Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ffDZZHEjlpmcF8_uBLpMLB39GqE.cer
File: ffDZZHEjlpmcF8_uBLpMLB39GqE.cer (raw, json)
Hash identifier: PY5IYdom9MVBpdrObs+4/JY8pqRJREfF3kt/EqoQW/E=
Subject key identifier: 7D:F0:D9:64:71:23:96:99:9C:17:CF:EE:04:BA:4C:2C:1D:FD:1A:A1
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 32D7
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:30:32 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37257
IP: 41.87.160.0/19
IP: 2c0f:f250::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13015 (0x32d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 05:30:32 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36D03D3AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:37:1e:f7:d5:18:f5:38:28:ee:f8:c8:f0:f8:
d9:b5:6e:e3:83:48:1b:7d:68:0d:e5:4c:21:87:ce:
e9:89:d8:36:d6:40:1c:13:90:a5:62:78:b9:1c:03:
8d:56:69:a1:36:9a:fa:24:a8:01:8f:e1:1c:9c:43:
78:f9:c5:04:ec:17:a9:42:59:8c:72:86:df:78:8d:
35:45:2a:8e:f2:b4:19:26:25:e0:3b:09:71:30:c7:
ac:d0:fd:0d:07:db:c5:5a:90:7a:be:eb:ca:cb:1d:
d8:e0:d5:77:7f:f3:cc:d1:c4:01:7c:67:92:af:27:
89:91:5d:0b:e5:f5:1a:55:5d:d4:94:86:0d:f9:03:
c2:81:4a:de:ca:bb:77:93:01:81:72:e4:81:54:0d:
23:0b:cd:a1:33:c5:20:0e:65:5b:41:6c:e1:8b:17:
10:fe:dd:22:6b:33:6a:24:c9:3b:e5:25:cd:bf:72:
79:ee:da:2b:9b:c3:d6:e9:f5:9d:62:a2:92:fa:5e:
0b:26:44:79:27:c5:50:02:87:6e:55:31:fb:12:f5:
f9:f0:c1:06:e4:0e:66:c5:37:5a:a3:92:43:b8:74:
66:aa:84:97:ca:69:ad:68:2e:27:a7:50:32:5f:35:
cf:86:5c:ad:28:2b:ce:52:c7:a1:98:ef:54:64:1e:
86:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F0:D9:64:71:23:96:99:9C:17:CF:EE:04:BA:4C:2C:1D:FD:1A:A1
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37257
sbgp-ipAddrBlock: critical
IPv4:
41.87.160.0/19
IPv6:
2c0f:f250::/32
Signature Algorithm: sha256WithRSAEncryption
9a:a9:4c:a0:66:c6:8b:a0:e4:7d:f3:cf:f7:73:f2:ef:92:eb:
07:08:06:c6:71:a1:b0:b1:fd:d6:00:72:a6:d7:65:85:cf:5a:
d7:b7:a2:c2:53:6c:1e:ba:bc:34:d3:f7:25:b7:89:d5:ad:b7:
41:82:56:b1:15:bf:df:50:c6:f5:06:7e:62:e1:7a:97:de:f2:
0a:60:00:0d:45:d2:9a:a3:7c:15:6f:d9:cd:a9:1f:82:a8:0b:
fc:5c:90:40:30:9e:72:41:01:c4:be:b7:a3:f2:4e:c1:a4:06:
28:40:2c:ed:eb:9f:b5:82:45:92:e0:7f:5d:79:67:15:2c:60:
1d:bc:e9:a9:46:a8:20:51:6b:d1:c7:78:4a:61:59:25:4a:83:
17:4d:25:37:8e:7e:47:17:ed:c5:48:d4:31:d5:af:78:9f:a7:
a1:06:93:d7:0f:45:0c:9c:20:6c:83:82:e7:4b:c8:31:8b:5e:
e0:7d:a0:81:d4:50:73:69:78:6e:ca:30:00:04:c3:f3:15:97:
44:57:c1:6a:bd:d6:76:85:23:d8:40:c4:09:a0:32:46:cf:ef:
7b:fc:f7:69:1d:49:83:61:13:4c:a0:d9:2c:2d:8f:5b:e4:ec:
83:60:8d:bb:9c:23:ce:d7:96:89:3d:e0:14:fb:f2:c4:7a:c2:
c9:70:20:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:33:29 2025 by rpki-client