Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
File: qO-WBRTjNkRNPN43sktm3DnUPRs.cer (raw, json)
Hash identifier: 3a0Z9mKkVDMz34RNFzx+NXRZzXMew3x26N2E3b+uB6E=
Subject key identifier: A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2FB3
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 02:41:55 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 327889
AS: 328962
IP: 2c0f:eb00::/28
IP: 2c0f:f4b8::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12211 (0x2fb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 02:41:55 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3668CFEAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:29:41:fc:e7:cc:91:f9:34:93:48:17:bc:11:
47:4a:cf:fc:0c:3e:10:05:3c:da:be:0f:19:2f:a2:
6f:93:7b:79:2c:f6:4c:41:a4:92:0b:e6:3f:56:d3:
45:c2:9c:3c:c3:fe:f4:fd:a4:43:60:88:fd:ed:34:
1c:39:54:9f:ce:11:6f:71:46:f3:0b:0f:51:fa:f2:
95:5a:f6:78:a9:4c:6f:73:72:2e:9a:98:d8:91:a5:
a0:b4:79:0d:93:71:b5:99:13:52:6a:fc:a4:bf:6d:
c9:75:09:85:ac:99:34:c1:a4:85:57:89:cc:65:98:
14:16:cd:bb:60:8e:20:37:55:8e:fd:5e:80:e7:91:
0d:22:9c:42:bc:8a:04:fc:56:a3:3a:c1:a9:04:b1:
93:10:e8:35:f6:ed:d8:da:6f:e4:77:6a:bb:9c:d8:
64:bd:db:a3:a8:12:ee:4e:31:ba:94:fa:d4:c9:4b:
70:7f:07:25:1d:63:1a:ab:ed:c5:42:6b:22:b4:0d:
c0:8d:1a:19:f3:ca:b5:0d:83:53:64:2f:d7:53:af:
d6:e8:33:d2:f5:ff:a2:1f:7e:4a:cc:09:48:56:82:
32:11:05:9c:15:93:a1:50:8b:6b:64:4e:a4:a7:94:
44:c2:32:c9:e6:41:0a:27:2a:ca:0f:74:53:72:7c:
64:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
327889
328962
sbgp-ipAddrBlock: critical
IPv6:
2c0f:eb00::/28
2c0f:f4b8::/32
Signature Algorithm: sha256WithRSAEncryption
62:f0:0e:4a:23:51:d0:f9:03:2a:9d:35:6b:61:a1:0f:3b:85:
ee:52:b7:79:0e:6f:1e:86:b7:32:8f:ee:dd:25:9d:42:1f:4f:
0d:8f:f9:95:c0:2b:c8:b7:c5:b7:2c:a3:92:76:d7:93:84:7e:
74:68:da:39:5a:e6:ac:fc:ba:6a:e1:58:eb:76:78:93:a5:12:
13:0e:b8:5b:14:56:47:96:22:fd:5c:99:49:d6:c4:b1:42:33:
92:62:78:50:52:8d:71:39:a2:39:e1:ca:de:30:a6:1c:a1:cc:
af:86:e4:de:87:15:fb:f8:f8:90:8d:e8:7b:c0:2b:63:67:43:
25:c8:fa:4f:1e:73:8c:74:b3:ae:53:63:8d:ca:68:aa:33:4c:
3a:20:74:39:39:7a:40:94:48:df:33:7f:b6:08:b7:09:af:90:
b7:06:56:6f:95:d0:96:35:41:08:94:82:31:85:51:1d:b3:a2:
e9:f7:4f:9f:30:3e:91:e8:8b:9d:3d:93:b0:a2:05:60:41:91:
0d:1f:7d:3b:a8:cd:7c:0e:c3:a5:2f:e1:9b:74:a8:0e:e0:f0:
3e:83:de:4e:d4:70:31:f4:42:ab:73:0a:9b:d8:16:f5:1d:2e:
6f:6f:7a:e8:03:9d:ea:e7:14:3d:d7:e8:83:2b:c7:90:1a:08:
b6:c6:ef:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:48:05 2025 by rpki-client