Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer
File: mCHIciHScLQv-d2CYEi5ksDg4_g.cer (raw, json)
Hash identifier: 2iA3Z6xZvK2vewMoA+6GZ7zty33VM7HZLdcV98nbt1Y=
Subject key identifier: 98:21:C8:72:21:D2:70:B4:2F:F9:DD:82:60:48:B9:92:C0:E0:E3:F8
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 323C
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 04:57:22 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 1228 -- 1232
AS: 2018
AS: 6149
IP: 154.114.0.0/17
IP: 154.115.0.0/17
IP: 196.21.0.0/16
IP: 196.24.0.0/16
IP: 2001:4200::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12860 (0x323c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 04:57:22 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36B9F4BAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d0:05:b1:12:c2:0c:30:84:cb:fe:a4:03:1d:
ea:6b:db:93:df:f3:ff:c2:a9:e0:c3:f6:b7:ce:e9:
0c:e0:1b:6f:e8:1d:19:47:d6:41:44:34:b0:44:ee:
86:92:33:f1:f2:d4:24:4c:a4:f7:24:c2:a2:e1:79:
08:aa:11:09:19:f7:14:ad:79:d5:5d:05:93:4f:29:
21:c0:ae:e6:aa:9b:3c:a7:51:3a:0b:4d:6b:95:92:
a2:31:be:2d:87:3f:5e:76:bd:6d:0f:5b:8e:3c:cf:
30:92:f0:ea:a4:62:9a:b5:41:ae:14:25:6c:c2:94:
0c:93:79:70:10:9d:31:03:fc:a3:32:5a:47:e7:90:
c8:7a:19:1f:44:da:26:0b:5e:78:29:ba:29:7d:65:
e3:14:01:76:b7:96:3d:74:24:23:1b:b4:e4:26:68:
3e:82:35:04:2b:cf:93:79:ed:73:66:62:d2:5c:d3:
c8:4c:f8:e6:b2:2a:dd:08:60:9c:f6:fd:a4:b2:44:
ff:24:d2:45:ad:29:4a:fb:b1:ea:f4:43:86:3b:03:
45:f4:05:f1:3b:24:92:fa:5f:e5:59:cc:13:40:8e:
47:cd:f1:44:69:51:61:04:30:63:c9:94:a4:9c:08:
ac:c0:7a:bd:a9:4b:8b:73:5b:ca:eb:98:58:d6:61:
95:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:21:C8:72:21:D2:70:B4:2F:F9:DD:82:60:48:B9:92:C0:E0:E3:F8
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
1228-1232
2018
6149
sbgp-ipAddrBlock: critical
IPv4:
154.114.0.0/17
154.115.0.0/17
196.21.0.0/16
196.24.0.0/16
IPv6:
2001:4200::/32
Signature Algorithm: sha256WithRSAEncryption
6b:95:00:bb:2c:71:07:d5:91:2d:ab:21:86:57:ff:77:15:b4:
0f:65:ca:8f:7f:0f:b9:52:75:b9:a0:b0:a0:1f:eb:8c:b1:ea:
91:46:5d:c9:d4:ad:74:5a:9c:da:6a:c6:ef:ef:62:69:07:5f:
c7:79:67:5b:8a:a6:d9:5b:cb:f3:d5:f3:bd:e7:f7:e0:90:ec:
a2:0d:5d:5c:13:c2:bd:0e:2f:d2:87:12:5a:f5:7e:14:d3:0d:
7e:ef:b2:62:1b:ed:47:85:a4:93:67:b7:b7:c5:e1:82:e8:17:
b7:b6:20:25:9d:34:8a:dc:65:9e:1f:e9:84:bf:bb:b3:28:d0:
92:cf:1c:60:6a:dc:00:d7:39:4a:b0:d3:00:02:c1:e8:78:c8:
6d:21:0e:5d:60:0a:18:60:df:9e:d9:8d:e1:ee:bc:81:99:b2:
fc:ec:f1:bc:03:92:f0:46:8e:2e:21:dc:3d:01:10:c2:a7:cc:
42:4c:87:f1:6d:e6:98:56:33:41:85:96:31:7a:13:10:f0:49:
f7:7b:60:f9:cb:78:36:11:bb:53:7e:c6:6a:36:b5:06:7a:0a:
9e:39:f6:1a:42:01:55:1f:e6:41:16:88:90:2e:fd:91:c6:06:
0c:f6:d6:77:76:67:6f:ab:87:50:e7:04:63:bd:1d:00:02:37:
b2:e6:66:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:55:23 2025 by rpki-client