Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/W6sl6CIJkNVzzHXHuaKwqb9142A.cer
File: W6sl6CIJkNVzzHXHuaKwqb9142A.cer (raw, json)
Hash identifier: DtH//lycPFnZXz1eTXjEVzso9HNnjxgF+Rf/0iz5BWI=
Subject key identifier: 5B:AB:25:E8:22:09:90:D5:73:CC:75:C7:B9:A2:B0:A9:BF:75:E3:60
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2D07
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3618F6D/EF68296832EC11EB887FBC3BF8AEA228/W6sl6CIJkNVzzHXHuaKwqb9142A.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3618F6D/EF68296832EC11EB887FBC3BF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:18:19 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 327725
IP: 154.72.12.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11527 (0x2d07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:18:19 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3618F6DAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2b:c0:a6:8b:f9:f4:58:ce:7b:37:d1:92:c3:
7c:1f:c7:80:e8:65:9b:a7:24:e6:51:c1:35:4a:fd:
be:cd:89:0f:a3:e9:f3:4e:bf:02:70:2c:34:9b:8a:
7f:83:73:7d:17:fd:54:45:36:3e:d2:fa:c7:ff:66:
12:8c:72:01:3f:ea:9c:25:db:8c:65:1a:c7:f4:a7:
7f:b5:b2:f0:ce:e6:c7:f5:d7:5b:44:14:aa:c7:a7:
06:03:96:a0:cc:33:e9:e6:11:a9:39:0c:9e:dd:08:
d4:7c:9d:20:1e:ce:2a:fc:24:49:d7:95:8e:7c:dd:
ec:83:33:86:1a:24:cb:ef:31:b0:61:3a:96:ba:b8:
a2:9e:cf:bf:47:95:e1:11:65:b0:2c:8f:f2:eb:f7:
e9:33:0e:07:01:47:28:a4:54:22:0d:27:14:10:e1:
66:0d:cf:c2:6d:28:94:b4:f1:3e:00:10:d9:e0:bd:
0e:70:f4:95:d5:bf:b0:11:0a:7e:87:dd:af:26:19:
27:de:1c:23:f8:f4:b6:8f:82:85:15:f8:04:35:7c:
a0:cf:07:e7:70:a9:ff:d2:26:26:76:c7:37:03:2c:
bf:b9:2b:22:00:69:69:12:07:1c:21:eb:33:2e:77:
94:5e:58:34:7e:1f:61:fd:5e:ae:73:5c:66:aa:21:
66:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AB:25:E8:22:09:90:D5:73:CC:75:C7:B9:A2:B0:A9:BF:75:E3:60
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618F6D/EF68296832EC11EB887FBC3BF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618F6D/EF68296832EC11EB887FBC3BF8AEA228/W6sl6CIJkNVzzHXHuaKwqb9142A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
327725
sbgp-ipAddrBlock: critical
IPv4:
154.72.12.0/22
Signature Algorithm: sha256WithRSAEncryption
86:e1:fb:41:a0:a5:13:43:53:b4:d4:82:ca:e6:77:a6:d2:0b:
c6:ea:38:38:16:50:27:02:b3:be:e5:fc:27:d4:a2:b0:89:2d:
55:6f:0b:71:00:fb:47:70:8f:fb:ae:11:6f:eb:92:41:36:87:
78:9e:5f:e1:d2:73:93:d5:41:71:dd:13:aa:2c:27:f4:11:1c:
41:d6:e1:66:cd:88:d7:85:08:0a:5c:8c:29:28:58:07:10:f5:
fb:b0:8d:91:2b:c8:29:26:29:50:e7:b4:36:a3:19:83:33:78:
34:d6:50:84:40:e9:5e:2d:27:04:fd:86:86:fd:56:a7:8a:69:
ef:f1:b4:8d:ec:d2:a7:db:fa:91:32:2e:0b:51:3b:32:97:38:
e2:d3:be:12:84:72:5a:64:35:f5:89:b0:ef:27:dc:74:ad:5c:
cc:3c:b4:61:05:31:dc:3a:6e:b9:7a:94:6e:bb:bc:d2:95:4e:
4a:1a:30:61:c5:0a:61:34:41:77:f3:ee:0a:29:5d:89:f9:ff:
95:0c:73:4d:b2:ea:2f:27:55:ae:c9:75:6c:e2:6a:08:f2:12:
9f:12:35:ed:56:f7:2b:58:f6:6b:2a:96:ab:d9:5a:d7:05:1c:
60:71:1a:cf:ad:bd:c1:0c:1f:4a:e9:e7:4b:72:32:20:13:1d:
5f:f5:da:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:49:26 2025 by rpki-client