Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer
File: hPAfwzjdLBQepF0xeyEfds9dABU.cer (raw, json)
Hash identifier: h6A2U6Hz6Limx5/kpyo6sBNVern+JQRvLLpSOwvNVzQ=
Subject key identifier: 84:F0:1F:C3:38:DD:2C:14:1E:A4:5D:31:7B:21:1F:76:CF:5D:00:15
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 30E7
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:45:01 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 41.242.124.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12519 (0x30e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 03:45:01 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F368F4A1AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:04:76:ff:c3:2d:b8:4f:7f:d4:a1:18:55:4e:
52:25:07:59:96:6b:62:d4:0a:9c:dd:1a:29:c3:3d:
38:3f:c7:cf:5d:e8:45:c0:b5:d6:77:7b:80:4f:c7:
97:e9:c5:6b:b9:28:a4:b4:bc:85:cd:de:80:b9:98:
04:0b:eb:c1:36:91:72:ad:1a:eb:60:b1:c1:d0:0a:
e1:43:87:6b:fa:7a:ce:c5:15:a7:04:22:c9:0b:2f:
f6:4e:f9:d9:4c:74:9d:b8:86:02:9b:d2:ae:e2:a0:
84:6b:2b:53:43:9a:eb:25:5a:c2:5e:f4:29:6f:80:
6b:00:df:ea:70:1b:c9:6a:1f:30:54:2a:53:48:80:
03:2e:d3:f8:82:fe:ce:61:f1:d9:27:42:7e:90:46:
dc:21:59:28:7a:88:a4:b4:b9:88:f3:84:d1:1c:25:
41:a3:4b:31:03:48:39:6d:32:18:79:cb:52:53:07:
85:16:78:58:a2:d4:15:a2:91:4e:c6:30:09:d0:eb:
67:5a:1c:3d:d1:09:f9:c8:d4:d1:2a:22:7a:9d:16:
f3:e6:97:a9:f6:d4:10:4d:b3:0c:c5:a8:e8:dc:97:
90:f6:27:5c:2c:d7:08:53:08:b5:ac:df:bf:d0:09:
5e:e8:86:f8:0d:25:ae:d1:9b:a2:ff:9e:2d:72:b5:
ea:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F0:1F:C3:38:DD:2C:14:1E:A4:5D:31:7B:21:1F:76:CF:5D:00:15
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
sbgp-ipAddrBlock: critical
IPv4:
41.242.124.0/22
Signature Algorithm: sha256WithRSAEncryption
90:d6:72:93:94:ca:8c:3c:c1:e1:2d:ca:9a:13:ed:f0:0e:61:
2b:45:3c:fe:32:36:7d:3f:85:ba:ab:2a:97:4d:57:cc:da:d3:
fa:24:40:e4:64:fd:77:a3:6e:7f:3c:0e:44:d3:83:50:e5:56:
1c:c9:de:cc:f8:23:2b:a2:ee:09:f2:8d:0b:c0:5e:d3:c1:30:
4a:72:0b:59:96:08:1c:e5:cb:23:c7:c6:d5:de:6f:bb:e2:47:
02:e5:d7:53:c2:c5:5b:63:c7:60:44:29:d1:c3:9d:82:c6:29:
ce:1f:52:a5:dd:01:f1:72:4d:76:dc:94:5e:d0:2b:d8:1a:5b:
e8:bb:ba:e7:11:71:40:dd:49:d0:60:6a:9c:a2:4a:b6:7b:a7:
f7:06:00:d4:c8:34:4d:aa:54:7f:69:47:46:ff:54:1b:97:a4:
e2:33:dd:b4:83:c4:97:9f:86:c8:41:b0:f0:56:d2:df:03:32:
31:88:8f:4a:73:97:47:8d:c7:02:57:70:27:db:5d:47:1c:02:
2a:0f:b6:31:d5:e7:67:c9:dc:97:eb:5b:cc:03:cb:84:4b:6b:
21:fb:12:b0:dc:76:4a:32:e4:7d:93:c2:7a:7a:b4:4c:8f:f0:
3d:33:48:22:8d:67:0b:f4:4c:12:37:06:7c:10:60:cd:57:6d:
db:03:f1:30
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:44:56 2025 by rpki-client