Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/nHonja2J7WPpPiUhm0zaALEAYZM.cer
File: nHonja2J7WPpPiUhm0zaALEAYZM.cer (raw, json)
Hash identifier: +vrTSRtPM8eCCgcFjenW3eRNewX+VkgfnWtqy75kNHs=
Subject key identifier: 9C:7A:27:8D:AD:89:ED:63:E9:3E:25:21:9B:4C:DA:00:B1:00:61:93
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3136
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 04:01:19 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 41.207.160.0/19
IP: 196.168.0.0/14
IP: 197.148.96.0/19
IP: 2c0f:f578::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12598 (0x3136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 04:01:19 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36974EEAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ce:1e:70:93:67:ce:8a:c1:f2:d0:45:6f:96:
c8:dd:b6:2c:34:77:b3:ab:1a:a0:60:27:a3:2e:4d:
26:8f:1c:f8:61:07:cc:8a:ab:45:59:d2:e5:79:b7:
92:cd:26:1a:a5:f6:47:f7:a7:03:16:56:45:b8:ea:
68:11:bf:8e:7d:3c:f4:d6:12:bd:e0:5c:e7:d7:ae:
a7:71:f1:14:25:9c:6b:96:d7:4d:a7:5b:84:14:d3:
3c:9c:70:01:56:16:f5:68:e9:fb:ee:9b:d1:97:d2:
00:81:62:f8:4d:ac:7f:31:d3:a2:be:25:71:8c:4c:
cf:0b:ee:a1:4f:ae:36:a8:bf:46:f8:3c:96:20:aa:
22:24:13:0b:07:b8:26:75:a1:56:b8:07:fa:fa:e3:
d8:a3:fa:6f:7b:22:79:e5:40:2f:35:0e:c6:64:db:
cf:12:73:47:2f:b2:19:23:b0:db:e6:19:e4:3a:2d:
73:71:4b:67:9c:86:93:4e:6c:7f:64:22:19:ba:9b:
91:1b:21:a1:f6:eb:9b:4a:2d:1d:4c:f2:25:a9:51:
47:ed:e3:a7:da:2a:9e:3f:f4:a3:27:88:84:43:1e:
37:3c:b2:4e:14:51:0f:f5:0b:87:31:ec:a5:1b:a8:
66:b6:af:2d:6b:86:25:00:b7:9b:d8:8c:0d:59:27:
91:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:7A:27:8D:AD:89:ED:63:E9:3E:25:21:9B:4C:DA:00:B1:00:61:93
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.mft
sbgp-ipAddrBlock: critical
IPv4:
41.207.160.0/19
196.168.0.0/14
197.148.96.0/19
IPv6:
2c0f:f578::/32
Signature Algorithm: sha256WithRSAEncryption
4d:5f:71:f7:90:03:a0:cd:de:34:78:ce:a4:d7:10:b7:ea:79:
cb:cb:4f:15:9a:ac:82:81:e5:f8:5b:81:19:77:70:46:fc:b5:
88:fe:81:a5:24:23:7f:04:ae:89:1e:04:40:9c:53:72:6f:c2:
6a:15:f6:fe:18:9e:34:ef:f1:04:d4:21:be:18:53:2c:e5:84:
18:e4:5f:32:41:a0:a0:d1:47:36:74:d9:4d:3f:d4:1a:3a:cf:
6e:1b:39:68:95:f3:fd:ae:04:28:0c:e4:d5:19:8c:28:07:44:
c5:3b:5b:a0:ff:2c:af:28:ed:08:39:3e:d0:07:51:35:c2:98:
d9:a0:85:b7:cd:0a:51:6b:c0:fa:37:83:e4:28:81:18:6e:00:
84:c3:6d:a6:cb:33:b7:45:58:d2:e3:56:80:5f:21:22:ef:a0:
41:42:11:ba:73:4d:d8:e0:95:1d:37:86:0e:c1:5a:55:13:59:
22:ae:85:94:fb:dd:57:6d:5a:8e:cd:7b:79:2a:e4:bd:eb:85:
6d:8f:63:b5:95:72:26:20:79:de:93:15:a6:1c:a7:41:2a:12:
d2:5a:94:da:c7:fe:f4:fa:1a:e5:9c:e1:bc:bc:4c:40:1b:f9:
ab:62:ac:60:19:1c:af:bb:af:42:c3:ce:15:f3:cb:ad:49:3d:
6a:e3:a1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:38:27 2025 by rpki-client