Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/bssXAorVt9tcd32x3OCXh-SVstE.cer
File: bssXAorVt9tcd32x3OCXh-SVstE.cer (raw, json)
Hash identifier: gbmW+Xg3loRmgYPSzfFXgx9u7JO7hbdg/CuHr9hnMoM=
Subject key identifier: 6E:CB:17:02:8A:D5:B7:DB:5C:77:7D:B1:DC:E0:97:87:E4:95:B2:D1
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2DAE
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:56:32 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328517
IP: 102.69.208.0/22
IP: 102.212.224.0/22
IP: 2c0f:7f80::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11694 (0x2dae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:56:32 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3630D7EAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:86:6f:2c:19:58:1e:e0:11:53:aa:ce:70:8e:
1c:6a:3a:aa:36:3f:fb:50:c0:a5:c2:df:a4:ad:46:
a6:e1:c5:ff:33:3e:02:5f:7d:b9:66:af:48:9e:ed:
90:08:95:8c:9c:b7:ea:9d:7f:16:cb:43:f0:11:4a:
d8:fc:99:9f:5d:ed:fe:f0:f7:bf:38:bb:35:bb:b6:
11:c2:e4:12:b7:fd:4d:69:6a:f0:2c:4b:bf:14:8e:
d4:4a:10:18:f6:5c:7b:73:b6:40:b9:3f:e6:04:7c:
57:9d:2c:a5:ee:0b:50:48:12:e7:4f:16:82:d2:6a:
71:c3:30:fc:1f:45:eb:ea:9c:30:62:b1:5e:a0:3f:
16:21:88:02:ad:2e:2d:f3:4f:8f:aa:fa:44:2b:53:
e4:40:7e:9d:6b:fb:e8:d1:80:10:2b:89:2f:e2:a8:
62:71:1d:7e:fd:d5:fb:b0:40:3f:f8:23:dc:64:35:
2c:23:5e:6b:6d:29:00:80:3e:a1:ae:96:70:d7:00:
95:ef:0d:1c:27:af:15:a3:26:46:f9:7d:26:51:fc:
48:c8:e0:6a:3f:00:e2:fe:77:21:a7:05:69:5c:81:
d3:39:cc:ba:f4:dd:72:81:c9:19:92:18:fd:31:aa:
dd:35:55:68:c1:e9:a7:2d:eb:97:17:a2:b2:27:1c:
b5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CB:17:02:8A:D5:B7:DB:5C:77:7D:B1:DC:E0:97:87:E4:95:B2:D1
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328517
sbgp-ipAddrBlock: critical
IPv4:
102.69.208.0/22
102.212.224.0/22
IPv6:
2c0f:7f80::/32
Signature Algorithm: sha256WithRSAEncryption
b4:ae:4e:a5:bb:85:2a:fc:8a:20:da:91:bf:da:34:57:91:81:
9e:9c:77:fe:53:3a:41:b2:e1:e1:e8:ac:8e:64:1e:2f:89:34:
11:34:f1:35:64:1b:36:18:1f:d4:1c:36:b1:d5:d8:a3:11:f0:
f0:08:6d:02:7f:af:5b:e3:76:2d:9a:29:11:54:38:2c:cd:8d:
95:5b:e1:a4:f5:a9:af:6f:4d:fe:46:0a:89:19:31:e8:06:e7:
35:be:73:67:d7:16:a0:34:f3:73:b8:ec:23:89:83:5c:ab:cf:
36:87:7c:5e:b6:86:5f:8c:64:9a:91:c0:0b:f3:be:c3:62:89:
d5:f5:65:59:16:30:2b:c4:5a:71:96:fc:17:33:66:2f:07:0f:
a9:73:c9:c8:7c:bb:7a:72:5f:ac:6a:0a:94:28:7f:14:97:04:
51:70:6b:d1:74:e4:4b:1a:86:02:e7:43:c1:98:93:d5:d2:dc:
5f:ad:ae:68:d6:01:54:a1:ba:93:a8:d0:4d:73:22:91:27:2b:
a5:ce:1a:a1:5c:c9:b4:ac:ea:85:4b:38:93:28:b7:2f:00:46:
16:c4:d6:97:31:45:4d:55:2d:e0:82:3b:bf:60:a9:8f:30:fa:
9a:4b:73:12:c1:14:8c:97:17:79:24:45:df:67:42:2a:ac:af:
97:99:e7:22
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:56:25 2025 by rpki-client