Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
File: h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer (raw, json)
Hash identifier: sbig4CNMbOgRA3WGugXenYRLMjumwueZW/A2MbRGGHI=
Subject key identifier: 87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2E5F
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:33:04 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328271
IP: 102.22.208.0/21
IP: 102.176.180.0/22
IP: 102.210.56.0/22
IP: 2c0f:ee68::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11871 (0x2e5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 01:33:04 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3645721AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6a:a8:ab:09:ad:3c:f4:ff:4d:3d:5c:24:c4:
22:05:fb:33:40:e2:de:be:24:64:d2:10:df:eb:a4:
25:6c:16:f1:ff:f2:d6:93:ad:4b:67:a4:f6:6b:9b:
78:9e:73:ee:0a:e9:f9:8b:51:a5:a4:0e:f6:d5:91:
c7:d5:d8:4f:fd:06:0f:a8:41:9c:7b:aa:c5:3d:33:
6f:b6:b5:a9:2b:42:ac:2f:0a:62:b1:fe:ae:4e:85:
ef:07:92:fe:ef:83:e2:86:b1:b3:c1:4e:a4:23:14:
b9:62:3d:25:a0:3b:ef:9f:65:36:52:e8:8a:2d:6a:
cb:e7:dc:b6:7d:bf:d9:d2:2c:9d:c7:7f:b6:f5:6f:
78:c1:ab:6c:dd:b3:b4:8b:b9:6e:56:72:70:cb:ac:
30:96:9a:4e:35:3b:97:af:63:05:7b:03:f5:8e:b4:
8b:04:ce:b6:80:68:93:84:0b:33:c2:de:3a:ba:58:
91:21:4d:b5:cb:20:b8:d7:6c:67:28:ee:dd:87:8e:
2a:9d:1b:8d:b1:83:6e:ae:05:9f:92:4c:5f:e3:e6:
91:61:97:dc:bb:b1:b1:06:8b:49:76:f8:52:bd:6a:
0f:ea:9d:d3:a6:37:fe:5b:10:89:7a:67:4d:86:88:
66:a0:55:a9:76:ed:41:fb:4c:22:8a:89:60:e1:02:
7d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328271
sbgp-ipAddrBlock: critical
IPv4:
102.22.208.0/21
102.176.180.0/22
102.210.56.0/22
IPv6:
2c0f:ee68::/32
Signature Algorithm: sha256WithRSAEncryption
08:50:d2:40:ff:db:f3:af:2a:3b:03:d8:d2:e9:b7:86:22:86:
e6:45:bd:a2:e2:ac:7a:84:55:83:50:16:87:08:06:88:25:04:
3e:92:5d:fd:ee:5e:f9:ab:c9:07:88:19:21:51:cf:34:7c:99:
e8:d0:6f:f4:a0:f9:da:1a:04:12:ef:9e:31:46:34:8e:2a:38:
5c:df:88:4b:fa:f9:6e:7e:a1:21:74:c8:8a:c9:85:e3:31:71:
1a:dc:0f:a5:fa:66:41:7e:4a:95:3a:ee:90:66:f1:53:47:8d:
f7:a1:bd:55:ed:98:0c:5d:c2:c9:4a:ba:cb:eb:74:96:a7:48:
25:23:44:74:f6:be:b8:5e:54:5f:b3:fe:83:42:b0:c8:ce:a7:
93:13:fe:05:7e:19:9b:97:52:0f:a5:71:f9:fa:68:0f:3e:cf:
2a:61:58:46:7b:23:2a:fc:88:cc:30:fc:60:9d:37:84:27:8e:
9d:e3:95:a7:cb:68:74:56:46:10:2e:67:51:c9:c7:b4:ba:80:
a6:ee:8e:35:74:ab:48:11:64:2c:ef:6b:84:55:0f:3c:27:9a:
ce:43:54:0f:b0:74:78:40:e5:e1:9c:92:f6:19:21:41:91:88:
a1:73:a5:5c:34:44:a8:ee:f6:63:02:3e:9a:8d:5e:0a:5f:cb:
9e:dc:d0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:43:57 2025 by rpki-client