Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/jslBzFrhaLO7xSJOt19628St-As.cer
File: jslBzFrhaLO7xSJOt19628St-As.cer (raw, json)
Hash identifier: vZ460lR/U44rsk/ZDCCYUXVfmTI6JV3ZS/BXFotV+/o=
Subject key identifier: 8E:C9:41:CC:5A:E1:68:B3:BB:C5:22:4E:B7:5F:7A:DB:C4:AD:F8:0B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2DA9
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3640700/70FB371C14FE11E59B04AF2AF8AEA228/jslBzFrhaLO7xSJOt19628St-As.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3640700/70FB371C14FE11E59B04AF2AF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:55:27 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 327915
IP: 41.76.72.0/21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11689 (0x2da9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:55:27 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3640700AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:00:06:86:c0:d1:30:92:59:8d:a7:a9:22:4a:
e1:0e:82:ef:4a:49:b3:a4:cb:ff:e1:7e:df:23:30:
66:69:13:8d:ac:b8:d3:5b:d4:26:66:22:eb:4c:65:
ff:02:02:2c:24:09:e5:0d:8f:e5:6a:cc:eb:79:cb:
03:c9:55:ed:08:62:16:6c:6c:05:55:9e:f8:be:48:
25:34:18:fc:ae:ef:80:b9:db:e8:b5:dc:6a:ed:36:
e4:d0:78:12:92:c7:87:8b:b2:d7:0a:09:60:91:91:
15:36:50:d1:1e:4d:58:6b:fe:ad:3c:f4:41:6a:a6:
e9:dc:fd:3b:a3:b7:b9:06:3d:47:f4:fc:e2:42:32:
32:8a:34:69:b7:ec:b3:2b:25:96:07:8c:22:9b:3b:
7c:b3:1a:b0:e1:b9:2e:df:5e:2b:d1:1b:36:49:84:
40:6e:f3:67:6b:40:86:00:b5:99:0b:24:36:96:9f:
1e:f2:63:4c:ef:95:a1:10:21:1b:85:75:a3:05:c5:
9f:49:80:8a:22:5c:68:0a:32:64:7e:a2:6f:a3:0a:
3d:64:b5:f5:f9:18:45:ba:31:f8:70:46:af:b6:dd:
0b:16:bd:7b:66:20:88:82:52:19:0d:a9:5e:63:85:
a3:52:a1:bf:c9:ae:2e:f4:23:7b:d4:bc:b2:87:39:
91:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C9:41:CC:5A:E1:68:B3:BB:C5:22:4E:B7:5F:7A:DB:C4:AD:F8:0B
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640700/70FB371C14FE11E59B04AF2AF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640700/70FB371C14FE11E59B04AF2AF8AEA228/jslBzFrhaLO7xSJOt19628St-As.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
327915
sbgp-ipAddrBlock: critical
IPv4:
41.76.72.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:03:1d:0a:aa:34:f5:8f:41:ec:2d:1f:49:c2:13:45:f2:dc:
d6:25:51:8e:0f:a1:70:40:11:77:a2:7f:8b:88:cd:fe:8a:0a:
bb:1b:d6:8c:67:7d:e7:d5:e8:12:49:ac:e6:13:a0:41:27:02:
c8:14:ba:a6:cb:8f:a3:70:9f:cf:7b:e3:55:5e:9d:fb:e6:dd:
f4:2d:5a:94:63:91:1f:9c:0b:ed:90:da:dc:dc:93:fb:bd:25:
51:3b:ae:17:fb:8e:a2:68:8b:fc:0e:39:92:0b:20:e3:70:ca:
cf:12:1c:37:20:23:bd:55:53:23:f9:d3:6b:a7:8d:87:df:2b:
dc:98:60:3d:6a:88:d5:58:11:07:df:f9:df:49:ec:03:b9:97:
98:49:60:c7:cc:c6:8e:a6:f5:f7:8c:af:50:ec:b5:8e:43:dd:
30:ed:76:60:38:4a:51:88:f2:49:e8:61:c7:2a:07:0d:16:76:
8d:24:72:9b:0d:0c:b1:3c:08:5c:c5:43:22:96:6d:91:44:a7:
92:fa:3b:46:cd:ac:cc:b2:77:5a:3b:8f:ee:16:28:c0:bf:a2:
44:e8:a6:d0:14:aa:49:e5:b9:10:5b:ce:71:86:ba:2f:20:7f:
4a:ac:6d:fd:21:f3:15:28:7f:11:06:ec:41:c5:f8:e6:ac:ca:
8e:ba:f4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:33:29 2025 by rpki-client