Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.cer
File: UVLUkpyoXtdyI6Jq-BRZqQIPEKU.cer (raw, json)
Hash identifier: YlgChgT3n5wTY6AjAjd+zAvsa31BYbscV8NUC13ZHDg=
Subject key identifier: 51:52:D4:92:9C:A8:5E:D7:72:23:A2:6A:F8:14:59:A9:02:0F:10:A5
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2E27
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F363FEF1/38E9720A799D11EEA7E476804AD9E6FC/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F363FEF1/38E9720A799D11EEA7E476804AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:21:28 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 102.215.56.0/22
IP: 2c0f:2a80::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11815 (0x2e27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 01:21:28 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F363FEF1AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ad:d2:75:9c:73:e9:9a:fa:a7:9f:57:e1:0c:
e1:25:2c:2d:0b:ae:a9:b2:b8:14:0f:8a:3e:65:89:
1a:64:bb:ad:d8:2f:3e:a3:18:89:66:0e:ae:08:10:
ec:68:31:48:95:a6:c8:02:6d:c6:45:be:ed:b4:92:
bd:ba:3f:92:f3:3b:84:57:8d:66:a8:b1:5a:0c:ea:
6f:02:59:d6:01:1a:72:7f:f9:ca:50:a6:66:9c:fc:
6e:a4:56:43:06:dc:12:7c:e0:f6:cf:d5:f2:a1:02:
9b:07:f1:78:71:9b:80:fa:c5:e6:ec:73:52:0e:e0:
72:bd:80:72:6f:0c:f2:1b:51:20:9b:ae:0d:2f:76:
fa:ae:fc:e1:10:97:23:2a:77:0f:77:52:23:7d:c8:
3d:02:4c:b8:18:54:04:56:df:63:4d:36:cf:0d:b5:
03:32:7b:ca:5d:39:46:08:f8:35:4b:34:be:c4:13:
10:c1:4c:54:48:1d:4a:ae:44:6e:e8:ef:ac:7a:f5:
60:71:fc:6d:63:10:1d:f3:c9:91:e7:c1:a7:64:35:
5e:64:a4:53:30:ba:b5:f9:29:af:dd:1e:cc:96:0b:
53:05:49:7b:e2:85:e6:3b:27:67:50:c2:48:89:4b:
02:a9:db:0f:ac:0d:84:3e:d7:4a:d5:3a:ef:08:1f:
20:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:52:D4:92:9C:A8:5E:D7:72:23:A2:6A:F8:14:59:A9:02:0F:10:A5
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363FEF1/38E9720A799D11EEA7E476804AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363FEF1/38E9720A799D11EEA7E476804AD9E6FC/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.mft
sbgp-ipAddrBlock: critical
IPv4:
102.215.56.0/22
IPv6:
2c0f:2a80::/32
Signature Algorithm: sha256WithRSAEncryption
4e:f8:7f:3d:f5:c9:7f:26:14:64:20:44:a6:45:68:26:2f:05:
54:6e:d7:f5:25:90:fb:43:6b:75:a2:67:35:18:8f:57:95:a4:
6c:5c:8a:05:84:f7:15:3c:e9:95:36:16:79:c2:88:36:d1:c1:
9c:08:c4:75:e1:15:3d:2d:97:0d:85:f7:04:31:92:6c:5a:e8:
79:8d:2a:ee:6e:35:b8:b9:97:8b:56:3f:91:7b:b1:db:87:7a:
6a:a7:20:70:27:43:6b:49:ba:91:29:51:b6:6c:a3:9f:82:32:
76:db:df:40:ad:5b:8b:da:fa:dd:53:c6:72:26:fc:2b:aa:d5:
f5:f1:26:36:ef:1f:f9:79:7e:31:0f:6b:b2:3a:18:19:7b:0b:
5c:bb:ca:1e:6b:57:69:e6:8e:1e:60:ae:35:13:33:4b:85:3b:
81:6b:e5:1b:2f:c6:5c:e7:26:ef:0b:c0:b6:3f:06:1a:8e:89:
7d:78:7b:a2:e6:fb:d5:64:2b:16:a2:1d:61:c2:35:53:86:90:
76:86:f9:e0:e2:c4:df:7a:98:1b:cb:04:b1:84:1b:48:39:43:
22:8c:00:12:2d:a3:f6:d1:88:a7:34:fc:3f:70:a4:19:2d:65:
9e:5f:66:c3:64:92:ba:a7:3a:97:34:5d:ed:cb:6b:98:66:8e:
05:d6:58:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:37:35 2025 by rpki-client