Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/t96wG6y7S1p-nHgv_5n9jl3AbLI.cer
File: t96wG6y7S1p-nHgv_5n9jl3AbLI.cer (raw, json)
Hash identifier: 2yQffssnuxzvME7CnWNe0lGc7NDXOGAfyHOblf57vtg=
Subject key identifier: B7:DE:B0:1B:AC:BB:4B:5A:7E:9C:78:2F:FF:99:FD:8E:5D:C0:6C:B2
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2D2F
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/t96wG6y7S1p-nHgv_5n9jl3AbLI.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:27:48 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328475
IP: 102.69.224.0/21
IP: 102.207.68.0/22
IP: 102.211.136.0/22
IP: 102.215.4.0/22
IP: 102.217.128.0/22
IP: 102.218.232.0/22
IP: 102.220.36.0/22
IP: 2c0f:e818::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11567 (0x2d2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:27:48 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F361F5C9AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:32:30:04:c0:f5:c1:e5:1f:58:8c:75:c6:6e:
27:ec:c5:54:f5:4f:d9:83:54:79:3b:a5:8b:62:98:
5a:24:7b:10:0a:7b:35:80:97:ca:ab:07:8f:31:c3:
f9:42:a8:95:44:0a:f2:41:c1:fb:81:10:fa:b1:a9:
0c:f8:ea:3e:79:fb:eb:a1:be:15:c0:9d:70:b6:df:
d2:7d:d8:68:9b:9e:f9:5a:c6:e0:10:d6:c7:35:de:
da:96:db:c3:be:76:40:4c:fd:8a:cd:2e:6e:b0:a4:
63:03:55:f2:30:71:ed:ef:27:8e:bb:33:b6:73:4f:
e2:1b:1a:e0:74:f6:84:9b:f9:81:14:20:30:e3:aa:
06:f9:46:e6:35:09:74:34:18:0c:66:2d:9f:da:90:
96:d0:95:af:ed:60:ac:e5:a6:ce:14:c0:c3:2a:f1:
3b:0e:cf:3d:69:e6:49:c6:25:a6:80:ae:d7:ac:08:
28:03:fe:04:55:b5:4c:f7:90:86:e0:83:25:69:97:
38:53:9d:1a:46:0e:0c:5f:71:d0:bc:2d:37:2d:74:
8c:9f:bd:00:90:d5:e7:38:82:60:0c:49:31:d3:6e:
df:7e:8f:22:8b:b3:81:3c:4b:79:75:5c:01:9c:76:
3d:5a:e4:62:c4:b5:ec:df:17:b0:b0:ca:e8:64:9a:
3d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DE:B0:1B:AC:BB:4B:5A:7E:9C:78:2F:FF:99:FD:8E:5D:C0:6C:B2
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/t96wG6y7S1p-nHgv_5n9jl3AbLI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328475
sbgp-ipAddrBlock: critical
IPv4:
102.69.224.0/21
102.207.68.0/22
102.211.136.0/22
102.215.4.0/22
102.217.128.0/22
102.218.232.0/22
102.220.36.0/22
IPv6:
2c0f:e818::/32
Signature Algorithm: sha256WithRSAEncryption
34:ba:e8:fd:71:a9:23:e0:7f:2f:ed:b6:34:f0:6b:61:2a:ba:
31:6b:3c:15:2a:3c:db:2d:2e:32:1a:55:46:eb:f8:cd:b9:4f:
e0:ab:05:b0:61:22:b2:81:53:c4:a9:3b:3d:a1:fc:b0:a5:0a:
e0:46:3e:fd:bb:1c:65:b4:c3:61:47:d7:95:06:5a:84:e9:c3:
bb:44:6a:b6:4d:28:47:8b:f6:ab:ff:c4:92:9e:1a:de:c2:d2:
df:2e:13:60:59:ea:4d:29:b1:13:c0:4f:91:bc:1f:9a:68:d9:
80:0f:89:a7:88:4a:b2:c6:ff:d7:03:5c:5d:03:02:17:21:10:
22:d5:0a:cb:06:fa:f3:5f:16:78:fa:6b:24:04:35:88:d1:2f:
1a:bc:e5:11:29:a0:33:a9:12:0d:99:28:29:35:d8:8b:f2:45:
bb:c8:d9:3f:4e:f2:51:9f:9e:64:50:61:f6:f4:0d:f0:5d:80:
a1:55:f0:04:13:5f:d0:6d:1f:3a:f0:d1:eb:0b:b0:fb:82:8d:
2d:9a:62:54:b7:7e:c9:cc:90:fa:42:04:c0:f5:4b:da:b3:a4:
0f:3b:c3:cb:73:21:28:90:e9:dd:01:13:b5:23:34:fd:52:46:
a7:54:06:c5:e0:af:86:06:f2:58:79:13:a1:d0:c6:ed:c1:a4:
61:43:b3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:45:49 2025 by rpki-client