Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/hXm8J-c9eykQjr_zl_ts_VxrAkc.cer
File: hXm8J-c9eykQjr_zl_ts_VxrAkc.cer (raw, json)
Hash identifier: VRBb7/HZXIHOIHpQOe1hZf29zgNy+7hQ7RXfYYMXZY4=
Subject key identifier: 85:79:BC:27:E7:3D:7B:29:10:8E:BF:F3:97:FB:6C:FD:5C:6B:02:47
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 301D
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:03:18 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 102.215.196.0/22
IP: 102.222.252.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12317 (0x301d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 03:03:18 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3675292AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:64:87:80:8d:ae:21:d7:e9:cc:fb:f9:15:c6:
86:d7:4b:50:11:80:db:e7:f0:27:a3:69:bb:75:d1:
6b:42:bf:b8:21:89:49:98:2e:f5:f3:ff:65:e5:cd:
b7:0c:6d:7f:b5:0e:fa:05:52:e5:7f:f6:02:73:44:
5b:19:40:6d:ab:8a:64:1e:e1:98:48:3b:66:ac:7b:
21:b9:88:c7:b8:5c:71:e7:f5:af:f8:88:0c:6e:9b:
3c:cf:0c:7e:07:7b:6c:6f:97:d7:c1:f9:33:4c:d8:
47:97:3b:0b:c9:43:80:42:40:28:c3:38:e3:7a:97:
a9:08:8c:cd:16:d0:3c:cc:a4:3f:11:b2:db:5c:c1:
62:61:79:dc:b0:23:b1:31:04:3f:7f:cd:86:3b:3f:
69:b0:2c:eb:62:95:ca:61:c2:66:68:ee:40:c6:bb:
0a:0b:21:b4:bb:74:b6:2f:30:bf:76:cc:90:77:fd:
c2:77:7c:f3:94:5c:2a:e7:9b:e9:c4:72:3b:b2:fa:
86:21:d8:3c:e2:c2:43:5d:80:91:e3:26:66:6d:fd:
1a:4c:94:e4:1e:a7:d8:83:6c:4c:68:37:ab:9e:3c:
38:7a:05:e5:bf:a2:7e:18:b3:98:fe:7e:12:3e:09:
51:b7:e9:a5:4f:71:dd:4d:39:a5:07:c8:dc:cd:85:
b4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:79:BC:27:E7:3D:7B:29:10:8E:BF:F3:97:FB:6C:FD:5C:6B:02:47
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
sbgp-ipAddrBlock: critical
IPv4:
102.215.196.0/22
102.222.252.0/23
Signature Algorithm: sha256WithRSAEncryption
30:ad:9c:19:30:a0:6e:f8:a0:df:6b:06:c6:b9:ad:6a:6a:1c:
42:a5:65:c9:bc:8a:62:fd:8b:1e:7b:b6:58:79:af:6d:ad:85:
85:ef:6a:5a:47:7f:60:d8:c9:a9:c1:2e:9d:e6:6e:84:3f:52:
3c:16:ba:8b:bb:4e:d0:b1:7d:6c:6c:27:e3:29:ac:db:9a:33:
07:a9:f9:ae:7a:38:a3:d8:dc:37:99:7d:0a:62:68:ef:16:9a:
10:f5:ed:ca:f6:20:12:c5:a2:12:f7:59:e6:e4:be:0d:a4:e3:
b9:43:ab:04:4c:e9:dd:1b:0d:b7:ba:c1:a6:1d:fc:23:c9:fa:
30:05:af:db:3e:43:c5:c7:7c:b5:5a:92:78:e7:66:96:df:94:
87:9b:d4:74:bd:a1:ac:c0:0d:5c:71:92:bc:75:c6:25:08:1f:
93:c1:49:2d:dc:88:a9:18:24:6a:cb:8b:31:f3:e5:3f:ec:95:
a4:f4:36:a9:1e:4f:43:70:65:02:10:aa:56:c8:7d:b8:d0:f1:
b9:7a:f1:e4:ba:df:b1:ff:90:ac:c2:2c:ed:7c:ec:ef:0d:e5:
79:07:87:af:e5:e0:01:2d:a3:ca:86:d4:6a:98:fc:7d:69:9d:
9e:dd:d2:01:80:b0:10:7e:1e:d6:75:8d:aa:0e:5f:7c:1d:76:
45:a3:b8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:35:30 2025 by rpki-client