Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/huglnkPq8W75kYMuF3CJk-ot1X4.cer
File: huglnkPq8W75kYMuF3CJk-ot1X4.cer (raw, json)
Hash identifier: Qg/4vZ3mtS2aphceDZRuYi0MplTauIuDO0P0+BhWlrE=
Subject key identifier: 86:E8:25:9E:43:EA:F1:6E:F9:91:83:2E:17:70:89:93:EA:2D:D5:7E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 319E
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A18AF/B855BBE8628C11EE9EC0747F4AD9E6FC/huglnkPq8W75kYMuF3CJk-ot1X4.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A18AF/B855BBE8628C11EE9EC0747F4AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 04:23:29 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 327861
IP: 102.141.236.0/22
IP: 196.13.208.0/24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12702 (0x319e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 04:23:29 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36A18AFAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:47:3d:46:36:b3:3c:2c:ac:ae:43:0a:32:06:
75:76:02:da:f8:05:93:eb:9e:5a:3a:03:05:a8:fa:
ec:74:39:23:c2:76:59:6e:f6:85:43:1f:ad:79:4e:
ac:87:f1:de:6e:9d:bd:68:6f:36:d6:01:bc:87:1b:
ba:7c:ae:ad:9d:6c:59:14:50:70:8f:1c:c3:1c:91:
c2:46:d6:04:b6:cc:36:22:af:8c:04:37:f5:bb:32:
8c:f6:d4:ee:5e:f9:0a:d5:43:59:b7:ea:e7:9d:ff:
f1:f0:11:2f:65:aa:1a:0a:9d:fb:7a:b6:1f:7d:25:
f0:3c:3c:7a:ac:c5:33:8b:55:8e:55:0a:49:7a:26:
14:f2:76:e9:94:40:57:46:2c:4e:f0:fc:04:12:d4:
1f:a8:76:92:63:d2:9e:9e:f6:69:81:b2:62:88:2e:
c9:af:66:13:76:a0:3e:80:ee:39:a1:91:cd:ce:a8:
35:0f:a7:f9:a9:df:1c:8f:4b:04:de:06:94:f3:96:
d3:bd:99:b6:a0:e2:27:76:ac:10:d0:c1:65:73:05:
7f:ce:90:a6:42:17:e9:47:ab:fa:2a:79:39:d5:53:
9a:8d:29:fe:f8:6a:87:cc:ad:92:eb:ce:47:48:93:
41:0c:45:77:64:97:53:98:bd:d5:ca:11:83:61:50:
d3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E8:25:9E:43:EA:F1:6E:F9:91:83:2E:17:70:89:93:EA:2D:D5:7E
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A18AF/B855BBE8628C11EE9EC0747F4AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A18AF/B855BBE8628C11EE9EC0747F4AD9E6FC/huglnkPq8W75kYMuF3CJk-ot1X4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
327861
sbgp-ipAddrBlock: critical
IPv4:
102.141.236.0/22
196.13.208.0/24
Signature Algorithm: sha256WithRSAEncryption
93:8c:cf:88:37:b0:53:cb:92:45:c0:9c:17:d4:e2:9b:a4:d3:
07:63:d5:e8:7a:cc:43:90:cb:04:f6:02:08:44:0e:0f:88:ea:
76:87:3f:bd:86:d4:11:2b:95:ce:79:36:c6:b5:97:18:10:47:
7c:83:ed:d6:ad:30:20:be:c9:fc:45:75:75:bd:ff:7a:12:79:
8b:1d:92:4b:99:4d:fc:e0:fb:d9:ec:2f:b1:e8:ec:55:f6:03:
a0:57:1b:4d:49:bd:20:31:2b:4a:93:17:96:76:68:b5:a8:a9:
de:c0:ca:e0:4c:b3:ae:3c:83:48:95:05:6f:20:11:e2:56:c6:
00:db:54:e5:06:04:d0:33:f7:dd:81:51:e2:f8:87:89:40:18:
1a:c3:aa:0a:a8:da:64:ad:1d:98:38:8d:59:ca:8d:81:b3:b6:
de:cf:3b:31:bc:53:58:63:29:73:41:3d:6a:09:26:87:4a:db:
19:73:10:cf:28:8e:26:4c:5c:a0:36:58:de:4d:26:9c:18:d1:
4f:51:9c:18:ba:71:b5:57:ab:33:fc:85:bb:4e:64:75:5f:26:
aa:69:19:36:c5:52:8e:24:ae:b8:24:01:56:94:51:97:41:91:
c4:16:be:e0:fe:2e:75:19:2e:87:e7:ab:e2:6c:c3:03:f9:43:
ac:e7:3c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:33:27 2025 by rpki-client