Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer
File: UD0YKNTvDNxjpYpU9cDJktI7wao.cer (raw, json)
Hash identifier: xUSKtPVah+OyIqEP/7p+u61rRcr2/na5prXBXy97uho=
Subject key identifier: 50:3D:18:28:D4:EF:0C:DC:63:A5:8A:54:F5:C0:C9:92:D2:3B:C1:AA
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2D0B
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:19:15 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329182
IP: 102.213.88.0/22
IP: 2c0f:2980::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11531 (0x2d0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:19:15 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3619AFBAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:94:f3:1c:87:ad:2b:d9:e2:12:45:99:a9:
09:35:7d:f6:0c:4e:7f:dd:5c:b6:5c:03:93:88:00:
25:0e:7b:c1:3e:1f:a9:0e:0e:1a:2e:5f:f9:e5:f5:
8a:86:36:6a:33:a7:48:2d:89:50:68:44:65:ef:75:
fe:b2:d4:e2:aa:23:f6:4c:5d:64:cf:d3:5f:61:45:
ca:f5:29:f3:67:8b:d6:e8:d7:5c:0c:8b:ef:f0:05:
7c:d7:f5:0d:ef:0a:62:48:d9:86:a5:1f:d3:e4:40:
8d:4f:d3:f1:7d:57:9a:8b:14:d4:7b:a2:50:ab:0a:
11:0c:41:e5:43:c5:b1:a9:7b:72:e4:56:64:68:7b:
d6:a9:c0:0f:67:32:75:3f:0f:6e:2e:72:3a:31:88:
f0:f3:00:e2:89:55:6c:b3:56:f1:bf:51:12:84:3c:
e5:d2:1c:43:30:61:e6:c0:47:63:80:34:63:cd:b4:
72:85:5b:74:c4:8e:70:9e:e3:0a:29:84:8d:95:9f:
fc:3b:37:bf:6f:f1:33:7b:70:6b:c6:1e:30:88:bd:
c8:94:fc:79:2b:84:4a:e2:ac:bf:53:91:1d:cd:53:
b2:ac:22:f3:c6:82:88:09:9b:a4:cd:7b:a2:ad:fa:
a3:36:18:f3:cb:84:18:37:e7:bf:d3:d3:e9:4e:fa:
6e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3D:18:28:D4:EF:0C:DC:63:A5:8A:54:F5:C0:C9:92:D2:3B:C1:AA
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329182
sbgp-ipAddrBlock: critical
IPv4:
102.213.88.0/22
IPv6:
2c0f:2980::/32
Signature Algorithm: sha256WithRSAEncryption
b7:83:2d:ff:a3:79:11:a6:12:29:59:6a:57:6d:28:90:59:83:
e8:c1:4d:2b:5a:68:72:f6:6c:22:42:05:cb:2c:83:92:01:81:
59:10:bc:77:3d:fe:bd:9c:ec:28:e7:61:d1:66:b6:3e:85:90:
b3:f2:0b:c7:99:c4:2d:5f:89:70:4e:42:39:43:dc:4d:6d:4f:
e3:19:1e:e7:7f:81:48:99:6c:09:ca:89:3f:da:97:ae:5d:4b:
73:8a:34:a0:14:db:88:0d:66:fd:e0:07:c6:a4:de:f5:b0:66:
cb:60:e3:ba:ef:33:88:b2:af:3f:1e:a6:3c:c9:45:0c:9e:b5:
76:29:ae:b1:d5:3c:4b:9c:8c:5c:a4:03:4e:40:8c:c6:41:94:
15:7f:12:74:66:2a:39:fc:97:9d:5e:cb:a0:b5:19:a2:6c:a6:
74:df:5a:8d:d9:35:19:3f:b8:22:ff:2b:00:db:4c:9a:c8:d0:
fb:0c:2f:6f:df:3b:e8:88:95:6a:ea:28:e5:84:bf:e1:3d:5a:
08:96:22:5f:db:9a:fe:6a:c8:d1:a1:8f:52:a0:2e:d1:e0:6a:
ba:c0:fe:5c:63:38:f7:0f:a4:87:07:7e:d0:97:73:ae:85:22:
5b:17:5b:85:46:d1:f9:1c:e2:7e:a9:c5:a6:7b:b2:0e:cf:17:
48:8e:70:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:45:50 2025 by rpki-client