Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.cer
File: VZYI8ZBcF7LB64iBNMw4PI_U7vQ.cer (raw, json)
Hash identifier: 4L7cU8Ccvlx6I4nDlpJRIXbYLzzxK8AvH3Fc+FINcbo=
Subject key identifier: 55:96:08:F1:90:5C:17:B2:C1:EB:88:81:34:CC:38:3C:8F:D4:EE:F4
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2CF5
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:14:04 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 41.136.0.0/16
IP: 41.212.128.0/17
IP: 196.27.64.0/19
IP: 196.192.96.0/20
IP: 197.224.0.0/14
IP: 2001:4290::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11509 (0x2cf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:14:04 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3617560AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:e1:76:2d:9d:8c:6c:da:12:bb:cb:29:f8:
1e:ef:53:68:44:ed:be:e9:33:4a:52:0c:ed:6b:2c:
a5:63:94:81:b2:dc:c3:b7:41:f5:5c:75:a8:32:95:
d8:80:0e:09:12:53:42:c5:b4:f5:ef:14:2e:c6:5a:
66:7a:ba:79:18:72:82:07:88:48:b6:77:78:fe:89:
c4:e5:a1:2b:a8:f7:d3:fa:cd:93:56:17:44:96:c7:
06:02:21:05:5f:35:72:06:79:f9:32:d1:10:bd:31:
57:42:57:52:ee:31:4a:8f:08:40:df:79:17:3b:17:
38:30:5d:0f:9c:1a:d7:31:1d:5a:6b:0f:f8:ea:44:
03:f5:85:e3:d0:05:78:fd:f1:10:2b:c3:af:04:44:
58:08:7f:f3:94:96:fb:bf:92:1b:8e:1f:34:9c:06:
5e:88:e2:b1:59:32:c5:48:1f:eb:09:37:8f:5d:ac:
8e:f4:b4:b6:30:3d:55:62:fb:fc:9b:cc:23:93:0a:
ee:ae:56:3a:1d:43:7a:99:53:1e:dc:89:da:f0:86:
48:ee:cb:86:ba:24:ea:d3:d0:ef:5a:a5:6d:16:9d:
1a:e2:f4:cd:4d:0c:f6:5f:41:54:7c:52:1b:e4:de:
13:3d:51:25:9b:46:29:da:1c:84:a7:f8:d9:04:00:
76:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:96:08:F1:90:5C:17:B2:C1:EB:88:81:34:CC:38:3C:8F:D4:EE:F4
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.mft
sbgp-ipAddrBlock: critical
IPv4:
41.136.0.0/16
41.212.128.0/17
196.27.64.0/19
196.192.96.0/20
197.224.0.0/14
IPv6:
2001:4290::/32
Signature Algorithm: sha256WithRSAEncryption
15:4e:8c:dd:a8:06:ae:c1:c1:63:19:a9:e6:e6:53:b3:1f:3c:
8b:bd:7e:5a:09:b8:70:9f:6b:72:2f:21:b2:8e:88:6f:9a:e0:
b5:49:ef:7a:ee:cb:fe:1a:aa:10:e1:62:a2:e9:77:e3:ab:ac:
23:5b:30:24:4c:60:d9:15:14:aa:ff:91:d2:e2:c4:af:a8:38:
41:ef:e2:d2:2a:2f:a2:03:92:08:96:6f:06:a5:e2:c2:86:f6:
45:43:2a:40:de:69:1b:e6:a8:52:66:e5:ac:d3:0d:a7:0a:31:
a8:0a:f6:20:26:32:52:c3:e3:b3:11:e5:52:52:31:9a:64:3c:
e2:db:0a:da:02:cd:3b:6e:6a:7e:07:9f:f2:9a:3c:44:e7:05:
6f:81:0c:df:25:82:e5:b6:1e:43:6a:1a:14:99:b9:3e:37:7f:
51:81:79:fe:83:0c:3a:27:7e:8a:9b:f2:4f:8e:31:49:77:c8:
9d:28:bb:77:5f:e9:3a:57:3f:a4:96:84:e9:b4:5c:eb:8e:3c:
db:67:ee:4a:c0:ad:d2:b8:4c:60:e5:3b:57:34:8e:63:0c:c5:
c9:ed:41:48:d7:ca:48:a4:06:22:5e:aa:62:dc:91:62:8a:1b:
ca:ca:67:c4:14:ed:e4:dc:3c:38:97:d0:0a:00:95:1f:ac:bc:
5c:55:f1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 20:29:16 2025 by rpki-client