Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer
File: ai026HfXJSbET24AT680-ZBPIxE.cer (raw, json)
Hash identifier: SU4MEeYIIXiDN3/n56E0KwZVMjlNU+dJaig9MyIb3YY=
Subject key identifier: 6A:2D:36:E8:77:D7:25:26:C4:4F:6E:00:4F:AF:34:F9:90:4F:23:11
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3050
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:13:44 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 21003
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12368 (0x3050)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 03:13:44 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36A991DAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8d:f6:4b:49:3e:20:34:d5:f9:44:c6:37:1e:
d3:00:c2:13:e7:3a:34:06:6f:81:4e:51:b5:8c:c5:
9e:36:8d:1e:96:47:50:39:2d:ea:c5:70:f3:a9:83:
03:f5:a2:dc:84:78:4f:ff:e6:8b:04:7b:d9:4f:85:
ab:ad:d6:d5:5d:b7:21:c8:09:3f:0d:ae:64:90:03:
b2:3f:8a:f8:27:23:51:bd:15:ea:2a:8c:49:3b:b8:
43:2e:f0:8e:c6:7f:24:dc:9b:d7:c2:fe:e9:c1:12:
57:25:61:ef:7d:a3:36:85:6b:bb:c6:56:d4:d7:4a:
84:63:b6:54:0f:8d:e1:76:d6:ae:b1:35:0e:f7:2b:
8a:c4:1a:4e:5b:ed:c1:bf:3d:4d:1e:69:e7:b3:6d:
29:a3:e6:76:31:8f:a7:33:52:02:3c:bd:c5:0b:91:
7f:cb:a7:35:bd:e2:53:8c:50:8a:e6:a2:99:b0:4f:
59:c0:3a:0b:4c:30:dc:7c:24:6e:4d:4d:e5:39:58:
52:60:90:9c:95:ba:37:c5:bc:5b:f5:d1:18:44:a9:
a4:b5:f9:34:4f:9b:ee:14:89:91:6d:7a:49:9d:60:
e4:a2:2d:c0:ce:dd:57:96:70:89:f5:61:66:6b:a1:
5e:a4:10:84:b9:fd:0c:cc:54:42:77:9b:46:a3:4f:
b2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2D:36:E8:77:D7:25:26:C4:4F:6E:00:4F:AF:34:F9:90:4F:23:11
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21003
Signature Algorithm: sha256WithRSAEncryption
75:81:0b:03:1e:88:02:cc:18:30:1b:60:b6:89:77:5f:88:a0:
94:95:9b:af:ab:7b:fe:16:8c:b3:a7:a3:f2:1e:0d:08:04:8b:
0c:7c:19:dd:09:be:96:d1:b7:54:87:57:44:d8:4a:1e:41:24:
00:73:1a:db:1f:88:08:5a:92:a4:5b:50:bf:06:c8:b3:4f:e2:
ea:96:4f:17:6c:bf:15:49:ba:39:33:e2:b3:69:71:ba:f3:e9:
4e:f9:72:41:3f:55:fa:da:c3:5a:4e:44:4b:81:02:f0:20:a1:
db:51:03:3f:0a:37:73:e6:92:1e:13:84:79:09:46:e9:77:27:
12:b5:e9:3d:a4:a4:8e:2e:3c:1e:95:06:f9:89:0c:53:12:b8:
52:96:25:9a:a3:07:23:51:4e:39:d7:b9:96:d4:20:0e:8a:05:
53:25:29:bd:f3:73:14:c6:23:12:09:d1:5b:d1:c5:29:2b:72:
a5:99:fd:b7:a9:4f:94:d9:12:48:ea:03:bf:2e:9e:10:72:16:
96:5e:95:3a:dc:b4:06:6e:e8:94:3c:4c:bc:9b:d8:a6:65:82:
fc:d8:c7:b0:d0:bc:74:e1:96:64:e6:b9:13:66:38:bc:d4:b6:
4a:4e:0b:dc:3b:46:83:93:4e:62:46:93:b5:3f:8e:0d:33:dc:
c0:e4:7b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:31:53 2025 by rpki-client