Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/vbGvH4tOtvOkI3D5HnHFMsf0YAU.cer
File: vbGvH4tOtvOkI3D5HnHFMsf0YAU.cer (raw, json)
Hash identifier: NmgKX4rfiO/023/MCbVuzn6BhP2uJWaDQ90/m9RdaBY=
Subject key identifier: BD:B1:AF:1F:8B:4E:B6:F3:A4:23:70:F9:1E:71:C5:32:C7:F4:60:05
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3375
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 06:07:08 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329248
IP: 102.212.32.0/22
IP: 2c0f:440::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13173 (0x3375)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 06:07:08 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36F1295AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:30:a6:97:29:2e:1f:34:58:70:4d:ea:5a:77:
d3:c8:69:04:58:e8:b4:15:b4:52:9e:0a:22:d9:1b:
48:a0:3f:dd:65:b3:2c:2a:f6:21:24:cf:65:8a:f5:
32:d6:4a:ef:5c:6b:a2:18:e9:8c:12:58:e1:71:8a:
b1:ce:33:cb:8d:d2:73:49:14:9f:57:6e:5e:2f:eb:
80:df:25:82:7a:56:2d:a8:94:32:fb:d2:85:3c:56:
24:70:b8:06:93:fa:fd:38:75:ee:86:f5:af:9e:38:
0a:d9:f7:3c:25:c5:2c:c6:fc:75:08:8b:01:07:2b:
c8:3b:1b:57:b5:54:2a:0e:12:91:e0:7c:9f:88:88:
c2:eb:72:42:0c:c9:da:31:08:e5:78:2f:c4:53:73:
39:81:1d:1c:da:c5:74:7c:22:2d:57:c9:1f:e9:23:
fd:be:15:ad:4f:50:a0:6a:e6:c9:c7:e3:14:38:a7:
b8:99:3f:c2:7b:34:b4:35:83:b5:bc:f3:f9:e7:d7:
45:9a:9d:33:d8:2c:df:09:4c:4f:6a:3a:e5:fb:ec:
12:d2:c7:4f:f7:c7:e4:a5:4b:bd:ae:2f:b2:cf:51:
68:a9:b9:e3:e6:a2:3a:eb:7d:c6:7d:64:39:7e:36:
40:6c:1f:0f:38:21:22:6d:66:1a:f0:96:1c:2c:8b:
49:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B1:AF:1F:8B:4E:B6:F3:A4:23:70:F9:1E:71:C5:32:C7:F4:60:05
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329248
sbgp-ipAddrBlock: critical
IPv4:
102.212.32.0/22
IPv6:
2c0f:440::/32
Signature Algorithm: sha256WithRSAEncryption
68:df:f0:68:81:eb:57:c4:10:94:8c:ed:8f:b8:f0:3c:97:be:
89:18:9a:43:96:c9:96:d6:22:28:ee:0f:c6:11:eb:b4:a9:0e:
b4:96:9b:14:72:2b:b3:70:66:d6:33:0d:ca:83:a6:1b:13:ec:
12:82:88:1e:ea:21:33:d0:ac:6e:90:d5:cb:b1:3c:a3:43:3a:
e4:c4:e0:c7:6f:37:4d:95:f7:c6:9e:ce:d4:14:84:63:2c:5a:
7b:bd:b1:cd:4a:9c:1a:4c:91:91:84:29:31:5d:5e:49:da:27:
69:d1:4d:aa:91:d5:0f:b5:bd:84:a2:dd:aa:92:76:08:36:97:
c0:79:57:af:b1:95:fc:6a:6a:8d:16:c9:a4:87:5f:31:36:a3:
c6:c7:38:37:41:36:cd:1f:86:34:bf:80:01:4b:c0:41:83:5d:
cf:4d:8f:c8:c2:89:b3:c9:7a:59:8a:86:e7:90:73:a1:cc:4b:
33:4b:d1:ce:0b:a5:c3:a4:9a:49:72:74:84:05:98:32:69:06:
a4:10:a9:6f:e8:ff:48:bd:ef:d8:a3:56:f3:27:32:ff:fa:c5:
bf:08:8d:3a:73:52:40:93:1e:38:44:ac:66:a1:59:1c:a8:37:
63:3d:dc:ae:ec:dc:69:50:1a:ff:69:50:53:7f:a6:dc:28:a5:
78:f8:f3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:40:33 2025 by rpki-client