Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/n1zGQpNoeQW6tHWMmF3HaD8QWv8.cer
File: n1zGQpNoeQW6tHWMmF3HaD8QWv8.cer (raw, json)
Hash identifier: 3JF4OnjtofnFb+yhfDagf/QVvp61oP8uyC2HlhUe5OY=
Subject key identifier: 9F:5C:C6:42:93:68:79:05:BA:B4:75:8C:98:5D:C7:68:3F:10:5A:FF
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 32FB
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/n1zGQpNoeQW6tHWMmF3HaD8QWv8.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:38:58 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329029
IP: 102.215.32.0/22
IP: 2c0f:6c80::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13051 (0x32fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 05:38:58 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36D8C86AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:01:f1:54:71:cb:27:ed:70:db:b5:d7:16:fb:
28:87:7c:03:1f:0e:82:e3:71:64:15:c0:ed:36:b7:
1e:ec:4c:17:31:41:92:7b:b2:33:6c:13:d7:41:dd:
64:89:ea:cf:61:c9:c8:47:ea:e3:a5:6e:12:ca:2d:
22:2c:ab:18:4a:2e:a6:a0:ec:c0:27:50:a7:71:de:
a1:3b:2c:03:df:c9:a7:9b:b8:9a:04:ce:a6:0d:81:
1a:cb:61:36:e0:f2:1d:1a:da:e5:6b:ff:28:91:1f:
14:d6:dd:9f:3d:9c:30:df:7a:14:34:1f:5a:44:d8:
e6:51:b0:d4:1f:da:7c:4b:a8:48:44:e7:e2:5d:be:
5d:04:15:58:7f:82:b9:13:fa:a1:bd:c7:b2:02:27:
1f:ea:c0:cf:c4:06:05:66:bd:05:18:9e:d0:cb:d8:
da:ac:be:94:e6:78:63:67:18:d9:d5:46:ad:26:bd:
9c:1b:83:12:ab:08:50:80:6b:13:e8:d7:7a:50:29:
70:36:bd:3b:46:55:c3:ba:27:70:aa:7a:c3:f4:c4:
22:9c:0f:c7:71:80:2e:fe:2d:23:b9:f8:7b:8d:65:
56:c7:17:76:23:06:97:76:c2:4d:83:9d:f8:a8:a8:
98:ae:2a:2c:26:94:d4:b4:8f:61:eb:cd:db:89:6e:
2a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5C:C6:42:93:68:79:05:BA:B4:75:8C:98:5D:C7:68:3F:10:5A:FF
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/n1zGQpNoeQW6tHWMmF3HaD8QWv8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329029
sbgp-ipAddrBlock: critical
IPv4:
102.215.32.0/22
IPv6:
2c0f:6c80::/32
Signature Algorithm: sha256WithRSAEncryption
23:e5:99:49:79:10:08:10:41:d7:91:41:9e:46:10:b2:25:c9:
b9:53:8d:28:f6:9a:07:72:a7:7f:12:50:40:7d:42:1b:d9:d2:
4b:5a:ef:e4:d8:24:aa:db:3b:0e:c0:e3:0f:4c:20:e5:41:84:
bc:b7:63:61:76:76:aa:0a:15:78:e1:ee:41:97:6e:85:23:59:
15:75:01:a0:75:93:03:32:a2:83:14:92:1a:5a:28:28:9b:22:
c2:08:03:cd:05:3f:98:8e:8b:2b:b6:9a:d1:ed:de:50:62:bb:
17:c8:db:eb:34:6d:6c:48:77:64:67:dc:b7:66:ed:3e:0b:ef:
3b:b9:05:f1:8e:d9:b5:10:e6:cd:bf:3c:4d:e3:7a:42:f2:35:
46:de:8a:b2:b9:ed:ec:e1:57:28:cf:4b:b1:db:7d:d4:fe:4a:
88:b4:f3:08:4e:e3:56:4c:95:8f:17:72:d7:50:56:0c:af:4d:
e3:38:b6:ce:b0:cf:6e:00:f0:f3:01:d0:e2:57:11:3f:82:08:
69:26:ad:87:98:7a:c1:01:0c:e4:14:c4:b2:ed:b5:b7:0d:ab:
aa:3f:b2:e2:45:15:61:c9:09:a0:83:cf:42:de:6c:8f:39:71:
35:96:5e:32:ac:e6:ed:12:2d:0a:4f:4c:79:aa:ba:6a:eb:45:
56:ab:8d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:34:28 2025 by rpki-client