Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer
File: kgRBKh8SvNXSs845kazvaXbIhl4.cer (raw, json)
Hash identifier: aDg8Ca0WnwygMatZaeLo6bWYybXzl+aCMi1deh9Puok=
Subject key identifier: 92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2E7D
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:39:33 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37406
IP: 41.79.24.0/22
IP: 105.235.208.0/21
IP: 154.73.88.0/22
IP: 196.201.8.0/22
IP: 2c0f:f690::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11901 (0x2e7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 01:39:33 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3647FF0AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a3:0e:95:c0:36:89:73:50:a6:d9:7e:0b:ab:
cd:5e:76:c8:50:f3:f2:ba:75:63:9d:a4:ce:61:c3:
b5:c7:0f:39:fc:b9:dd:2c:48:8a:da:e0:ee:29:9b:
77:9f:33:4d:b7:ab:85:c9:d2:de:40:6c:e3:64:e6:
c7:c0:59:b7:ba:1b:11:d3:5b:28:87:03:63:ea:f3:
65:6c:a4:89:5d:a5:f2:a9:57:71:1e:23:31:34:d1:
21:31:79:8f:96:47:9f:a1:98:15:7f:a4:bd:1a:ff:
ef:9e:5a:0e:ad:a5:49:a7:c4:ff:93:3f:54:25:75:
8f:e5:63:99:ed:b1:0c:2b:fe:a5:2a:b4:ce:c2:24:
b8:1a:99:78:00:2b:91:4b:df:01:3e:c3:d8:44:53:
5a:0c:09:0a:c9:a3:ae:ca:f9:09:5d:a2:79:de:00:
7f:ea:fe:7d:00:35:72:dc:cf:f6:ce:b8:51:11:32:
13:50:cc:ec:a1:95:ab:26:bb:10:68:01:7b:fa:0d:
7c:a7:9d:e4:5f:b8:8e:d5:a7:39:19:50:23:53:d9:
52:97:7b:90:6b:33:1e:be:a5:12:29:02:45:03:8e:
33:6d:f0:a4:19:f8:e7:c6:83:a8:ab:fd:7f:40:f0:
33:91:a7:66:7c:61:5c:6c:e3:32:85:2a:80:ae:03:
05:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37406
sbgp-ipAddrBlock: critical
IPv4:
41.79.24.0/22
105.235.208.0/21
154.73.88.0/22
196.201.8.0/22
IPv6:
2c0f:f690::/32
Signature Algorithm: sha256WithRSAEncryption
4b:ae:8d:39:68:d3:f3:99:47:fa:84:4f:d6:f6:56:c0:6e:56:
b0:05:b9:a7:2e:19:3c:99:1d:55:d5:d1:31:1c:d1:98:75:11:
f5:02:5c:86:d2:f8:05:7b:d9:15:55:f5:04:5a:58:42:38:82:
06:0b:19:df:29:e5:2b:e8:62:1f:87:7c:80:ce:48:57:00:7b:
2a:ca:38:01:5d:1b:a5:ef:b9:49:ed:31:2c:b4:8b:68:1f:86:
64:3b:33:18:b4:4d:6c:65:5f:d5:4b:82:33:89:fe:64:1b:67:
9d:d8:0a:b2:5a:ae:d9:ad:31:28:f2:4d:ef:49:64:19:62:93:
0b:68:89:be:18:e7:35:eb:97:da:53:1f:fe:37:ac:bf:8e:bb:
87:38:b4:77:7c:5f:f4:2e:a5:fe:11:e8:22:64:72:67:f3:cb:
6d:e7:44:b4:ce:08:2a:f0:ca:23:c7:02:37:74:0a:69:a1:64:
b8:07:98:70:2a:75:8b:ae:e4:78:5b:43:51:84:79:c3:6c:bf:
61:2b:63:b3:87:f3:df:e9:f1:ab:00:a2:31:6e:37:aa:89:ae:
9d:9f:a1:60:46:1f:be:b3:9e:1c:de:26:f3:fb:0d:a3:4d:a9:
ec:3a:20:a9:ed:ea:0a:b0:72:e2:59:37:0b:21:e7:c3:c4:e5:
7b:76:90:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:44:58 2025 by rpki-client