Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/U0PDi98uSRgxOaWKxC8Rb6mWc80.cer
File: U0PDi98uSRgxOaWKxC8Rb6mWc80.cer (raw, json)
Hash identifier: 9BXBkNZfuInAfLHgxx8+3+oedZRbHSAUexkahqSU1Ss=
Subject key identifier: 53:43:C3:8B:DF:2E:49:18:31:39:A5:8A:C4:2F:11:6F:A9:96:73:CD
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3272
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:09:05 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328257
IP: 102.22.112.0/21
IP: 2c0f:2180::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12914 (0x3272)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 05:09:05 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36EADB7AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e2:a9:28:68:91:b7:b8:43:62:10:ac:db:44:
d1:c3:8c:d6:46:d7:6a:81:cd:a3:28:88:19:12:1f:
d9:b7:2c:fc:3b:a9:41:e1:35:19:1f:1f:1c:94:c7:
9f:ef:52:09:bd:52:f4:b4:76:d8:85:78:86:31:99:
97:a6:40:b2:88:36:44:a6:48:c9:71:41:7c:d4:a1:
7e:ee:a3:dd:2a:c6:78:1e:d3:5b:6d:be:ba:b5:da:
ce:64:69:11:2c:80:37:0b:9d:2f:48:49:ad:42:a7:
a2:e2:af:49:e2:e4:54:5a:59:eb:f6:df:c4:20:1d:
a2:96:99:58:9b:aa:db:9a:54:e7:22:1d:25:8d:d0:
1b:fa:1e:8f:52:fa:61:7a:6a:ad:9d:f3:a0:c4:67:
6d:4b:d4:6e:f7:8a:de:5d:b5:cd:3f:18:30:65:89:
e6:20:8b:23:a4:f6:82:ab:d1:13:98:d2:6a:ee:28:
74:90:d7:05:65:31:8f:ac:d9:a2:57:11:74:39:1b:
02:6e:74:d3:bb:31:e2:94:6b:3d:49:6e:e6:71:14:
d4:3c:38:de:21:34:ef:0d:91:d8:a6:96:01:58:3a:
86:8f:bb:4d:e3:44:87:a0:07:f0:c3:3c:99:ca:26:
29:d9:aa:97:9c:92:e8:ce:1f:bc:4b:3e:00:36:6a:
95:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:43:C3:8B:DF:2E:49:18:31:39:A5:8A:C4:2F:11:6F:A9:96:73:CD
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328257
sbgp-ipAddrBlock: critical
IPv4:
102.22.112.0/21
IPv6:
2c0f:2180::/32
Signature Algorithm: sha256WithRSAEncryption
26:fa:45:80:9d:d0:cd:c1:0a:8c:ef:71:1e:e1:23:68:2f:2f:
11:f5:92:c3:89:7b:48:74:31:a9:b2:95:78:70:e5:57:1e:c3:
e2:1f:b0:98:e0:a9:e9:2e:4e:8d:69:c2:cf:bc:28:99:c5:1a:
00:57:32:da:e3:86:1f:65:13:0e:f9:90:fc:cf:29:60:d4:99:
b0:5a:f3:0d:b7:b4:2f:95:5c:87:7d:3f:4e:b6:3e:98:5e:9a:
d7:7f:fb:06:0c:5c:86:94:df:53:65:43:99:30:42:32:54:bb:
e9:23:72:33:33:86:5a:3a:a9:fb:e3:ab:ab:19:10:0e:af:a3:
94:fb:0b:23:2d:18:74:16:66:ab:35:9d:96:6f:d8:c2:26:da:
d7:11:18:c5:26:43:57:9a:f2:c2:a7:76:81:3b:2e:24:8d:4d:
c1:f9:4d:8e:4d:c4:06:68:ea:12:37:64:77:3d:b9:a7:b7:ff:
14:26:dc:05:3a:3e:ce:15:90:fc:7a:d0:40:66:b8:d1:e8:aa:
9c:73:fa:d4:a9:f3:98:e5:51:f4:97:d8:9f:c2:0c:9d:2e:34:
12:37:e6:7b:33:96:e8:47:90:22:d5:44:f2:e8:ac:82:49:5d:
c8:7d:d4:e3:7f:e8:73:35:4b:fd:ab:94:98:49:23:80:27:cd:
dc:48:e9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:40:34 2025 by rpki-client