Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/uHhAHkl1TlCh8pefEijlQVr3hcs.cer
File: uHhAHkl1TlCh8pefEijlQVr3hcs.cer (raw, json)
Hash identifier: tTx1AOeJSIcffLTn0WWIFWpM3FjoOSFlu/kuV3rxS4U=
Subject key identifier: B8:78:40:1E:49:75:4E:50:A1:F2:97:9F:12:28:E5:41:5A:F7:85:CB
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 340D
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Sat 25 Jan 2025 14:52:49 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329390
IP: 102.210.24.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13325 (0x340d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 25 14:52:49 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36D06FDAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b5:46:b7:b8:97:e4:04:fb:f1:cc:85:cf:fd:
a3:4d:0d:67:06:76:04:9c:b6:b7:9d:6a:9d:ed:0e:
f2:e0:80:7a:99:f1:cc:85:a1:2c:68:b1:e9:61:cb:
28:52:07:38:1b:ef:79:7f:e0:44:86:ad:3a:77:86:
8d:2d:60:a7:9a:e0:b5:20:25:11:c9:11:22:89:a1:
31:1e:a2:79:3a:c1:9f:8f:f1:f8:c5:bc:08:8f:00:
8a:71:83:75:ec:a3:f9:5b:c1:45:91:a8:a6:9b:55:
a3:52:3c:04:73:b5:ad:4c:21:85:60:28:4c:ae:6a:
12:2a:f8:70:d6:66:f3:51:d3:cf:08:06:9c:43:b7:
9c:cb:bb:0e:e1:64:7c:04:8d:63:3f:4b:97:ad:5e:
3a:65:51:65:7a:d7:8f:21:cc:cd:da:53:5a:45:10:
42:78:77:4f:8f:55:76:7a:f2:53:6a:a8:82:50:7b:
40:78:66:7d:9c:59:4b:75:ec:11:3e:0f:ba:34:4d:
d9:f3:89:b1:b9:43:73:4a:fe:70:6f:db:06:42:85:
77:f0:dd:59:bb:a9:ae:6c:0d:c3:1b:d3:78:46:f3:
a4:d4:52:4f:2c:82:06:3c:c2:5d:c0:ef:f3:34:75:
85:c3:d0:4e:01:a1:cc:db:60:d5:7f:ee:58:ed:41:
a7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:78:40:1E:49:75:4E:50:A1:F2:97:9F:12:28:E5:41:5A:F7:85:CB
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329390
sbgp-ipAddrBlock: critical
IPv4:
102.210.24.0/22
Signature Algorithm: sha256WithRSAEncryption
02:7a:de:94:e8:cb:80:fa:50:3e:4c:b7:fe:f1:84:62:59:fc:
b6:22:ad:e4:71:7d:10:13:1f:7b:cd:8c:9f:be:56:3e:e7:10:
c6:0b:ac:a0:31:5f:69:d8:04:82:48:bf:62:73:9a:ab:77:60:
34:72:b3:f9:83:87:36:bc:f4:99:d9:64:4a:4f:5a:29:29:04:
5c:e4:96:45:56:3b:d2:f7:13:50:59:94:14:d9:a5:cb:d3:2f:
b5:c0:66:d3:98:ec:3b:da:b9:33:c6:9c:14:4a:83:75:91:45:
fc:61:fc:5a:5e:5b:a0:85:3c:ef:f5:ed:bb:f5:87:e1:34:3e:
22:cd:6c:64:3d:0a:cb:b5:07:b0:a8:bc:d1:e4:f6:63:9c:35:
0a:6c:98:53:3d:fa:2d:01:f2:db:1a:eb:7d:31:1a:32:29:13:
0b:f3:bc:0e:31:21:37:9a:e5:77:29:58:7f:3a:af:25:31:86:
23:17:c8:7d:82:24:72:94:77:97:55:9c:7e:f9:e5:33:00:77:
ef:70:b9:dc:ae:fe:ca:c4:33:e0:f2:21:ba:00:63:d5:3e:f8:
dd:ad:2b:c0:58:87:48:64:08:10:48:00:45:ff:48:00:ed:3f:
65:fe:82:a1:a6:68:8a:30:b3:df:f6:08:2c:9b:8e:77:fe:cd:
77:3f:0f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:52:18 2025 by rpki-client