Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
File: YFf0ifWtxOkmnCYNcCyBqraqLm0.cer (raw, json)
Hash identifier: KwqwQu9vCXorYjMYJE0MqwbaLwnE45mwXyWIq0vtPe0=
Subject key identifier: 60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2F15
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 02:10:16 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37049
IP: 41.222.136.0/21
IP: 41.242.160.0/20
IP: 196.32.248.0/21
IP: 2c0e:7e00::/28
IP: 2c0f:fdc8::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12053 (0x2f15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 02:10:16 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F369BF27AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6b:d1:48:a6:51:9e:61:2a:85:e1:fc:15:ef:
f5:0c:28:c5:90:4c:e8:7d:06:db:eb:f4:d6:1c:df:
29:89:c6:7a:3e:48:70:30:91:ee:1f:5b:2a:42:aa:
9a:e5:f5:47:41:8a:b6:07:3b:48:4f:02:57:fc:ab:
81:7f:96:16:ff:1b:ba:14:4d:89:f3:2a:37:3f:10:
79:75:7f:6e:f6:4b:74:63:ce:5d:99:50:1e:38:34:
1e:1d:a5:ca:24:d4:06:e4:a4:2a:99:e8:f5:11:49:
b3:25:5e:7b:66:92:51:e5:0c:16:9b:49:c2:82:68:
7e:a9:97:31:90:11:74:2d:51:34:d8:bd:a4:35:0a:
a5:7e:ba:33:20:29:93:b2:72:80:ca:af:2d:55:9b:
03:7f:73:59:65:3f:3d:70:ae:0d:1d:f1:7e:0d:2f:
31:47:e8:be:af:33:31:6f:74:af:60:a8:0b:35:bc:
c5:3b:1a:de:7a:4e:53:ac:dd:b7:4d:fd:91:d8:d3:
e9:2b:0c:80:b8:87:65:15:03:de:b5:f4:04:f6:3f:
3c:b4:88:4f:e5:2b:92:0a:f0:1e:58:57:45:ff:dc:
b6:4d:83:6f:e1:81:04:21:d4:d9:cf:3f:9d:54:d3:
13:04:c7:35:a1:43:6e:66:1c:c5:86:bb:62:f3:73:
14:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37049
sbgp-ipAddrBlock: critical
IPv4:
41.222.136.0/21
41.242.160.0/20
196.32.248.0/21
IPv6:
2c0e:7e00::/28
2c0f:fdc8::/32
Signature Algorithm: sha256WithRSAEncryption
34:3b:cc:1c:67:b6:1a:83:91:09:b3:ae:ba:45:5b:3f:05:63:
45:e6:1e:eb:1b:64:66:f7:20:ea:7e:55:ed:9a:df:2b:4a:d3:
a6:b8:eb:f2:49:2e:dd:3f:6c:e8:16:6a:e3:eb:30:be:3c:8f:
c5:de:48:4b:28:1b:70:ea:c9:74:ae:39:c5:42:b3:ff:e7:16:
71:ac:cd:cc:ef:42:98:7d:9e:58:8f:d2:78:51:26:a2:48:20:
46:26:c5:40:40:16:02:8c:42:c4:d7:2d:b9:80:d3:e5:af:66:
5b:75:91:40:95:e1:7e:ae:c0:07:99:b0:61:5f:39:d1:14:8d:
4c:14:73:22:70:3b:c7:b5:50:7e:06:d1:30:13:42:c6:22:18:
0b:e6:43:b2:70:88:25:12:8c:49:e9:2c:9b:6e:26:da:6a:e3:
bd:5c:1a:57:a0:6a:d7:1d:7f:91:45:c4:0c:6c:33:3a:56:1e:
b9:0c:a9:58:ce:1c:5f:a7:f1:8a:9c:7e:9e:8e:1e:ec:fc:58:
ec:17:dd:d3:63:1d:e1:7c:7b:6d:ca:69:a3:ad:4f:54:7c:91:
90:e8:9b:53:97:2b:c1:3f:ba:95:6d:b9:16:97:a7:74:0e:0f:
3e:d7:0c:08:e4:bd:4e:86:30:4c:88:ef:a9:82:9f:d5:5f:55:
02:a2:c4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:32:43 2025 by rpki-client