Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
File: e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer (raw, json)
Hash identifier: fY7TuaPxFpqkAQjgHbxyoq7OULaPM9O1PqMvqq4t2E8=
Subject key identifier: 7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 32AE
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:22:02 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 327804
IP: 154.68.160.0/20
IP: 2c0f:f050::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12974 (0x32ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 05:22:02 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36C8371AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:dd:c8:01:33:47:02:88:b9:73:54:85:06:46:
8c:a9:53:8b:e9:b7:2d:4a:68:72:27:93:d1:25:29:
a4:c6:ea:cd:5e:02:ca:fa:fb:23:96:11:32:3b:e5:
48:dd:91:6e:6d:7d:2d:48:6e:cb:3c:37:a2:f8:10:
7d:90:13:61:90:e9:68:4d:3c:05:9f:5b:58:31:fb:
75:86:8c:83:ed:e6:d9:2e:ef:29:b2:39:92:81:76:
87:6e:b2:e2:46:1b:47:fd:e8:3a:c2:7e:03:9b:c4:
d4:fb:ac:64:05:30:ed:93:1a:91:36:8b:36:2b:3e:
c3:0d:9f:a2:14:89:7f:35:ec:3b:1c:06:fa:71:07:
93:de:46:85:72:24:fd:b4:32:99:a5:1d:3d:39:a6:
98:f9:61:79:21:02:2e:8b:af:70:b1:93:8b:ea:84:
11:7c:d3:68:de:e2:41:be:33:0d:9d:17:f7:2f:0d:
91:78:ea:0a:de:c4:3f:b9:22:cb:90:f1:7f:b5:2d:
ff:02:e9:1c:d8:a4:2b:ec:d0:9c:03:b7:8b:ed:fb:
ea:a1:fe:2a:9d:13:19:64:67:23:b3:aa:46:b3:eb:
6d:d3:b7:dc:ad:91:7f:5d:f7:81:8d:9a:6d:1d:42:
a7:a9:ce:df:66:91:71:74:5f:d4:d6:9b:46:f1:02:
85:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
327804
sbgp-ipAddrBlock: critical
IPv4:
154.68.160.0/20
IPv6:
2c0f:f050::/32
Signature Algorithm: sha256WithRSAEncryption
8b:a0:8e:82:3d:c0:bf:56:18:55:36:8f:5e:6a:d3:65:db:89:
1a:99:e5:20:b3:61:d6:16:0e:0f:aa:1b:01:db:f3:c3:34:bc:
c4:48:2f:b2:f4:94:7c:97:a2:4b:c6:2b:8b:4a:a2:5d:aa:98:
ca:40:7b:a4:d7:16:80:1c:44:d9:69:3f:83:53:c0:43:07:d7:
d0:6b:cd:81:06:d1:9b:6f:00:22:60:aa:0b:71:54:90:82:ca:
21:41:da:e3:f4:9c:32:60:41:2f:69:c5:45:bc:1b:c9:7c:10:
89:62:f3:71:86:5b:e8:a4:c8:6d:98:7a:19:13:b8:56:7b:50:
65:43:03:ad:f5:18:0f:9c:0a:16:8c:84:9f:c9:df:57:22:9d:
46:5b:f6:ba:42:c3:8e:51:5b:b1:7e:b9:57:f5:ea:a5:b8:69:
49:10:9a:66:54:53:46:15:aa:33:96:2d:c0:27:ca:c3:c3:f1:
3d:81:97:85:a0:1a:aa:f9:1d:cb:d3:41:77:50:c7:26:07:de:
45:12:c5:72:cc:9b:79:ed:fb:29:d9:90:a4:9a:b7:95:c9:74:
c5:0f:76:50:99:cc:79:14:41:cb:e5:3b:e7:6c:a1:58:fb:8d:
fe:d6:cb:e4:6a:25:20:ca:e9:56:2f:9e:09:b1:cb:0d:08:c2:
56:db:63:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:31:10 2025 by rpki-client