Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/saGqcslle0DmFrw3PhPPk7Ip6z8.cer
File: saGqcslle0DmFrw3PhPPk7Ip6z8.cer (raw, json)
Hash identifier: fExajr/QKzOlmuBCOkljoPW28WIv9KX/dvI2oHFgggs=
Subject key identifier: B1:A1:AA:72:C9:65:7B:40:E6:16:BC:37:3E:13:CF:93:B2:29:EB:3F
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2F7F
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/saGqcslle0DmFrw3PhPPk7Ip6z8.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 02:31:39 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328676
IP: 102.214.44.0/23
IP: 102.223.7.0/24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12159 (0x2f7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 02:31:39 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F366372CAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7f:56:d6:62:7c:0d:8c:71:c4:4b:2d:af:5e:
9b:7b:a3:ad:c3:a5:f1:1e:9a:ab:67:9d:5e:6e:2f:
e4:4e:0f:01:ab:34:fb:4a:e0:f9:04:2f:70:fc:eb:
36:55:f9:bb:af:25:7e:4f:4e:02:da:47:87:9b:c4:
a9:23:a7:69:9a:d9:d8:80:d4:44:12:ca:f2:31:9c:
46:46:f0:ec:a3:36:4e:49:54:5b:65:83:84:69:c7:
cb:f1:1c:1f:77:31:40:28:6a:8c:cf:b6:70:19:88:
d7:11:5e:0b:9d:f0:17:09:6a:30:f6:f8:b9:b6:f3:
cc:de:29:f7:43:5f:e1:5e:34:85:12:5e:d0:e6:62:
5d:cc:86:59:0f:81:7c:e4:ac:04:40:e6:c2:6a:15:
a6:ab:a5:bf:bc:21:c7:0a:f0:d7:02:1a:94:88:5b:
43:5d:37:cb:fb:a7:c6:ec:00:e5:64:27:67:fa:c7:
ab:32:f4:11:c5:85:98:b8:72:6e:f5:0d:7c:95:8c:
36:69:48:f5:b7:16:95:42:50:06:5c:4d:6c:e9:d6:
e7:aa:68:fc:f8:ee:ec:d1:74:ce:03:bf:14:ae:6f:
cc:19:26:17:80:46:e9:07:b2:ed:8f:37:0f:e0:22:
3c:27:ba:c0:b4:7c:c0:fe:0b:05:e8:50:f7:33:65:
87:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A1:AA:72:C9:65:7B:40:E6:16:BC:37:3E:13:CF:93:B2:29:EB:3F
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/saGqcslle0DmFrw3PhPPk7Ip6z8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328676
sbgp-ipAddrBlock: critical
IPv4:
102.214.44.0/23
102.223.7.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:59:2f:3c:12:c1:9b:88:36:f8:5a:76:4a:5c:ec:b7:01:bf:
cd:19:57:a9:b5:c3:01:f9:d5:0f:d1:26:51:c0:94:13:4e:df:
53:93:96:29:a6:c7:d7:97:36:e8:b8:e6:e1:e3:cc:f9:bb:26:
27:ea:33:9c:64:cf:4b:56:4b:e9:39:87:3f:5c:72:78:ea:4e:
0d:eb:a0:6b:ce:7a:7e:84:b7:1b:18:c9:57:71:57:97:98:24:
37:a8:8c:63:35:e3:a4:62:43:85:d5:a3:66:e6:22:63:49:fe:
f3:93:4c:35:1a:80:cf:f5:e3:1b:1a:bb:6c:12:6e:ca:ed:62:
57:57:05:8b:75:90:e7:f5:81:63:86:57:2d:12:65:86:12:d8:
32:aa:cb:2a:02:c9:36:c7:95:35:0b:6d:c4:1f:16:4c:db:f8:
bb:03:8e:8d:aa:50:22:19:a7:b8:23:90:7b:e5:b0:50:36:f3:
d2:b0:2e:30:d8:83:2f:ac:6d:6b:0a:8a:64:1c:16:37:01:4b:
b8:fa:c3:81:e6:22:5a:76:37:45:ab:64:07:b8:c9:f9:7b:77:
de:3c:32:a1:ef:5d:17:4f:74:fb:4e:a7:10:e3:f7:09:57:e3:
7f:8d:b9:fb:c0:37:88:d0:7c:4d:62:68:73:00:08:e9:92:26:
bf:fe:5f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:57:26 2025 by rpki-client