Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer
File: jLiroOzpR3OblerbiB6h0NL_09A.cer (raw, json)
Hash identifier: LzT6blRFlh94ePWI9veVm+SkCEnvQ3zgSZatwCUM1/I=
Subject key identifier: 8C:B8:AB:A0:EC:E9:47:73:9B:95:EA:DB:88:1E:A1:D0:D2:FF:D3:D0
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3153
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 04:07:25 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328843
IP: 102.220.48.0/22
IP: 2c0f:5e00::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12627 (0x3153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 04:07:25 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36997F0AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e1:ee:5d:91:ec:7b:24:2b:60:48:0e:c8:24:
be:48:2c:ee:71:df:3b:70:6b:2c:d4:3e:04:68:96:
64:8d:c4:89:3c:70:e3:45:eb:ba:31:6c:bb:34:5e:
ef:ba:99:4f:8b:44:62:2c:99:51:91:59:6b:f6:18:
81:d8:47:44:8b:51:22:79:21:fb:56:fc:64:4c:51:
2c:f1:01:ed:26:a6:0f:66:4d:38:8e:e4:39:9f:b7:
34:05:f6:92:86:42:23:da:da:82:02:6e:bb:ff:9e:
aa:35:ae:71:9e:b2:84:e1:76:2d:66:91:58:de:60:
4b:f2:12:ac:f2:da:b2:8c:62:0a:b8:51:6c:ba:40:
80:7b:a9:0b:1e:8e:b0:27:ea:10:07:9e:70:06:b4:
f3:11:46:93:28:fa:83:31:6d:3a:39:cd:44:a6:d9:
6c:85:ea:b1:55:a2:19:78:ab:5b:41:09:47:9c:ee:
d2:22:fb:f9:37:69:f5:1f:dc:2d:e5:b0:9f:e9:91:
4c:41:47:8e:4d:2c:a3:e5:b0:20:1f:bf:34:be:54:
54:4f:2f:0d:52:dc:63:d1:d5:8a:af:a9:e4:68:67:
37:f5:9c:12:dd:32:d6:08:dd:0c:19:74:68:8b:16:
a9:93:bf:ca:9c:07:3a:ab:2f:c7:2c:b3:a8:e0:8e:
fe:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B8:AB:A0:EC:E9:47:73:9B:95:EA:DB:88:1E:A1:D0:D2:FF:D3:D0
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328843
sbgp-ipAddrBlock: critical
IPv4:
102.220.48.0/22
IPv6:
2c0f:5e00::/32
Signature Algorithm: sha256WithRSAEncryption
c5:14:82:1d:0c:74:6a:a1:7f:ec:6d:2c:8c:a4:d0:1d:84:f6:
5c:ed:c6:e6:c9:59:4a:a0:09:a0:23:72:44:53:75:c6:67:a9:
cf:5a:62:e7:a3:cd:dc:37:79:da:97:0b:90:d9:19:69:b7:97:
55:17:e4:c6:7e:3b:a6:f8:6d:c8:15:2b:dd:f5:62:bf:56:95:
73:54:5c:bc:86:fa:99:87:35:a3:cb:e6:53:dd:c5:17:b8:d3:
b3:9f:04:7e:52:98:91:58:d7:2f:1f:ca:c7:f5:7f:15:69:79:
11:bc:05:8d:b3:2b:d0:f7:be:6b:94:dd:a4:51:89:5a:ca:fd:
33:c7:a2:52:5c:3a:fa:e9:40:e8:f7:fd:e8:10:b7:f5:72:f7:
22:82:90:b9:83:95:17:30:d7:f3:f7:f4:aa:26:67:41:18:15:
cf:6f:f0:11:ad:0c:b4:12:cb:e6:04:e4:26:0d:15:e2:8d:14:
fe:95:21:49:3b:5c:02:77:c4:92:73:10:b9:27:73:ea:cd:0e:
51:78:b6:75:8f:42:67:d1:c6:b9:30:2b:82:3f:2d:3c:ba:8e:
73:cc:b0:a3:f4:d4:b6:52:1b:c4:66:b5:86:b5:fd:b3:0f:1b:
bd:f1:6d:e1:c7:07:4f:ca:bd:b7:07:4f:eb:5f:93:39:27:f0:
e0:00:aa:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:49:25 2025 by rpki-client