Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/tjLcSuU6XipZtVv1qsfBSRDBTRY.cer
File: tjLcSuU6XipZtVv1qsfBSRDBTRY.cer (raw, json)
Hash identifier: +SxmvpscYWDEUU9ZcNhfy+eyJnaHNDEnYnIs3tiKzuk=
Subject key identifier: B6:32:DC:4A:E5:3A:5E:2A:59:B5:5B:F5:AA:C7:C1:49:10:C1:4D:16
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2CF3
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:13:35 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 32717
IP: 196.45.160.0/22
IP: 196.46.72.0/21
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11507 (0x2cf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:13:35 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3616D6FAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8c:5f:bc:6b:99:60:ba:77:62:8e:b6:48:6c:
f2:45:53:fd:3e:30:d4:06:5c:3d:1f:4b:62:37:5d:
95:56:01:e6:e2:ae:ae:47:c6:f7:23:8a:41:76:0a:
ff:42:e7:cc:b8:31:2e:66:e2:58:50:bb:6e:74:09:
da:96:80:22:67:96:b1:2a:41:9e:f5:c6:5e:cf:77:
c5:2b:81:61:fc:2e:cf:72:a9:f4:73:1a:e8:d6:ed:
77:13:58:74:d1:72:bc:ab:a5:03:2b:97:94:47:ba:
1c:6f:45:6c:f6:05:2a:e8:36:bb:f7:e5:3c:24:dd:
87:45:6a:05:a9:42:bb:f5:1e:d9:f5:9a:7b:b3:60:
a6:e4:22:78:35:71:26:2f:67:cd:52:37:3b:d9:99:
d7:be:8d:00:e0:12:f4:9f:f4:8f:15:0f:99:cc:25:
81:10:e6:bc:ce:e0:d6:f3:cd:53:76:c4:cf:73:37:
b8:91:b9:15:70:45:17:f7:d7:e5:db:09:5f:cb:37:
c3:4f:7b:aa:de:6d:42:2e:2d:3e:6c:89:17:1e:e2:
d3:05:8d:92:a4:75:c5:82:c7:4f:b9:f3:24:6a:f9:
31:83:b1:57:ca:52:3a:86:d3:e4:b8:82:38:d6:d4:
2c:66:3f:92:41:c6:f4:79:a9:d0:39:c5:79:9a:f5:
51:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:32:DC:4A:E5:3A:5E:2A:59:B5:5B:F5:AA:C7:C1:49:10:C1:4D:16
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
32717
sbgp-ipAddrBlock: critical
IPv4:
196.45.160.0/22
196.46.72.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:90:b8:e9:50:d1:8c:5c:88:e2:7c:8f:1d:32:bd:59:86:e3:
04:3c:bc:61:b3:16:86:50:83:ec:e7:63:41:8b:43:27:71:b3:
ce:8f:50:4f:19:07:d9:dd:97:f9:7b:96:a4:10:98:c5:12:9c:
f9:2d:b3:13:fa:6b:6a:fd:a6:39:42:1b:f0:7e:84:50:20:7f:
d3:79:29:13:f1:8d:d2:46:c3:50:da:65:f4:11:fb:bb:90:07:
d5:29:78:94:46:72:5a:19:94:43:47:6e:73:b8:ee:d3:b6:fc:
3a:24:62:8e:9c:dd:51:05:cd:3b:a3:56:6f:c3:5f:23:5a:fd:
4b:d3:5e:e5:6a:c8:c6:25:fb:48:4e:f6:44:03:77:88:62:c0:
93:c4:1b:ad:b1:e3:93:6e:b2:de:0b:c8:8f:ef:10:1b:6a:e9:
51:4d:b9:03:4e:c7:ac:c4:d7:c0:4f:d6:7a:d4:48:06:dd:b4:
8e:63:e6:3e:6e:30:49:e6:39:ad:d7:ba:f0:fb:38:c2:00:76:
49:ef:02:21:a4:33:3d:c8:32:4f:33:52:84:39:c9:62:19:78:
0b:a1:51:08:9d:64:85:51:ed:94:73:b2:5a:2b:3e:4a:cc:93:
fe:b6:52:dd:15:e5:87:ad:f9:37:ad:44:8e:aa:3c:16:0c:05:
c0:62:66:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:42:55 2025 by rpki-client