Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/TsI9Q07XmbNybP2OQaiJOGnVA6M.cer
File: TsI9Q07XmbNybP2OQaiJOGnVA6M.cer (raw, json)
Hash identifier: /JhRthzHMBHXYtNenp4NAz3cblzVanFlRzUUBIDkfmI=
Subject key identifier: 4E:C2:3D:43:4E:D7:99:B3:72:6C:FD:8E:41:A8:89:38:69:D5:03:A3
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 322A
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B87F4/B0DCA54A451511EFABD9FF90762E951A/TsI9Q07XmbNybP2OQaiJOGnVA6M.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B87F4/B0DCA54A451511EFABD9FF90762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 04:53:47 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37622
IP: 41.222.96.0/21
IP: 41.223.76.0/22
IP: 102.131.48.0/21
IP: 154.65.8.0/22
IP: 2c0f:f550::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12842 (0x322a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 04:53:47 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36B87F4AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:24:89:93:dc:dc:ce:e1:9f:13:39:53:76:6d:
14:82:08:e8:03:7b:82:18:d5:95:b6:f6:6f:a6:eb:
2c:fb:fd:c4:9b:62:a7:20:e0:10:f7:52:1c:c0:c7:
97:d1:88:d8:a2:1f:f1:75:57:74:b5:74:5e:68:0c:
51:bc:c1:f6:e6:f8:e4:3e:b3:7e:1e:07:1a:97:e1:
88:ce:4a:42:ba:a1:d9:3a:56:de:41:ef:44:5a:b1:
9d:21:10:6a:a4:4a:ea:fb:7a:3f:a9:24:6f:6c:4c:
10:2b:01:c4:87:e3:c8:f0:e6:c0:cd:17:be:ad:cd:
6f:0a:6a:f2:41:87:a7:67:01:e4:5e:29:50:e6:ad:
78:2c:ca:a4:2f:60:91:d3:fc:c9:b7:45:bb:06:ea:
ce:fe:bf:72:41:e5:3c:1d:ed:b0:d5:2a:ce:1c:ea:
fc:28:9d:98:f8:03:62:b9:05:9b:d0:1a:8f:be:13:
c9:99:49:1c:01:ce:c0:97:11:ff:a6:15:6a:6c:23:
c5:f3:95:27:6b:04:bb:2f:fe:ab:12:86:e3:39:b7:
57:c7:0e:a5:53:63:ed:cc:be:06:2e:34:52:d7:92:
04:2f:37:28:56:72:4d:f0:60:92:17:c3:26:4d:f1:
8e:eb:fa:bc:35:f3:ea:ba:a1:83:7a:80:f0:d5:9d:
13:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C2:3D:43:4E:D7:99:B3:72:6C:FD:8E:41:A8:89:38:69:D5:03:A3
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B87F4/B0DCA54A451511EFABD9FF90762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B87F4/B0DCA54A451511EFABD9FF90762E951A/TsI9Q07XmbNybP2OQaiJOGnVA6M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37622
sbgp-ipAddrBlock: critical
IPv4:
41.222.96.0/21
41.223.76.0/22
102.131.48.0/21
154.65.8.0/22
IPv6:
2c0f:f550::/32
Signature Algorithm: sha256WithRSAEncryption
36:a4:a4:61:14:1f:7a:ff:c2:c0:d8:92:ab:9d:a6:8e:f9:dc:
e8:7b:8e:8d:e7:9f:f4:85:c5:c0:b7:50:93:4f:8f:44:5e:16:
6c:da:9c:c6:9a:ce:a1:2a:50:c4:8c:65:e3:68:40:25:c4:d1:
49:48:bd:82:63:7c:57:71:25:ed:c0:07:59:48:39:7f:84:07:
e7:f2:e4:b6:83:56:23:c9:12:e8:2b:3b:40:35:90:26:a3:0e:
0d:a5:14:98:97:a4:ba:97:aa:10:d2:38:19:c8:53:5a:35:ab:
ea:90:fb:52:5d:da:f7:7e:f4:e4:e2:2d:35:21:df:e1:9b:92:
fa:20:71:8a:f2:df:b4:d6:30:ed:ad:2e:98:51:c6:92:8e:65:
9c:3c:be:a0:52:8b:03:15:fe:ad:c7:3c:70:5a:cd:cb:1b:08:
28:fa:27:9c:f0:8c:3e:d0:d0:fa:09:55:41:ae:34:31:25:55:
ed:e9:ee:d7:cb:95:16:68:84:72:e5:43:28:71:c2:c9:cd:77:
0e:3e:83:04:18:20:ac:54:bf:9e:7c:4a:07:63:ea:2e:59:e9:
d4:50:94:b4:ce:93:7c:60:b1:6f:f0:d5:7e:21:b3:c5:0c:cb:
66:83:f7:85:63:3d:b3:9f:14:b2:59:c1:10:ae:b0:b3:c7:af:
55:38:cf:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:44:55 2025 by rpki-client