Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Ty5dBoUPqUuSIs9__nb4svMBISU.cer
File: Ty5dBoUPqUuSIs9__nb4svMBISU.cer (raw, json)
Hash identifier: n+6cJzZ4yRVsaC+zM5yGM4q43gHk0Q1WQy2yj0u/F0Q=
Subject key identifier: 4F:2E:5D:06:85:0F:A9:4B:92:22:CF:7F:FE:76:F8:B2:F3:01:21:25
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3343
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36E570F/A29FCCC0AF2B11EF88A7C19A762E951A/Ty5dBoUPqUuSIs9__nb4svMBISU.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36E570F/A29FCCC0AF2B11EF88A7C19A762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:55:50 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329238
IP: 102.212.56.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13123 (0x3343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 05:55:50 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36E570FAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c3:8e:a0:ea:af:9e:f4:4b:cf:ae:11:fe:f8:
e1:2a:78:3c:4f:97:cf:a6:86:25:db:e7:c0:4e:81:
25:c4:22:50:e0:e8:00:32:0c:5d:2d:9f:13:01:a9:
e3:0b:b9:77:4f:48:94:0d:b6:ee:38:50:2e:7f:0f:
1c:cd:8e:6c:a8:08:71:3c:73:12:bc:36:3b:47:85:
19:ff:32:50:77:5e:21:cb:e8:c8:d2:08:2f:79:bc:
0b:8a:18:99:a7:c4:03:58:4c:aa:76:89:6a:5f:e5:
ad:54:08:47:c9:18:09:71:f3:e1:ef:af:44:9d:82:
c7:3d:1a:18:5e:8a:00:7f:4a:9a:e6:a3:70:e9:5c:
eb:aa:5f:a3:6f:a5:e4:ad:3a:b2:fe:b3:21:4d:5b:
f7:20:61:65:54:06:65:19:4d:41:7c:64:55:04:07:
e8:47:c1:bc:ad:c7:bd:5f:e6:eb:48:61:5b:86:2b:
54:b4:a1:f0:f9:1e:fe:cf:7b:e9:83:87:c8:7d:31:
36:a5:87:bc:7a:3f:1c:2e:e3:06:14:8e:c6:a7:a0:
b2:b5:11:18:63:5c:c1:ab:a9:51:c7:16:ca:88:a2:
0b:ba:ed:85:70:9f:b7:b6:59:f1:99:8c:d8:c9:78:
a3:83:33:46:ce:7f:6b:ae:83:ef:0a:8a:52:f9:2b:
bb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2E:5D:06:85:0F:A9:4B:92:22:CF:7F:FE:76:F8:B2:F3:01:21:25
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E570F/A29FCCC0AF2B11EF88A7C19A762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E570F/A29FCCC0AF2B11EF88A7C19A762E951A/Ty5dBoUPqUuSIs9__nb4svMBISU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329238
sbgp-ipAddrBlock: critical
IPv4:
102.212.56.0/22
Signature Algorithm: sha256WithRSAEncryption
36:ad:b6:ad:f1:d4:66:ae:b4:f4:82:f7:2a:9d:bf:1c:0f:64:
f3:fe:83:99:ea:1d:ae:87:45:3e:50:dc:68:ed:c6:8f:66:fe:
c3:0a:8e:44:07:4b:3f:d3:ec:1d:18:ab:fb:54:07:2a:35:fc:
f5:a4:64:5e:02:53:20:c7:74:e3:bb:a6:bd:95:b4:7e:8b:c3:
c7:dc:fe:19:87:d2:20:46:c9:61:50:d3:ad:4a:4c:6f:76:20:
04:ee:92:87:cb:73:98:5a:62:e5:08:06:9d:05:b8:2b:42:76:
34:b9:88:5a:80:ed:b1:d8:c8:7a:d2:32:37:05:28:f2:28:83:
7a:5e:b5:f5:df:01:31:c3:bd:f0:6b:e5:94:2a:e0:1b:31:26:
4c:7a:be:6c:8a:56:86:25:4b:45:2d:cb:c8:d1:9e:94:94:b8:
8a:9b:7d:79:33:ea:f1:74:73:b6:73:91:4a:94:2f:71:ac:b4:
28:e3:6f:f9:98:90:d5:22:10:c6:06:bc:b7:a4:ab:a4:86:67:
17:4c:c9:18:b7:b0:be:5e:5b:b9:e6:13:f7:cc:3d:e0:98:48:
ef:e4:21:62:d0:d6:7e:fe:77:9b:05:54:d0:84:fb:5e:86:2e:
db:f6:f7:4b:bf:14:0e:9d:e2:d9:fd:b5:2e:bf:0f:60:ca:a7:
8a:e2:45:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:26 2025 by rpki-client