Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/X5HjfhfEpYcVoBr_CSmLsW8jgsY.cer
File: X5HjfhfEpYcVoBr_CSmLsW8jgsY.cer (raw, json)
Hash identifier: KGQmjHDYxunO7TJKb+F+2NOjVG8iic53Adwh8+hSmfA=
Subject key identifier: 5F:91:E3:7E:17:C4:A5:87:15:A0:1A:FF:09:29:8B:B1:6F:23:82:C6
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2D79
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:45:22 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329082
IP: 102.215.52.0/22
IP: 2c0f:6080::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11641 (0x2d79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:45:22 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F362A252AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:12:28:3f:ae:31:32:57:5c:6e:1c:86:8f:e3:
de:9e:34:48:1a:52:96:e9:cc:fd:f6:29:c5:28:e8:
52:8f:20:02:1e:a0:6b:c5:73:ef:49:51:2f:e5:4d:
c5:e3:89:e3:b3:df:76:7a:58:1b:fb:ce:e2:1e:19:
f2:df:7a:2b:4c:6d:f7:e4:e9:0f:f8:7d:bc:aa:fa:
e1:0c:7d:1f:95:61:f7:39:0a:01:2e:52:e1:3b:f8:
74:a0:2b:db:00:ae:61:59:d3:73:f7:b4:5e:4a:59:
f5:64:39:8a:73:d0:ea:96:9e:ce:9d:a8:4e:bd:10:
a9:e0:d4:2d:84:4d:82:86:71:32:f1:da:79:41:1f:
29:90:91:2f:92:07:c2:5e:b1:ac:67:05:64:9b:5f:
1d:44:18:8d:9a:c1:a1:e8:db:19:d7:07:cb:63:23:
5f:92:d0:73:a8:55:c8:4b:4f:b5:73:2a:5f:8e:9a:
3b:05:93:3a:3b:72:9e:67:6c:32:7b:d6:de:e4:96:
d4:52:bc:57:e4:ce:17:2f:87:46:e5:3a:94:6b:84:
a6:f6:a5:45:4f:40:fa:d7:1b:be:17:b0:7f:85:f1:
31:d3:14:fc:2d:17:99:d5:20:04:0e:87:fa:ac:ea:
a1:f2:71:a3:60:6e:e6:8f:ae:46:48:ba:00:ee:67:
ca:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:91:E3:7E:17:C4:A5:87:15:A0:1A:FF:09:29:8B:B1:6F:23:82:C6
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329082
sbgp-ipAddrBlock: critical
IPv4:
102.215.52.0/22
IPv6:
2c0f:6080::/32
Signature Algorithm: sha256WithRSAEncryption
87:34:6d:59:0b:f2:7b:c5:65:bb:d4:ab:8d:95:92:cd:98:a1:
73:48:2d:19:a4:26:34:bb:7f:0a:2f:b1:26:a0:bc:fa:60:d0:
13:d9:b0:3f:0a:b3:b6:55:97:bd:71:d5:03:53:a6:48:51:2f:
47:65:6c:f3:a7:56:e5:05:16:11:83:0a:c2:b3:b9:bf:6d:9e:
c6:17:c3:33:5d:ef:fa:bb:c6:0b:3b:04:d8:22:69:05:85:b6:
60:29:41:29:3a:a6:91:f6:7a:0f:a2:74:58:c3:7a:06:e1:45:
be:9b:87:c7:8d:7c:2b:a9:2b:97:1a:33:ca:43:1f:40:1f:59:
2a:77:e5:2d:6f:51:cb:69:4e:d1:0f:6d:23:31:54:e5:16:30:
1d:2f:0d:7d:53:16:5c:e2:35:38:c1:e4:36:13:43:7e:d5:f8:
37:6f:04:45:23:72:c1:0e:b6:79:ea:78:32:a8:d6:0d:1c:5f:
e3:2b:d8:71:2f:c6:de:b8:5c:db:bc:99:80:33:0f:06:46:23:
81:24:f0:16:ae:05:90:37:90:3c:b5:4d:7b:c5:c8:9b:cb:10:
24:49:d8:b7:05:0e:e5:40:cc:bf:a5:fd:38:00:25:8d:5a:63:
4b:12:7d:dc:93:96:7e:54:9f:2a:b5:d6:69:c9:fc:46:52:85:
7e:97:9e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:56:24 2025 by rpki-client