Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.cer
File: Y-CpDCsqS0KkStRMhXDkv_v3XPQ.cer (raw, json)
Hash identifier: Pv5onHNIkIa8kctCL5lewyFOw/P88Smi1kooWyGC7jA=
Subject key identifier: 63:E0:A9:0C:2B:2A:4B:42:A4:4A:D4:4C:85:70:E4:BF:FB:F7:5C:F4
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 324F
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:01:24 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328948
IP: 102.218.16.0/23
IP: 2c0f:4300::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12879 (0x324f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 05:01:24 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36F1344AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:ae:bb:87:f5:e5:75:db:3b:04:d4:9c:57:
66:31:ab:64:c3:74:df:f9:5c:d5:79:47:93:6b:d6:
35:f9:d1:6f:cb:a8:ea:4d:f1:bb:a8:37:a9:da:de:
d5:2e:e2:19:4e:c9:eb:a1:56:d7:3d:9c:3d:61:0e:
0f:3e:2c:17:b8:03:8d:a8:47:e8:77:91:e5:5f:9e:
f3:a3:01:12:79:25:85:cb:07:ef:67:e2:62:b3:3e:
ed:4f:1b:8b:f3:42:43:29:53:da:96:07:13:01:b5:
7d:d8:d5:4a:d6:89:1a:ae:6c:7c:53:f9:67:e8:41:
a9:09:bf:fb:91:68:01:b2:1f:06:76:04:f9:1a:21:
41:f8:83:4e:a6:d0:69:31:01:0e:a1:59:90:d1:b7:
29:e3:c9:15:25:60:b1:da:c2:6d:da:66:7a:5f:a2:
3d:cd:30:a9:3c:21:13:fb:3e:6c:64:2e:b8:cf:f3:
90:5a:ca:40:24:d6:91:65:d3:af:96:d0:34:a9:5b:
cf:0b:05:de:46:7b:cb:86:47:4f:5b:f4:1b:22:b7:
91:2c:b5:d2:9b:b1:de:a3:a1:39:c6:f0:82:b8:a4:
31:0e:85:75:89:e2:5d:f8:91:68:8c:c8:d7:a7:b3:
96:60:d3:14:be:8c:af:bf:01:33:a9:9d:7e:06:cd:
f4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E0:A9:0C:2B:2A:4B:42:A4:4A:D4:4C:85:70:E4:BF:FB:F7:5C:F4
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328948
sbgp-ipAddrBlock: critical
IPv4:
102.218.16.0/23
IPv6:
2c0f:4300::/32
Signature Algorithm: sha256WithRSAEncryption
19:03:a4:cc:6c:a5:b5:63:e9:a7:e5:4c:ac:32:4a:fd:1a:49:
b9:03:2f:04:de:79:10:44:82:63:35:bb:9e:6a:48:86:d4:ff:
95:ca:58:da:ea:cc:ac:cb:81:49:92:96:09:8b:b8:51:38:2a:
53:84:9c:b4:89:a0:6f:10:93:d6:a3:f8:47:97:51:7c:c7:5c:
ab:3b:cc:63:d0:52:a5:e3:08:c8:94:d2:a0:b9:bb:4e:0f:d6:
ff:14:bf:1e:bf:cb:55:4f:42:4d:da:59:87:eb:86:d4:f8:68:
da:19:17:f1:bb:51:60:fb:01:b1:1b:d3:d5:3e:ef:f9:ce:d9:
d8:f4:6e:98:5a:d5:9b:f7:ca:19:e8:9b:85:bc:58:33:36:fa:
10:89:95:26:9d:f0:8b:2c:65:23:f0:18:97:c2:2f:28:c1:88:
0e:80:2b:64:e7:3d:76:30:75:0e:69:e8:d9:0e:2c:fa:7a:62:
42:ae:5f:cc:fe:f2:76:69:d0:0e:c4:09:cf:30:c7:c8:f8:18:
67:fe:c7:db:90:6d:5b:08:e6:4b:ee:1b:4c:5a:76:1a:7a:21:
1a:b0:de:63:14:a2:71:21:b2:68:15:d2:01:5a:bf:51:b4:28:
99:c5:e5:a9:1c:79:75:c1:f3:47:09:63:03:70:5b:5b:69:fd:
73:e9:bb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:41:43 2025 by rpki-client