Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
File: kOiZk2355ouadQW_vmO4r6Cneuk.cer (raw, json)
Hash identifier: Px/uTPEkMi8b2D5CsPkJnbc+wBM0T3/fUNR59sxbX2M=
Subject key identifier: 90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3031
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:07:21 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 26422
AS: 37239
IP: 41.76.200.0/21
IP: 154.70.224.0/19
IP: 154.72.56.0/21
IP: 196.46.184.0/22
IP: 197.234.16.0/20
IP: 2c0f:fe78::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12337 (0x3031)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 03:07:21 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36F2B14AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ca:c3:3b:4a:42:9e:4a:69:98:1c:2d:55:16:
73:b3:3a:98:90:ad:05:00:fd:36:78:d1:b7:bf:c1:
cb:98:ff:3b:9f:f0:cc:f5:4c:88:ee:ab:9c:89:ca:
8c:9b:fc:98:8c:c6:c1:8c:a9:e1:9f:0e:23:13:78:
5a:4e:98:ab:2e:84:82:d8:7e:34:5f:34:99:00:f0:
99:a0:03:bc:67:a0:e1:00:50:b5:77:8a:bd:71:8f:
10:fc:cd:3e:bd:8c:4d:d0:e8:92:9a:aa:47:c5:1e:
61:bd:ac:50:e6:b1:b0:c2:6d:fd:72:92:95:d3:39:
3e:11:b6:ae:be:24:a6:ea:ff:8d:37:6f:b3:ff:3b:
7b:33:54:93:c4:a4:3e:dd:9e:32:b8:80:2a:19:57:
4d:cf:3e:d2:ab:98:c5:00:12:cb:28:ed:18:37:2f:
28:f2:30:7c:f1:36:9c:20:fe:22:e9:33:81:5a:a9:
0b:ea:4f:72:58:ad:c5:03:9f:c3:c6:cc:c5:a8:91:
47:50:cd:12:95:85:64:5e:cb:95:de:1f:7d:72:94:
cd:ac:1a:ed:f3:64:00:5b:4e:02:00:7d:5d:94:a7:
f2:37:dd:27:59:5d:18:51:30:96:64:77:40:c7:ac:
1f:b2:be:0f:c3:be:7b:ae:86:fd:5a:c8:f2:f5:a2:
8e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
26422
37239
sbgp-ipAddrBlock: critical
IPv4:
41.76.200.0/21
154.70.224.0/19
154.72.56.0/21
196.46.184.0/22
197.234.16.0/20
IPv6:
2c0f:fe78::/32
Signature Algorithm: sha256WithRSAEncryption
8f:7b:e5:2b:8f:52:75:1c:ab:0e:ab:ce:2e:ce:97:36:92:0f:
30:97:39:21:a7:e7:6c:5c:9a:ff:01:82:fa:24:a7:f0:85:94:
c3:cd:c2:84:04:4a:da:f5:8f:c5:d4:c9:1c:7e:ec:ae:13:a7:
da:b9:0b:ca:21:a4:07:17:01:2f:2d:ac:8b:de:8c:06:1f:f6:
4e:8d:28:af:59:dd:05:2a:30:a1:61:e9:a6:a9:e1:19:c8:11:
3c:3a:51:63:97:d1:18:b5:c2:3c:69:32:9e:6d:bd:d2:e6:b5:
1f:97:e6:db:4e:8c:aa:ad:2b:75:9f:69:a9:44:79:d4:9f:43:
13:ff:a0:44:b3:53:8c:9f:79:13:86:3f:35:0b:a4:55:d6:5d:
43:25:89:e9:b5:cb:09:cc:1e:f0:06:03:cd:ee:81:20:0f:ed:
45:f3:8d:4b:63:e5:af:0c:03:21:68:d1:2f:af:e6:42:51:65:
a7:e8:5b:83:35:90:4e:63:a1:17:7c:82:33:ab:d5:70:bd:4b:
65:0c:5d:86:07:26:07:82:b5:9e:a8:21:89:30:56:7f:0d:d4:
dc:af:6d:3f:d6:ab:93:70:c5:30:62:4f:01:a8:a1:4f:da:74:
bb:b8:8b:13:c4:6a:ab:6b:87:84:ee:b4:73:46:15:3f:2f:e3:
0d:3e:b6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:53:19 2025 by rpki-client