Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
File: qUI_pMACbS5NqCEtEo2dJwfoHck.cer (raw, json)
Hash identifier: sVMwpYjXQ4JY+8k9cIUmI47Y5AXPGeP2UqJwbojSM9k=
Subject key identifier: A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 312D
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:59:24 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37219
IP: 41.76.168.0/21
IP: 2c0f:7200::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12589 (0x312d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 03:59:24 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36E70F4AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2b:4f:aa:12:3a:ba:b2:03:91:05:cb:99:3b:
92:7c:b0:b5:f8:16:74:49:0f:7f:a2:52:5e:cf:17:
6f:a9:00:1f:71:33:54:04:93:6b:b8:a7:4c:ec:18:
0b:53:67:bc:2c:4d:e5:15:f2:59:c6:0c:8a:0a:65:
25:58:16:16:71:cc:68:71:c8:c4:ad:75:ff:48:a0:
17:aa:f7:b0:38:89:08:22:8f:32:51:f0:7a:4e:cb:
8b:a1:ac:37:cd:5a:a1:0a:9a:38:5c:12:01:30:7f:
b2:a8:e9:0d:9e:6a:71:f3:0d:aa:35:6e:5c:61:08:
e1:b8:8a:67:be:40:79:61:c0:fe:0b:39:9b:01:68:
3b:30:cc:e4:04:2c:38:bb:78:4d:f3:d7:e0:7e:14:
ac:b2:8c:ff:ab:0a:7f:35:e5:3d:d4:b7:42:d5:f2:
cf:7f:3a:aa:1b:ca:8f:59:0e:e6:61:94:ce:48:6f:
2e:59:cc:f0:eb:50:95:b3:7a:a5:d0:86:e8:64:08:
d7:4c:7a:20:2c:fc:6f:b4:a8:03:27:53:e9:fd:73:
bd:58:14:fd:63:a1:cb:2f:1f:01:65:71:02:bc:41:
a6:77:ba:74:84:82:d8:2c:52:20:ac:c9:51:9d:50:
bd:0c:2f:dc:df:64:5c:9d:2d:1c:eb:60:86:cd:e0:
92:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37219
sbgp-ipAddrBlock: critical
IPv4:
41.76.168.0/21
IPv6:
2c0f:7200::/32
Signature Algorithm: sha256WithRSAEncryption
b9:01:90:93:36:8e:2d:8a:b6:f3:f0:72:77:6b:17:55:09:68:
4e:d9:ea:d5:24:9d:47:ee:39:a5:69:75:32:6b:db:0d:4a:04:
5b:5d:ac:bd:e5:81:1d:05:c2:16:5c:20:38:3f:34:15:14:ef:
4b:46:17:0d:98:3d:e9:14:59:a8:11:73:1c:30:34:32:3e:17:
55:8e:24:a2:51:75:dc:a9:d3:38:26:8b:d6:87:1b:a8:e1:cb:
92:d2:f3:ef:21:b6:76:13:d6:26:b7:31:86:c5:04:12:3b:1c:
fc:01:fa:13:72:b3:d4:d6:1a:d7:98:7f:a0:84:fc:6d:6f:80:
d0:a5:0c:f6:03:ed:5a:f4:8f:ac:4f:76:f3:e7:2c:2c:06:34:
dc:93:de:e4:3e:77:71:fc:53:f0:2d:4b:ec:69:2c:d2:82:c1:
08:85:39:85:a1:c1:c6:b5:de:56:46:22:99:b8:d4:d3:4d:bd:
60:55:f4:eb:70:b0:d4:de:76:da:05:95:4b:71:f4:4f:8e:f5:
26:9a:3c:62:bb:36:db:d9:2d:18:dd:16:04:2a:24:ce:cc:2f:
e3:e1:b8:6a:7d:b1:3a:84:4d:20:1b:17:1d:6c:14:5d:30:19:
58:f4:5c:8f:e2:c2:89:c0:84:dc:12:0b:18:57:33:1f:83:a8:
a6:5b:1f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:28:47 2025 by rpki-client