Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/v1plQpwwfXk7DXBa2V_P60lCIWo.cer
File: v1plQpwwfXk7DXBa2V_P60lCIWo.cer (raw, json)
Hash identifier: ARbaHMfG3FyzACvB5WOJePkZzpPrYbqEKQOB4YqIbCI=
Subject key identifier: BF:5A:65:42:9C:30:7D:79:3B:0D:70:5A:D9:5F:CF:EB:49:42:21:6A
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2D11
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:20:42 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329399
IP: 102.209.204.0/22
IP: 2c0f:6c40::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11537 (0x2d11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:20:42 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3619CE0AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:48:15:d9:23:9b:5e:c3:cc:fc:bc:8e:1a:24:
5f:cb:69:d9:aa:1f:49:9b:a4:61:3b:31:0b:1c:48:
2e:f8:d4:ff:6f:4f:18:c9:c4:2d:c2:e8:89:6e:72:
4e:c3:8d:d3:1d:50:51:4b:f9:7f:fb:b3:d4:2a:c6:
b8:c2:e9:63:87:32:b6:d0:48:32:08:db:ba:fd:30:
21:cd:49:55:f9:af:15:c3:44:63:82:bf:87:8c:58:
61:b6:85:42:66:b1:2d:f5:e0:15:83:2b:c2:70:00:
86:7c:fd:58:a9:20:d2:85:17:cd:95:b9:c1:1f:f5:
3e:d1:2e:57:e5:07:c2:6b:e6:df:2a:44:46:c9:08:
2d:1c:d6:96:fb:78:26:b0:68:fb:94:e5:dc:02:a3:
31:92:19:09:de:69:52:a9:cc:54:ce:38:e1:fb:e9:
99:1f:fa:66:b3:4a:7b:94:6e:47:5e:34:84:28:7f:
04:c1:d4:78:ef:e2:de:b9:6d:60:05:c4:5c:58:aa:
ac:e0:8e:fe:0b:a1:ee:a0:3b:7d:62:95:6f:8f:93:
11:bc:f4:13:59:60:e7:a8:d5:17:23:dd:01:25:08:
b5:7f:20:32:45:ec:12:00:ec:d6:71:f3:64:54:dc:
87:10:65:d1:e8:d5:48:d8:c1:4b:8b:1e:3d:7a:c0:
68:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5A:65:42:9C:30:7D:79:3B:0D:70:5A:D9:5F:CF:EB:49:42:21:6A
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329399
sbgp-ipAddrBlock: critical
IPv4:
102.209.204.0/22
IPv6:
2c0f:6c40::/32
Signature Algorithm: sha256WithRSAEncryption
5b:d2:0a:c4:d8:1f:ad:80:61:cf:cb:07:f8:8d:49:49:cb:c9:
75:15:94:1d:ad:91:9e:b4:24:ab:4a:38:5c:73:6f:61:e9:30:
8b:ec:4e:cd:23:41:00:86:21:3c:72:83:91:c6:1e:22:e7:b2:
42:6c:d5:55:c3:f3:27:6a:5e:ba:04:83:a5:87:95:42:b1:d6:
0a:6a:c3:be:88:46:9e:b3:c9:a5:1d:d2:bc:f5:71:76:58:c4:
89:aa:ed:8b:00:50:6d:29:f2:cf:b2:f2:48:68:6f:b4:92:cb:
a9:87:7f:3e:ea:b0:5d:bc:2b:3c:67:03:dd:96:46:b9:9f:1a:
db:a1:1e:af:b7:81:43:7f:6b:10:7e:40:b2:04:55:91:7e:cf:
9f:25:84:f2:ac:bf:77:23:9e:ac:d0:fe:a0:7a:cf:5d:e0:6d:
f0:3b:c1:6c:37:bd:9b:8d:e3:71:d3:df:7a:06:72:1b:1e:f2:
36:a9:9a:95:7d:23:15:d0:89:66:93:77:6f:0c:6e:ab:8f:63:
60:d8:f2:58:07:ba:63:99:dc:61:c1:26:af:fb:22:50:a6:3f:
7f:d1:f6:e0:b2:b5:be:50:eb:b4:d4:74:50:e8:1d:2d:6c:53:
e9:69:9e:a2:d2:90:b8:57:d4:a6:2f:e4:a4:65:f1:0a:c1:91:
85:d7:32:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:26 2025 by rpki-client