Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
File: ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer (raw, json)
Hash identifier: 7N1HCuF5DVjFCzrhEwP4u49p9AuqTwz+3Sqe1ydog/A=
Subject key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3091
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:26:53 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 33771
AS: 37061
IP: 41.80.0.0/15
IP: 41.90.0.0/16
IP: 41.139.128.0/17
IP: 41.203.208.0/20
IP: 105.48.0.0/12
IP: 105.160.0.0/13
IP: 196.96.0.0/12
IP: 196.201.208.0/20
IP: 197.176.0.0/13
IP: 197.248.0.0/16
IP: 2001:43d0::/32
IP: 2c0f:fe38::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12433 (0x3091)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 03:26:53 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3682104AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dd:79:c0:73:7b:b3:a7:57:21:19:b4:9a:7f:
04:88:3c:4e:ce:4a:62:2a:42:2f:de:c6:6a:00:63:
0a:3f:8c:62:aa:99:0f:ba:b2:ea:da:bc:02:8d:f9:
3e:72:68:fc:2a:76:d9:52:f7:7d:8d:bf:7d:e3:dd:
c1:93:78:71:63:b6:52:5b:dc:5c:85:88:cd:16:5b:
24:51:2a:39:26:bf:d2:e8:85:21:08:92:fb:fa:69:
56:b8:6d:01:c0:12:b6:cd:7f:44:56:d9:7d:0d:a0:
89:c9:5d:79:08:94:13:55:04:1a:00:68:48:79:bf:
0d:c8:be:8c:1f:f4:97:be:fd:49:00:a3:79:e1:3e:
e1:f0:da:d3:55:7d:fe:ef:bd:c2:a7:94:c1:6a:9e:
5d:4f:7f:03:09:bf:eb:c4:01:34:f3:33:8f:2d:1b:
fc:fa:4c:8d:b4:31:4e:8f:02:b5:f5:23:07:3a:57:
0d:d5:52:c4:7f:3b:18:83:d5:d1:f7:7a:b1:78:d5:
27:74:62:25:62:66:70:0a:59:fd:19:a2:11:b4:60:
08:b3:86:24:28:1b:da:7f:fb:e8:bf:6b:20:bb:17:
bf:6f:a7:a1:0f:51:27:1a:47:70:15:d7:06:38:a7:
0a:91:41:44:ef:59:0f:36:53:a1:05:a3:34:68:55:
cb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
33771
37061
sbgp-ipAddrBlock: critical
IPv4:
41.80.0.0/15
41.90.0.0/16
41.139.128.0/17
41.203.208.0/20
105.48.0.0/12
105.160.0.0/13
196.96.0.0/12
196.201.208.0/20
197.176.0.0/13
197.248.0.0/16
IPv6:
2001:43d0::/32
2c0f:fe38::/32
Signature Algorithm: sha256WithRSAEncryption
69:8a:af:7f:3e:2e:fc:bf:f1:40:87:8d:f6:85:ed:99:d9:b3:
7c:85:65:60:8d:0f:f0:54:d9:a0:c1:8b:cf:d0:17:70:ad:f5:
c8:3b:0e:f0:7e:3a:56:d8:18:48:17:03:63:98:4c:24:5e:5c:
0b:6f:45:54:6f:82:31:cb:a7:74:3a:bb:1c:ab:e5:c7:9a:17:
b0:24:c6:78:95:9b:75:6c:3a:9a:99:50:f5:93:40:e2:36:dd:
76:79:b5:c1:c5:97:3e:38:66:2f:7b:48:54:f7:d3:e1:86:1b:
d9:b7:57:71:d4:ab:ba:60:95:c8:2a:92:67:6a:7b:14:58:b3:
25:89:62:44:d9:64:b1:d2:1a:ea:79:cf:8c:34:3d:64:88:c3:
01:b4:a1:15:76:74:37:34:8a:7f:2c:97:fa:42:62:24:57:f7:
34:59:ae:1d:2c:41:fd:ff:27:21:ca:41:49:81:28:7e:c1:12:
a1:b7:9f:37:8d:54:61:e7:57:24:a8:93:ce:40:cd:0a:ff:c7:
54:9e:fa:5b:46:49:d2:75:84:b3:63:de:66:23:80:a9:23:21:
e1:6c:f2:9c:f4:9f:60:0c:db:59:12:d4:6c:66:36:f9:3e:e4:
b6:82:41:c1:63:db:09:46:a5:cf:73:88:01:9c:f6:9e:84:03:
91:d3:e7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:37:33 2025 by rpki-client