Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
File: Sh_na037AXO28xt_NqWpguCNnBk.cer (raw, json)
Hash identifier: /65MnPKFIpSYRGcr1EE1pY6GI8PrafjSKzbOmwu4XJk=
Subject key identifier: 4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2FEC
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 02:53:17 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328748
IP: 102.207.36.0/22
IP: 102.216.156.0/22
IP: 102.221.176.0/22
IP: 2c0f:e9f0::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12268 (0x2fec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 02:53:17 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F366FE6CAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f3:0c:b8:1d:a5:23:4b:86:8a:fe:5e:a0:ef:
49:3a:0c:e7:17:bd:00:1f:a7:49:bf:a9:59:5b:06:
73:19:31:92:41:65:27:ab:33:c2:74:55:ef:77:2f:
87:90:ea:41:a5:d6:70:e0:2b:fd:67:a7:c5:ee:c5:
b1:a0:00:3d:85:43:2d:b6:40:53:23:db:0f:60:96:
11:d4:92:24:14:94:02:7a:ee:24:7d:92:06:2f:51:
5f:f0:59:c2:3d:a1:16:9d:3c:bf:5d:c8:15:7b:62:
3b:04:42:cf:58:c6:68:92:a3:d2:aa:72:d5:f6:25:
53:23:3c:2e:f8:9d:c7:3f:e1:6e:4e:28:38:8f:65:
e8:c3:4c:c9:ca:f4:34:41:e3:d2:ae:10:cd:25:1b:
14:ca:e5:e8:e5:c2:48:8f:11:55:42:b8:ee:5b:b1:
99:04:29:1f:93:9c:81:bd:c6:0e:c6:10:af:4e:ea:
20:ce:d4:24:08:6a:db:6b:a8:da:99:5d:f8:c5:0a:
fa:5b:24:e4:35:2a:f9:45:8a:b0:82:c2:ac:20:37:
13:ca:4e:da:7b:0e:47:62:ca:91:b0:40:a0:fe:87:
3b:90:d9:fd:64:b7:e0:81:fa:2e:03:80:50:b9:a7:
84:3f:0e:21:37:ef:df:5f:c9:76:96:4c:12:46:37:
da:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328748
sbgp-ipAddrBlock: critical
IPv4:
102.207.36.0/22
102.216.156.0/22
102.221.176.0/22
IPv6:
2c0f:e9f0::/32
Signature Algorithm: sha256WithRSAEncryption
84:60:cf:f9:bf:f3:6b:dc:dc:8c:02:8d:b0:5c:be:2b:9f:c1:
c8:42:da:9a:7a:12:87:7f:a4:df:6b:68:4a:de:51:55:ed:b0:
fc:f0:80:60:c1:46:08:de:7a:ed:94:ac:ee:85:ba:79:58:b5:
be:ea:cc:c0:da:4d:67:51:2d:1c:41:e2:1f:71:e3:79:b6:e3:
a0:28:ee:de:f7:32:ab:44:23:3e:38:a2:ab:d4:a0:eb:a6:db:
f1:2c:f4:0a:37:7a:c8:20:c6:a4:2e:e2:10:a0:43:08:b5:b1:
27:38:1e:59:bc:34:ac:81:1a:45:96:08:f6:1b:4f:bb:8d:2d:
75:10:87:ec:21:55:49:37:a3:4e:51:27:28:bb:61:0b:9b:a6:
50:d5:b7:e9:d3:01:0e:eb:f8:7e:41:f4:42:fb:15:69:0b:3e:
50:63:ce:2a:94:65:a6:75:5f:43:9d:80:20:52:69:d8:e6:6d:
da:ad:d5:b6:43:71:60:2f:68:d5:4f:07:5c:8a:42:0d:26:a9:
9d:12:3d:e7:99:c0:20:0a:bc:57:bf:69:a3:e6:04:af:5a:f5:
b6:15:98:b7:ed:10:f0:38:74:cd:3c:af:9b:5e:90:4c:47:42:
0d:42:b9:86:d0:33:92:08:9a:88:8d:9b:a2:35:56:fd:ff:ef:
8c:bb:b8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:51:18 2025 by rpki-client