Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/nZEfOSNannHK5JlXppouUkKg3TU.cer
File: nZEfOSNannHK5JlXppouUkKg3TU.cer (raw, json)
Hash identifier: lmiXUFUw84ZZRY82vr0pfJCE70Z5YbDn65XKthYUHbk=
Subject key identifier: 9D:91:1F:39:23:5A:9E:71:CA:E4:99:57:A6:9A:2E:52:42:A0:DD:35
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3216
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 04:49:42 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328797
IP: 102.221.28.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12822 (0x3216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 04:49:42 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36B4CC8AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a1:53:54:0d:09:99:09:99:ed:46:9f:7b:bd:
86:7b:29:f6:20:68:5f:e0:ae:61:7c:8b:51:c8:63:
31:de:aa:d8:2c:86:f7:17:9d:54:42:76:41:ad:06:
34:1a:2d:7f:11:5a:4c:a2:29:2b:10:c6:ea:c9:8f:
4c:ec:dd:9e:1a:d1:7c:94:36:e9:e5:7b:7d:54:23:
37:78:91:b6:54:7c:a1:81:15:13:f2:ef:9c:98:e7:
d0:37:ea:fa:00:40:50:9a:ae:13:f8:60:39:4b:4d:
15:7d:34:6d:0e:32:d3:1b:c7:c1:5f:cd:09:ee:ce:
df:8b:de:81:2b:4b:a5:d6:03:49:32:e1:02:fc:cf:
43:80:fb:26:54:97:45:c1:49:ba:fa:9f:fe:e2:ec:
97:3c:67:6b:85:c0:33:32:70:6f:92:a6:0e:5c:67:
58:4c:6f:88:69:64:44:b6:69:69:b9:70:b2:b8:bb:
00:87:3f:6c:c7:dd:c7:cb:09:62:41:49:cd:54:6a:
05:c0:e1:2b:b9:c4:cc:e8:89:d8:02:0d:31:f4:e7:
84:b7:e0:17:85:56:75:c1:bf:5f:bc:80:59:7c:19:
71:f6:ff:a3:05:ec:35:d0:fd:8d:2b:5c:1d:a6:b5:
9f:a4:f2:75:8c:1a:e0:4e:36:47:7f:9a:03:96:8f:
1d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:91:1F:39:23:5A:9E:71:CA:E4:99:57:A6:9A:2E:52:42:A0:DD:35
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328797
sbgp-ipAddrBlock: critical
IPv4:
102.221.28.0/22
Signature Algorithm: sha256WithRSAEncryption
20:42:64:bf:d7:9c:5a:61:81:3d:d2:a6:c0:12:ab:58:b6:c3:
43:d1:ba:b3:b7:63:aa:1e:92:25:70:13:70:c3:e1:21:d5:5e:
92:2a:31:89:01:1e:67:8f:63:b9:e6:85:a9:1e:68:20:db:d9:
52:db:35:d5:ea:69:97:5f:df:11:4e:82:f9:51:0f:fe:80:54:
3b:ed:fb:14:0c:25:db:24:ca:a7:ee:42:b6:70:5d:12:7e:93:
70:b4:e1:f7:2e:95:e4:a9:44:2c:83:d8:fe:18:02:67:0f:2d:
ec:dc:82:aa:80:8b:6c:e9:fc:7d:a2:95:fc:a9:dc:bd:74:f9:
8a:39:79:73:da:47:a5:40:e0:37:c0:30:ba:e8:a6:2d:7a:64:
5c:f3:a1:08:80:80:11:09:23:f3:55:7c:5a:43:cd:71:fe:cb:
7f:20:15:93:5f:b7:15:1c:64:54:87:4f:c1:3a:c9:ce:4d:d2:
63:1f:9e:3f:57:4e:62:4f:30:72:56:48:c9:ea:bc:50:02:ec:
68:5e:37:59:3c:67:ce:47:79:f4:6d:1e:88:b3:09:4a:e4:c6:
b6:cb:a2:dc:7c:78:28:59:f2:f0:c0:60:fb:2f:de:f8:aa:4b:
6e:81:6a:43:81:81:31:cf:e9:fa:f1:7d:f7:e4:9f:7d:e5:d3:
a6:68:48:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:51:17 2025 by rpki-client