Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/R_ufMc9PLRlxHITTLiO9AG4ALpY.cer
File: R_ufMc9PLRlxHITTLiO9AG4ALpY.cer (raw, json)
Hash identifier: 4c2SscsPiNPwCh+g3hTQ7ImUWCWjRhzGuJIy60iP7d8=
Subject key identifier: 47:FB:9F:31:CF:4F:2D:19:71:1C:84:D3:2E:23:BD:00:6E:00:2E:96
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 31AE
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 04:27:12 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 36876
IP: 196.0.0.0/16
IP: 2c0f:fb00::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12718 (0x31ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 04:27:12 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36A36C8AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b3:c3:af:0a:60:15:a2:9e:9d:58:a3:be:a9:
d2:57:53:d9:3b:42:e7:a4:b4:0e:4c:fe:29:84:05:
a2:11:d9:04:1e:ea:b9:a4:e4:25:f5:68:e5:07:91:
37:89:b3:ac:74:5f:e7:9e:81:05:af:a8:a3:58:56:
00:b1:a2:9a:1d:e1:9c:94:74:ba:77:a9:b7:fc:c9:
0a:1d:63:68:e9:3d:7f:95:74:cf:c0:6d:b2:0c:cd:
6e:15:76:85:e7:ac:d4:3f:69:8e:8e:f2:bc:b8:37:
fe:4a:fc:21:f4:26:95:fe:16:da:3d:73:05:48:46:
6f:ad:b8:92:3a:2b:f2:d5:63:ce:68:52:71:2d:fa:
89:7a:e0:d9:0f:d3:d5:3a:99:60:8c:34:3c:f2:17:
3d:d3:16:0b:a3:06:9d:78:92:d7:d3:97:26:b9:e6:
04:28:7c:5c:73:86:aa:b1:de:50:d9:99:c5:05:f9:
ba:0e:d2:da:5b:2f:6b:f8:d8:96:ee:37:41:4a:8c:
ef:25:45:4f:41:3d:4c:1c:28:6e:d8:54:36:64:0d:
06:ff:b1:de:3e:1f:b8:70:4c:74:20:56:0a:21:6e:
21:05:84:4a:ad:ec:04:ff:17:3c:7c:03:85:9d:3e:
60:9b:a5:b0:24:40:7e:2f:b9:6a:58:f0:cc:85:b4:
08:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FB:9F:31:CF:4F:2D:19:71:1C:84:D3:2E:23:BD:00:6E:00:2E:96
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
36876
sbgp-ipAddrBlock: critical
IPv4:
196.0.0.0/16
IPv6:
2c0f:fb00::/32
Signature Algorithm: sha256WithRSAEncryption
3c:ce:c9:e4:2c:e7:7c:0a:68:4a:f7:e0:af:f0:5a:20:4a:13:
78:07:82:07:b7:12:aa:db:91:36:ed:63:5e:4e:08:28:91:fe:
d4:fd:f8:32:a7:37:ae:66:37:64:b0:bb:23:24:ae:21:f8:27:
0f:9a:0e:9f:8f:7d:4d:ff:48:73:36:d5:41:39:1b:10:d3:eb:
a9:5e:2a:05:89:46:72:fc:7b:f0:5f:42:f4:3e:cb:e4:16:a3:
83:90:cb:70:51:8c:28:40:0d:fb:b8:fe:ce:82:e3:d1:01:fa:
7b:e0:c3:ec:3c:ca:2b:8f:f0:ac:f1:98:2f:73:a2:92:82:7c:
91:8b:91:d9:3d:c1:70:a0:77:98:80:7e:6e:9d:2c:b5:7c:73:
46:f0:7a:c9:cf:38:86:c9:d4:c3:bf:ed:88:b4:51:51:f4:02:
2f:80:c4:99:21:c0:21:fc:50:19:0e:bd:bf:b8:f6:7b:ff:ab:
b3:5d:8a:88:89:75:8e:ae:5c:71:c4:5d:eb:b7:fe:84:5a:ca:
fa:ba:27:39:63:b8:3d:57:45:9a:b1:7c:01:c2:26:20:13:8b:
a7:6e:35:6a:80:29:64:0a:85:52:f8:42:d3:e3:f3:b0:f6:f4:
3c:65:4b:6a:2f:b1:fc:8c:1a:2f:ee:2b:50:25:9f:69:26:d0:
80:2e:55:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:35:29 2025 by rpki-client