Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/mEs08lM_l20v8hGUKFlsTLCoNJQ.cer
File: mEs08lM_l20v8hGUKFlsTLCoNJQ.cer (raw, json)
Hash identifier: pRKbev2BwJy5/hDIISHR/pmsuxAQu6f5nVWJVTJh1Z4=
Subject key identifier: 98:4B:34:F2:53:3F:97:6D:2F:F2:11:94:28:59:6C:4C:B0:A8:34:94
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2E1D
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/mEs08lM_l20v8hGUKFlsTLCoNJQ.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:19:20 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329110
IP: 102.214.252.0/22
IP: 2c0f:2c80::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11805 (0x2e1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 01:19:20 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F363E7DEAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f8:3e:03:96:32:4b:74:a9:07:61:8b:fa:f4:
d2:4c:e4:a7:30:2a:70:42:1b:7c:f2:06:7f:38:07:
e6:1a:ab:37:ae:09:fd:41:cb:42:85:f5:58:ee:ac:
75:5b:ed:7a:99:fa:4b:cf:3e:9b:20:db:e6:4f:a5:
d4:61:db:3a:17:1d:95:86:61:75:41:31:b5:67:4f:
8e:11:c1:38:33:04:b1:d6:c3:c0:d3:b7:ef:de:79:
49:46:28:f7:86:58:ef:6b:15:ad:c3:f4:76:5d:30:
3d:2f:47:34:f2:4b:00:21:4c:03:50:02:bd:f3:a1:
19:cf:7d:1a:4d:13:fd:b8:5a:e7:2a:68:48:62:ef:
80:ae:dd:df:78:fc:71:1b:62:5e:46:f6:9a:12:e6:
91:33:cc:a5:01:0d:f8:44:cd:94:90:0d:b4:0a:84:
24:f7:b8:98:0f:77:a1:a2:55:17:ef:38:ea:a4:ad:
d4:3a:43:5d:1e:85:41:22:1f:68:68:1f:db:42:0e:
d4:bb:21:88:4b:04:53:d6:bc:0b:0e:ff:14:34:50:
97:9e:ce:98:31:33:15:c0:8e:b1:5c:b8:43:00:62:
25:01:b6:5a:31:6d:e0:4b:68:29:a2:76:0e:d8:5d:
df:e0:48:d1:19:24:6a:37:16:75:fc:15:24:c2:0e:
a1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4B:34:F2:53:3F:97:6D:2F:F2:11:94:28:59:6C:4C:B0:A8:34:94
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/mEs08lM_l20v8hGUKFlsTLCoNJQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329110
sbgp-ipAddrBlock: critical
IPv4:
102.214.252.0/22
IPv6:
2c0f:2c80::/32
Signature Algorithm: sha256WithRSAEncryption
ad:fe:8a:fb:74:c7:f9:1e:2d:05:52:ea:8c:7a:3a:32:a7:3a:
25:2f:75:81:39:70:9e:1c:86:f9:c8:e6:ea:f2:a3:4b:03:84:
bb:2c:6c:60:66:57:e0:73:3f:6b:f5:e1:e2:12:38:09:37:4d:
81:32:8d:6b:06:e8:04:32:e2:68:90:55:2d:0b:b9:5b:74:5d:
15:5d:d8:cb:bd:a3:19:a3:3e:e3:1e:2c:fc:6b:f9:de:60:4b:
6b:22:48:93:f6:87:44:73:76:9b:38:5d:d4:ec:82:f7:14:59:
a9:73:5e:ce:98:1e:14:af:3e:17:c4:8a:4b:ae:d3:fb:72:5d:
bc:d3:b6:75:84:22:0d:7b:bb:9f:1c:29:f1:90:aa:76:46:a9:
20:eb:85:55:69:99:4c:be:7c:f7:9a:33:c1:d1:74:e0:4b:16:
44:16:43:88:33:6e:47:82:4b:f4:bb:46:50:b7:d7:39:8d:2a:
7c:ba:68:76:61:3a:85:3a:8d:03:dd:64:78:73:f7:68:db:bc:
bc:73:27:09:1f:e8:b0:0c:4d:dd:f2:10:cc:79:ba:f2:d2:1f:
6b:cf:0c:db:91:97:f9:fe:9b:35:81:a3:6a:6f:35:5f:7d:92:
85:a5:4d:75:20:ea:54:5f:02:ea:46:97:93:1a:77:c1:fe:40:
72:6d:85:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:35:29 2025 by rpki-client