Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer
File: PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer (raw, json)
Hash identifier: aXtGUL3lyPxq3Ymg+1rJZNdfKCTEoeLfUa8yMISYfwk=
Subject key identifier: 3C:79:F0:FC:BB:B0:C0:41:C8:B4:F6:DE:E1:03:B0:25:19:51:6E:F4
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3141
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 04:03:38 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329227
IP: 102.212.68.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12609 (0x3141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 04:03:38 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3698125AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:01:41:ff:01:bc:8c:e2:d5:33:9a:7f:56:e6:
2e:16:92:9f:03:e1:d6:3c:15:c5:0b:46:2e:c8:a1:
b7:cb:0c:ba:7b:d6:7c:22:8b:3f:ba:ad:fb:67:ea:
93:0f:ca:ab:f9:f8:eb:0c:97:53:cf:9b:09:13:51:
df:b1:d0:75:d9:eb:cf:44:d8:c4:e8:2c:5e:d9:f8:
49:8a:6f:84:41:7a:e0:42:84:4a:5e:c4:38:bf:67:
5e:67:86:ee:cc:85:e4:03:f3:9f:e3:58:bc:33:f7:
9e:7d:9d:10:b1:88:11:e3:bf:05:2f:94:96:bc:b4:
d8:e9:8f:1f:61:0b:ef:40:be:e6:63:cd:34:e3:7e:
6c:de:7d:2c:11:69:dc:c7:c6:c1:84:a4:a4:5b:d2:
40:b6:0b:0b:3f:d6:fc:8a:cc:c8:30:5b:96:5a:e2:
21:ad:6b:97:aa:fe:80:06:70:da:2a:f6:e1:68:83:
8a:7a:4d:ba:ce:c0:62:cd:c2:72:c5:eb:d6:23:e3:
df:fa:5d:2a:76:3d:9f:b3:b0:53:6c:c0:83:b7:c7:
23:2e:24:4a:70:10:78:2e:8f:e9:05:ce:36:b3:b4:
57:bc:b4:0d:f1:32:80:1b:7d:b4:03:82:ad:b8:9a:
a2:33:fc:51:25:43:94:7f:eb:fd:61:4e:fc:eb:83:
65:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:79:F0:FC:BB:B0:C0:41:C8:B4:F6:DE:E1:03:B0:25:19:51:6E:F4
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329227
sbgp-ipAddrBlock: critical
IPv4:
102.212.68.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:b5:4c:33:56:c4:4f:f5:45:6a:e5:3f:7b:ce:13:87:94:25:
38:8e:11:90:a2:aa:ea:8e:01:f7:89:fa:02:10:00:12:8e:2d:
42:2c:3f:95:9d:a6:1c:c8:99:34:5f:66:e2:10:e5:61:2e:5a:
61:4b:64:7a:c0:73:9f:1c:2b:ab:f6:aa:4c:3b:8c:e4:22:e0:
0d:41:59:07:c3:cb:b2:d4:df:24:96:11:00:8f:a1:43:41:1b:
47:8a:2a:67:89:ea:4b:a1:ce:67:a2:82:b9:be:c4:92:9f:49:
44:dd:70:33:55:08:8f:45:a9:a0:8c:57:12:24:cf:14:3d:23:
c6:43:fd:4d:28:e1:60:a7:a4:fe:fd:81:80:f6:0d:45:25:11:
88:3a:5b:75:ed:6f:43:95:83:41:b5:b9:13:50:95:5f:ae:6b:
fc:52:ea:0a:01:bd:f4:71:92:78:e7:26:e8:b3:5d:88:13:d3:
d9:30:33:78:fc:99:b0:ab:c6:7d:60:34:86:99:85:d3:1b:b0:
ef:35:71:25:80:51:0b:38:7d:de:c1:25:08:c8:27:41:e0:ec:
1c:2a:a2:f4:c5:b6:53:57:60:f4:d5:ef:95:bf:0e:05:70:42:
5a:7f:1b:b3:28:92:cc:58:84:e5:5c:0e:67:26:06:db:7e:5b:
8b:97:54:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 00:05:43 2025 by rpki-client