Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ktFZJCMJCfKcAkuNX2LWWJdKKMY.cer
File: ktFZJCMJCfKcAkuNX2LWWJdKKMY.cer (raw, json)
Hash identifier: wnmHPR7raj2TAw2Cu7snJBraMxTWCMde9/XS4HVge5c=
Subject key identifier: 92:D1:59:24:23:09:09:F2:9C:02:4B:8D:5F:62:D6:58:97:4A:28:C6
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3071
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:20:23 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37697
IP: 102.210.72.0/22
IP: 196.10.148.0/24
IP: 2c0f:ea68::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12401 (0x3071)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 03:20:23 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F367EEA2AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b7:1b:14:45:14:fd:37:1a:29:14:23:29:f7:
85:28:4f:86:6d:2a:e3:56:69:2a:27:16:fd:6a:6d:
44:6b:cc:14:19:5c:ab:3b:0f:50:ad:6e:bf:f7:d1:
0a:bb:2f:b9:f2:66:d4:fc:01:88:26:b3:9d:dd:ec:
f0:3d:8d:3a:ae:2b:61:ba:3b:53:a6:0b:85:cb:17:
8d:8f:2d:b3:82:c0:c5:5e:75:2f:dd:0b:dd:90:79:
ec:e0:91:37:54:8d:7f:c6:84:95:c6:56:aa:a6:29:
97:10:02:6a:39:ce:6d:3d:53:f0:9d:6f:3b:4c:f8:
15:a7:b1:99:53:b6:ad:a7:cc:1b:39:41:93:a8:5c:
60:92:8a:8f:7a:8d:53:e8:fa:5e:1b:0c:c4:81:71:
1f:8c:13:5a:06:d0:4e:a5:59:82:82:ec:32:98:c7:
7a:b3:82:27:2d:41:24:a8:69:7c:09:0e:b2:42:73:
ba:7b:46:ea:40:60:97:1e:79:0f:94:51:5a:0f:e0:
40:34:28:f2:e5:6b:7c:7b:21:23:7c:28:0c:a6:34:
42:16:7c:b8:ef:69:8b:60:34:73:33:e0:e5:de:7f:
a9:db:55:c3:67:cb:06:fe:ea:02:48:7e:84:f7:3c:
30:ad:44:83:17:fe:e6:cb:0f:1f:dd:5c:90:47:48:
24:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D1:59:24:23:09:09:F2:9C:02:4B:8D:5F:62:D6:58:97:4A:28:C6
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37697
sbgp-ipAddrBlock: critical
IPv4:
102.210.72.0/22
196.10.148.0/24
IPv6:
2c0f:ea68::/32
Signature Algorithm: sha256WithRSAEncryption
c0:fc:0d:62:f0:02:d8:a0:86:f6:db:f9:0c:b3:c3:ca:3b:88:
86:e9:0e:c6:d4:de:a1:31:9f:0e:27:a8:a5:57:f1:f6:0a:e0:
f9:ef:3a:58:e2:19:8c:5d:f4:f6:c4:7b:9e:74:ef:2f:32:cb:
2b:72:e4:a2:34:d3:06:3f:d4:74:13:ad:7d:b8:a5:8c:b1:4b:
86:ff:01:a3:04:97:eb:53:4b:6f:b7:cf:37:c3:a3:20:0e:35:
11:47:89:e7:3b:32:7f:cb:fe:47:f9:dd:1a:ec:bf:f7:bc:21:
b6:f0:72:9e:b2:18:db:e7:59:36:ee:42:8c:a0:91:14:ff:cc:
dc:03:5f:fc:90:15:6e:77:ce:d8:ee:5b:0b:da:33:84:02:da:
8f:2e:51:dd:1e:a0:7d:d5:92:9a:7f:ed:0b:79:75:9a:47:e5:
72:03:3f:4e:d9:98:59:6c:1d:0b:66:5e:64:b5:fd:c6:ea:2b:
8e:b3:d4:ed:28:a2:3b:1a:84:44:10:6a:f8:17:d8:0b:ef:0e:
6e:d2:2d:7a:d2:bf:90:bd:8e:a5:66:70:c9:86:04:95:01:8c:
f0:9d:da:1c:57:b9:47:ee:35:c6:24:cb:ac:be:c5:b6:2c:bc:
5d:28:3b:ca:4c:29:91:f5:2f:71:4e:c8:a4:8f:cd:27:72:2f:
44:0f:b1:fa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:36:32 2025 by rpki-client