Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer
File: nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer (raw, json)
Hash identifier: DGRv4I8M7In/HNag34jI8bG5qYxav+IiUbgQiHxHCrY=
Subject key identifier: 9C:D4:13:96:AB:CF:9B:B9:EF:F6:E2:68:55:32:4F:83:C5:9D:C6:9A
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2DA2
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:54:10 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 41.206.160.0/19
IP: 197.242.32.0/19
IP: 2001:42c8::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11682 (0x2da2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:54:10 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F362FF17AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ea:16:f5:d4:30:77:fd:54:98:24:ce:ee:22:
c9:6d:75:f2:7d:44:ef:fd:58:38:1b:4f:d2:27:bf:
2c:46:80:f3:40:18:a1:ac:d0:ce:91:0c:fa:5d:9f:
2c:7c:5a:b3:29:de:30:3d:03:e0:5d:2b:a6:e2:34:
6c:33:69:d4:aa:c2:f2:45:60:14:fd:bf:77:8f:f0:
1a:25:c6:a1:d3:85:6f:e2:32:d2:20:df:33:2e:e5:
c7:f2:e5:69:74:88:af:1d:e0:27:ca:37:a3:36:59:
17:6d:ef:93:ee:48:65:72:74:c2:97:8a:98:2b:72:
b2:8c:61:3a:cd:98:23:f8:eb:8c:a5:70:58:1c:9e:
ae:6f:dc:56:62:6e:50:03:81:dc:f5:3b:3b:67:d4:
81:a6:f1:bf:e6:5c:ea:40:08:09:bb:23:fb:80:e7:
35:9d:02:bd:6d:10:96:6c:8e:ef:7f:5c:e6:a8:1c:
55:18:58:26:ea:82:bb:b3:b9:89:11:b8:2b:38:ba:
08:9a:06:71:c4:48:99:f0:87:19:e1:bd:b0:99:91:
3a:81:94:cb:8e:c0:3b:59:08:72:ee:dc:78:67:d6:
6b:07:91:50:e1:f0:9b:0d:0a:44:d0:5a:58:ea:f6:
4c:60:7a:5a:bf:a9:e0:64:e5:88:75:29:11:04:6b:
fc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D4:13:96:AB:CF:9B:B9:EF:F6:E2:68:55:32:4F:83:C5:9D:C6:9A
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
sbgp-ipAddrBlock: critical
IPv4:
41.206.160.0/19
197.242.32.0/19
IPv6:
2001:42c8::/32
Signature Algorithm: sha256WithRSAEncryption
7d:c9:d9:57:6b:4e:69:c4:d6:43:4b:fc:b6:79:98:75:89:b3:
68:b9:20:2f:02:36:38:63:fc:2f:f0:3c:30:f3:a4:b4:fd:c9:
5b:3d:38:79:3d:02:bb:7b:93:ca:7d:3c:e2:3f:1a:b3:ea:f1:
2f:c8:91:97:a9:40:e9:c7:3a:a3:6c:e9:37:0b:b8:65:8d:25:
0e:30:46:9d:f1:75:16:77:27:a0:53:98:16:ba:0b:ad:d2:dd:
81:58:38:67:8f:52:7a:27:27:73:00:e7:32:b4:15:00:42:01:
b1:02:40:c9:df:a0:2b:ea:07:39:d8:f1:74:db:a8:60:ab:28:
2d:a0:f8:bb:ec:7b:7c:06:eb:a5:f5:ed:d4:9b:f8:36:cd:c5:
82:7c:02:fd:87:f5:d7:5f:53:fa:a0:7a:a5:c2:96:2f:be:95:
4d:8a:6b:b8:b5:d3:a1:bd:8f:9a:08:7a:59:37:57:02:c7:52:
92:f4:16:7b:de:97:43:b2:58:a3:07:9e:49:a2:5d:4a:fc:6a:
07:d9:9a:67:01:7a:14:ba:b6:bf:b7:41:86:31:59:17:3f:3c:
b0:2c:be:c2:e8:65:6c:03:d6:7c:0f:3a:ed:5a:86:ec:10:1e:
62:8b:d2:ec:9a:31:89:70:99:f5:be:b3:07:9c:a9:92:34:85:
39:6c:d5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:53:19 2025 by rpki-client