Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Y2BaihJPjsom32anMaZF3MgxlJU.cer
File: Y2BaihJPjsom32anMaZF3MgxlJU.cer (raw, json)
Hash identifier: UlPF9OJliLP4M1pqhBqRFl3iMXH7i3530zwP0wwc0gg=
Subject key identifier: 63:60:5A:8A:12:4F:8E:CA:26:DF:66:A7:31:A6:45:DC:C8:31:94:95
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2CE1
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:09:16 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 327812
IP: 102.208.200.0/22
IP: 2c0f:ee60::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11489 (0x2ce1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:09:16 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36150C1AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dc:49:34:1f:33:30:84:53:cf:39:5b:aa:04:
d1:f2:ea:01:08:07:b2:b2:87:16:51:7e:56:3e:2c:
09:47:8d:89:58:8a:25:c9:8f:14:d2:fc:ef:d3:f3:
70:2f:a5:81:b6:ee:bd:49:07:17:2a:0e:b5:ee:7e:
31:1d:db:a3:cc:de:b7:25:06:4a:79:40:c4:16:ee:
24:51:7a:0a:fc:ee:64:25:9f:47:90:53:3a:27:02:
02:ff:50:3e:d8:12:64:37:e6:0b:15:9d:f3:d0:6c:
cd:90:74:cd:6b:2d:1c:01:7d:58:dc:a7:81:e3:01:
92:ee:7e:e4:76:78:a5:0b:d9:24:ab:6e:66:6f:4b:
0e:25:88:fd:48:03:a4:e1:c2:2b:d2:30:e8:39:56:
a2:a6:60:d2:f4:5c:97:88:b7:02:60:e8:54:b9:06:
df:37:da:2d:32:bd:f9:6c:55:3d:d9:14:07:8e:b6:
01:00:c6:3f:46:e8:90:10:1e:a3:c6:89:ac:dc:a7:
eb:fa:2e:d8:1d:a6:d7:4f:72:c5:59:4f:bb:4b:6f:
9a:c6:43:c4:91:c9:da:bf:33:ba:9a:6a:aa:65:04:
72:87:71:27:4d:bb:59:9b:cf:f1:45:6a:ae:94:94:
2c:43:49:4e:13:44:b8:b0:47:a5:aa:16:84:fe:a3:
81:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:60:5A:8A:12:4F:8E:CA:26:DF:66:A7:31:A6:45:DC:C8:31:94:95
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
327812
sbgp-ipAddrBlock: critical
IPv4:
102.208.200.0/22
IPv6:
2c0f:ee60::/32
Signature Algorithm: sha256WithRSAEncryption
47:9b:2a:c5:9a:77:c1:0a:44:b0:9c:02:fe:e9:6a:7e:38:0b:
ed:a1:bf:04:8a:36:9b:f9:37:82:0c:98:bb:5d:61:62:52:43:
95:c8:0c:95:bc:40:15:e8:05:8f:b1:70:c6:46:5e:b5:c6:92:
fd:8e:20:c1:08:5e:2e:ce:a0:1e:21:02:59:29:4a:b4:a1:fd:
cd:33:f4:17:a2:40:0d:66:7e:b2:27:fd:8a:c4:1c:6f:99:27:
27:01:ed:c7:36:63:91:a4:6c:a9:55:3b:bb:2d:f4:bd:1a:d3:
85:f7:fe:e0:a5:13:d4:33:14:3f:3d:99:e4:dd:24:e8:b9:a7:
ef:85:de:88:f0:7a:33:9e:a7:57:35:31:3f:c2:b5:2f:50:5e:
9e:09:e7:41:35:13:67:3f:f6:eb:5b:08:5b:df:48:00:33:80:
99:f3:d0:4f:05:06:d4:9b:0e:56:ee:32:a3:61:8b:44:5f:5d:
88:fa:ee:53:9b:3c:00:8c:5e:93:8a:49:85:d0:b5:0d:57:79:
99:5a:3c:68:b2:c3:d9:53:c2:75:9f:d9:32:24:b2:49:f0:f9:
5c:6a:5a:51:7c:d7:33:4a:f7:6e:8c:a0:8b:c0:a0:1d:e1:1c:
e0:37:77:44:bb:ef:da:3a:69:b0:c8:3c:38:02:ef:5e:7b:31:
f5:3a:ff:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:34:29 2025 by rpki-client