Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
File: Y-C7azQzzV1xpCsBab2wHiDkVX8.cer (raw, json)
Hash identifier: hocxS+2GK0chcuvUx8FEmA4iPjr57RQq3sXYQUYWxow=
Subject key identifier: 63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2D8B
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:49:40 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328528
IP: 102.36.160.0/22
IP: 102.218.100.0/22
IP: 102.220.212.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11659 (0x2d8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:49:40 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F362C18CAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:53:da:1d:c8:2a:6a:bc:01:b4:33:17:b4:1a:
76:c0:3d:d9:40:e2:29:00:f5:86:8f:f6:2b:ae:fd:
37:b6:d9:76:28:25:09:22:95:9a:b8:35:eb:cc:9c:
da:12:fc:f8:af:c9:58:00:29:9b:ad:f4:5e:56:ab:
7f:50:cc:de:13:f5:4c:49:36:3f:f5:45:fc:6b:4e:
5a:ac:3b:a7:0a:5e:63:78:d2:8e:a7:97:cb:61:99:
8c:77:a4:e8:34:63:d0:68:e2:ee:b9:ab:01:8d:ad:
c5:70:69:bc:40:64:69:8b:04:8c:8f:44:13:a0:fd:
f3:e7:d5:fe:81:e0:03:5d:e3:61:5a:06:0a:87:f4:
79:c2:b2:43:10:8e:62:bf:89:2f:b4:25:f8:c5:4e:
49:dd:4b:03:68:83:1c:5a:fc:a7:db:e5:49:9f:5d:
1e:7c:7a:d4:90:c4:28:95:a7:82:6b:fc:03:50:2d:
14:d5:38:a0:9c:2e:a1:db:29:99:a9:fe:d7:4d:7a:
54:f2:af:b1:86:22:1e:48:07:1b:69:90:96:65:73:
9a:15:6f:be:93:12:9a:cb:b2:74:91:3c:5b:e9:b9:
be:66:f2:2b:b4:1a:2f:1c:07:10:97:c3:a1:6c:77:
88:b1:b5:84:5d:51:4c:26:d7:04:3e:ec:7b:7d:ea:
d2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328528
sbgp-ipAddrBlock: critical
IPv4:
102.36.160.0/22
102.218.100.0/22
102.220.212.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:ce:4e:fe:38:64:d4:38:df:dd:a4:6d:88:f5:c8:75:78:95:
1c:8a:70:da:ed:4c:a0:90:2f:59:a0:60:35:c5:11:70:6b:c9:
fe:72:27:71:c0:f6:31:3c:49:6a:76:c4:fe:2e:f4:df:39:0b:
1c:f2:a2:9a:6d:79:01:0b:b0:76:a4:a1:6a:79:50:b6:b7:fe:
1c:5a:8f:b3:d4:f8:12:cf:a1:90:98:38:44:db:fd:a3:0e:95:
3a:43:27:ad:22:8e:ef:88:1a:a3:99:5f:2a:d1:ff:a5:30:ba:
63:6f:8f:0a:7c:85:ee:52:70:e3:01:55:49:8f:74:0a:61:c0:
12:8d:b0:bd:f5:04:8f:48:c0:33:63:64:6e:15:52:33:f8:d9:
d0:96:1a:4c:08:68:17:3b:98:28:f2:5e:c9:84:3b:a5:95:20:
5d:4e:99:59:0d:52:ca:67:b9:d0:e2:69:d0:2a:83:52:ad:09:
ef:61:35:f9:2c:f5:8a:da:2c:37:44:a3:28:5a:a8:1e:ab:0d:
b1:72:f6:3c:ba:28:9b:54:83:86:b7:01:55:41:17:e3:41:89:
a3:4c:a0:18:83:83:a6:c7:68:5b:b0:96:89:bd:61:af:ee:ff:
81:f0:68:3c:01:6d:43:c2:5b:fa:51:8e:84:5d:a7:24:b2:24:
98:b1:01:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:48:06 2025 by rpki-client