
Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/vuhQJeKvFdQRCrom9RsNdAV9rss.cer
File: vuhQJeKvFdQRCrom9RsNdAV9rss.cer (raw, json)
Hash identifier: vEr4tbO3BE2qXGgwujpgV6YSbZz8qvHRNS97c0wAPR4=
Subject key identifier: BE:E8:50:25:E2:AF:15:D4:11:0A:BA:26:F5:1B:0D:74:05:7D:AE:CB
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2CFB
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3617D8E/C5385F48DF5E11EDA77B9BAA2F6D8C1D/vuhQJeKvFdQRCrom9RsNdAV9rss.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3617D8E/C5385F48DF5E11EDA77B9BAA2F6D8C1D/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:15:28 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329223
IP: 102.212.228.0/24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11515 (0x2cfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:15:28 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3617D8EAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:05:c6:25:92:ba:14:80:c4:9e:4f:41:89:18:
34:cc:e6:c1:95:92:0b:80:b7:ba:12:f0:4d:7e:eb:
9d:48:b5:8a:44:7c:83:15:bd:ae:27:0a:11:ad:bc:
c4:61:ff:cc:01:90:9e:0d:34:6c:16:bd:7a:cb:88:
42:f1:7a:71:9d:42:45:4c:ce:e7:15:cd:fb:b3:71:
db:c3:14:bb:78:a1:8b:22:f4:eb:9e:78:ca:18:0a:
28:ca:89:21:c1:4b:9a:d0:07:03:87:1c:1d:59:9e:
16:c4:87:2b:cb:f8:a5:aa:f3:d4:f5:fa:3e:29:66:
64:45:b0:01:16:d7:1f:1e:24:3c:f9:31:8d:61:92:
39:f0:96:6a:d6:b1:35:21:8c:0e:df:35:98:a1:93:
25:be:0e:48:b8:76:4b:32:2d:22:8f:27:30:71:69:
1a:a9:8e:74:11:01:1b:1e:12:98:e9:98:4f:32:d1:
3c:33:df:88:e7:94:9b:50:b6:06:d2:6e:fd:ee:3f:
97:b7:32:3d:6e:28:10:f8:c5:78:46:ff:65:07:cf:
cf:04:b2:ce:2a:8d:5e:cd:9f:2b:35:cc:5b:f3:16:
57:7b:14:75:2c:ab:b8:5f:fc:d4:13:75:b0:cc:1a:
a7:23:ae:5e:6f:33:6c:27:c9:3f:0c:5b:0a:ca:89:
0b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E8:50:25:E2:AF:15:D4:11:0A:BA:26:F5:1B:0D:74:05:7D:AE:CB
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617D8E/C5385F48DF5E11EDA77B9BAA2F6D8C1D/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617D8E/C5385F48DF5E11EDA77B9BAA2F6D8C1D/vuhQJeKvFdQRCrom9RsNdAV9rss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329223
sbgp-ipAddrBlock: critical
IPv4:
102.212.228.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:60:44:1b:4c:ff:25:84:a4:68:40:23:b9:2e:37:7f:f4:9d:
9c:1b:2e:b6:03:a3:69:6f:24:af:b5:95:a6:b4:0a:a3:61:19:
bf:6d:8c:10:7f:36:da:1e:fb:11:bc:2d:c1:84:5c:33:b2:19:
9c:ce:1d:ce:02:16:53:2a:7f:42:4a:e8:45:6b:05:7d:58:f2:
ca:40:33:3e:85:59:68:3b:d8:6e:ba:ec:5f:cd:e3:02:a2:54:
e9:8b:2b:ae:f2:91:f6:ce:55:f3:18:d1:40:1a:f5:c6:1f:47:
fc:5d:b6:b6:27:b4:ae:87:bb:2e:ce:34:3e:a8:e6:56:58:29:
eb:08:a9:95:98:83:87:c9:2c:9a:75:69:4e:4a:cd:de:57:c4:
5b:fb:9c:92:0c:c0:50:2f:66:b6:d6:61:c8:65:db:12:34:91:
a5:e3:55:17:fd:b2:41:06:d7:f8:35:e4:13:75:54:eb:5a:68:
e8:31:26:ad:e7:d5:b1:66:a8:b3:8a:1a:4a:b0:18:58:44:80:
3a:53:22:c8:c8:c0:07:da:b7:8e:98:d4:68:c8:f4:6f:ae:e2:
28:de:9d:3b:38:80:59:b5:1e:91:b2:87:97:4b:01:3d:3e:7e:
a5:4a:8f:ba:b4:63:c0:93:86:0b:99:fe:0a:ea:dd:66:62:37:
20:3d:ed:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:36:31 2025 by rpki-client