92:d3:ee:b2:e3:4a:
05:11:fe:81:6b:4a:c5:7b:a2:28:6c:0b:94:fb:70:36:b0:67:
0f:b9:a7:3d:95:17:2b:11:f9:55:96:d8:d8:d5:13:a2:8e:ab:
f5:1a:5d:c5:d2:44:cf:d7:3a:66:fb:52:15:d0:3b:d3:93:80:
9d:79:90:01:91:c4:1f:fb:3f:8d:9f:c3:87:51:13:c3:65:06:
27:35:b3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:51:20 2025 by rpki-client