Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer
File: lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer (raw, json)
Hash identifier: u1tOsqCcD7RUElmpNkwu97V7z309637O9gIlEFUQOH0=
Subject key identifier: 94:96:71:27:FF:64:EC:7C:72:A3:AB:EA:16:CE:69:AE:DA:7F:68:34
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2D6B
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:42:05 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328696
IP: 102.222.116.0/22
IP: 2c0f:e8f0::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11627 (0x2d6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:42:05 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3628288AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d9:ab:2b:21:9b:a8:d8:6b:48:c4:27:9d:15:
21:c4:0a:66:5d:95:cc:2f:b0:00:bb:a7:4e:96:c5:
0d:64:67:da:c9:ee:4e:ca:7a:15:2f:a0:fd:d1:e1:
a2:aa:1a:14:8b:d4:85:1a:5c:23:61:40:c5:88:96:
e3:51:c9:6a:eb:2c:e9:b9:4d:14:83:cf:91:72:58:
c0:39:fb:50:6c:96:3c:1d:93:a0:f7:ba:3b:fa:84:
a7:0a:22:b6:ea:07:fc:ed:c1:c5:81:9b:8d:57:96:
a4:e8:78:e8:d8:cb:a3:f4:9a:2e:5d:f3:a4:c9:17:
00:c0:04:d4:e8:9c:d4:b0:b9:b8:bd:b6:ac:ce:d9:
3a:41:5b:46:99:e7:47:db:33:01:46:2a:2b:39:ed:
ca:c3:d1:a8:60:c1:6e:51:c4:b9:42:12:6c:63:64:
f6:f0:d9:0d:ba:11:6a:b1:52:63:e1:86:ae:f9:2e:
f2:ef:7d:31:72:bf:00:75:ec:f2:75:a5:9d:dd:f6:
d7:26:f5:22:de:8c:20:1e:6d:2f:77:2c:bf:cc:ed:
5a:5f:42:35:ea:fd:70:fb:6d:fc:e5:08:36:ee:ad:
6d:35:79:3d:13:61:6d:fd:90:44:c0:ef:b1:81:19:
40:4f:db:fd:a6:dd:20:b7:d8:59:df:7a:41:38:dc:
b8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:96:71:27:FF:64:EC:7C:72:A3:AB:EA:16:CE:69:AE:DA:7F:68:34
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328696
sbgp-ipAddrBlock: critical
IPv4:
102.222.116.0/22
IPv6:
2c0f:e8f0::/32
Signature Algorithm: sha256WithRSAEncryption
30:09:ad:d9:a8:19:87:e9:de:42:ea:f6:96:0e:b7:86:ff:e0:
70:3b:8b:fe:40:e7:a6:80:9a:1c:d3:8f:17:ab:33:d7:b3:f3:
6e:bf:a7:14:73:f5:bc:c4:e0:df:b2:19:ba:a7:bc:84:4e:97:
70:34:7a:e7:15:05:1f:f4:19:89:eb:2c:4b:6b:02:a7:b4:b9:
99:52:a5:66:eb:04:55:82:c5:5d:29:09:42:7a:1d:70:31:54:
7d:cc:57:5a:fd:6c:d9:68:0c:72:24:d7:d3:04:7c:21:63:cc:
8f:e2:bd:55:49:d3:0d:a5:6f:13:b0:27:4f:4b:ac:6c:b8:8a:
0a:82:a1:46:b4:cf:2a:78:ca:7c:8c:25:32:97:6a:27:d6:c7:
09:72:02:38:03:5e:d7:02:6c:79:82:6f:9c:2f:cb:cd:53:2e:
16:e9:19:23:89:81:b8:85:38:5a:d0:77:d8:f9:96:dd:e5:e9:
66:a0:ed:09:24:06:1c:df:78:fa:70:ed:c2:34:a3:21:4f:53:
fe:70:94:85:a0:f4:87:38:b7:7d:af:c5:12:57:04:1c:dc:cb:
07:7a:33:e3:5b:62:92:ad:0d:75:7e:db:da:6d:db:0b:cb:17:
1e:27:19:36:26:fe:65:fe:b1:b3:b8:b3:22:f6:94:4c:02:b8:
5e:36:38:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:06 2025 by rpki-client