Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/XugMfoiMcbMQJBh4C9bhClLRcIg.cer
File: XugMfoiMcbMQJBh4C9bhClLRcIg.cer (raw, json)
Hash identifier: Atb2jtFFNxYBXsedziHHkGjlp3FdpMheZu+SSGyvobk=
Subject key identifier: 5E:E8:0C:7E:88:8C:71:B3:10:24:18:78:0B:D6:E1:0A:52:D1:70:88
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2DD7
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/XugMfoiMcbMQJBh4C9bhClLRcIg.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:04:59 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328974
IP: 102.217.228.0/22
IP: 2c0f:5f00::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11735 (0x2dd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 01:04:59 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36364C2AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:36:0c:c5:1d:c2:d4:0d:3c:4d:24:47:f2:be:
a8:12:97:6d:f5:67:f9:9e:15:53:86:66:85:9e:5d:
5a:e2:98:bb:61:b3:35:2a:91:2a:38:82:d1:cb:0f:
a3:af:2f:c0:28:29:75:9d:ea:09:15:46:ce:be:72:
cf:81:b2:29:30:08:4d:6d:3d:cd:c0:05:46:eb:ed:
da:36:bd:ad:1e:71:ce:00:87:ec:cf:58:59:bc:14:
39:db:ea:c2:c5:fe:04:73:08:26:68:2d:56:ff:37:
82:bc:69:08:ef:63:d8:ff:eb:4b:bd:43:bf:6c:47:
1e:96:f0:0f:09:3c:91:3d:46:ae:da:70:14:37:9a:
5d:cd:aa:93:07:8c:28:98:ed:32:52:66:85:2b:2a:
14:31:f1:a0:bf:c4:9d:38:49:7e:12:98:b6:fc:96:
50:51:e7:03:22:f4:c5:8a:82:59:48:ba:e6:de:ba:
0e:07:e9:7e:2c:72:64:9a:27:a9:d2:e1:1e:15:13:
01:2b:06:8f:80:b8:9f:7d:3d:cb:06:a4:8f:30:f2:
1c:2f:50:eb:40:b1:8c:e1:b6:57:4f:a7:ab:f1:b8:
16:fa:f6:cd:f3:6f:84:b3:4a:8e:d0:9c:12:4e:62:
0f:f9:33:7b:e2:c0:3f:45:aa:37:60:d6:ed:a5:b0:
11:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E8:0C:7E:88:8C:71:B3:10:24:18:78:0B:D6:E1:0A:52:D1:70:88
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/XugMfoiMcbMQJBh4C9bhClLRcIg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328974
sbgp-ipAddrBlock: critical
IPv4:
102.217.228.0/22
IPv6:
2c0f:5f00::/32
Signature Algorithm: sha256WithRSAEncryption
ad:68:09:da:85:e4:7b:98:de:5d:ea:da:cc:1c:d2:74:fe:53:
85:fa:b7:3b:be:83:66:0e:61:d4:f0:0e:82:86:3c:8d:c7:72:
62:0b:5b:71:fc:dd:0f:1a:dd:a8:83:e6:90:bc:80:5d:1f:20:
0b:15:9a:9d:bf:1c:08:be:3b:38:de:e8:05:3a:4c:0a:ff:d7:
b4:2e:17:68:31:2a:39:31:6d:74:b9:12:f9:01:73:48:82:de:
23:87:b8:ee:65:d9:de:28:5c:7c:86:93:92:83:7e:3b:6e:b7:
0e:b5:c0:ef:5e:9e:df:69:f2:80:dc:98:26:5f:62:fa:5a:e4:
5a:96:f5:df:16:99:63:40:c9:8d:3e:5a:45:b2:78:dd:3c:07:
35:19:ad:9c:22:8f:32:f4:29:e2:bf:2d:b0:cd:15:00:96:6b:
b4:40:05:fe:39:16:e8:88:b4:b0:cf:a4:52:f8:34:fa:29:db:
1d:e9:f7:7c:ed:14:45:d4:3b:2c:00:a3:5e:39:ec:a5:40:dc:
12:ff:1c:29:c2:44:db:56:52:df:9a:2b:11:51:51:4d:f3:36:
db:c0:ba:d9:ec:9d:4c:a1:8d:af:7b:64:10:08:dc:72:3d:f4:
b1:19:5f:55:ce:1d:32:8b:06:a1:a1:bc:8c:aa:a6:a7:2e:15:
96:db:02:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:36:31 2025 by rpki-client