Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/wZn8M3XABV4cIAIEqXeWkq9n_bE.cer
File: wZn8M3XABV4cIAIEqXeWkq9n_bE.cer (raw, json)
Hash identifier: I922AY9mbtMtD2BBNdMdz6N+p9LzHXRBt5UOjGRHltg=
Subject key identifier: C1:99:FC:33:75:C0:05:5E:1C:20:02:04:A9:77:96:92:AF:67:FD:B1
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2F99
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3665E95/BB835CD0AD5E11EF9618654E762E951A/wZn8M3XABV4cIAIEqXeWkq9n_bE.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3665E95/BB835CD0AD5E11EF9618654E762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 02:36:46 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37723
IP: 102.22.104.0/22
IP: 2c0f:eb60::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12185 (0x2f99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 02:36:46 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3665E95AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:81:1d:d2:90:46:c4:ab:33:c9:76:ef:fd:15:
9f:90:e4:16:a3:dc:84:fe:13:5f:5e:2f:6e:85:69:
83:5a:48:9f:67:30:ff:63:20:df:f0:ff:be:03:c2:
cd:4a:25:8f:7f:44:fa:be:cd:f5:07:67:58:17:ff:
da:02:cc:7d:33:28:5c:e4:60:6c:45:a6:9a:52:c6:
fa:52:ea:6f:77:bc:0e:7c:b6:50:7c:46:9c:b4:77:
62:bd:dd:44:25:0d:6f:b3:0a:f5:17:f7:e2:62:22:
58:94:84:92:ee:24:ee:b0:d7:b8:b4:13:8d:f9:40:
d7:99:a3:f1:7e:03:f4:b6:8b:88:67:6f:00:4f:1b:
0d:b0:7c:d1:e2:a8:20:c6:5f:24:7c:11:8b:70:4b:
60:e4:91:a6:57:fb:2c:ff:5b:e2:14:95:7d:c2:33:
45:d0:08:93:4e:73:51:33:41:f9:bc:63:df:47:ef:
43:3f:b0:7e:7d:16:e8:50:30:a4:ad:bd:37:fa:1a:
ca:0f:e7:1b:80:4f:7c:7e:66:bc:9f:52:9b:6b:85:
90:4c:64:90:76:dc:36:17:c1:54:25:80:50:b4:98:
6f:52:65:5b:4f:c4:6d:f6:95:da:29:28:43:4e:e9:
ec:3d:59:f7:3b:da:dd:1d:b3:9f:d3:ba:20:93:33:
2e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:99:FC:33:75:C0:05:5E:1C:20:02:04:A9:77:96:92:AF:67:FD:B1
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3665E95/BB835CD0AD5E11EF9618654E762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3665E95/BB835CD0AD5E11EF9618654E762E951A/wZn8M3XABV4cIAIEqXeWkq9n_bE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37723
sbgp-ipAddrBlock: critical
IPv4:
102.22.104.0/22
IPv6:
2c0f:eb60::/32
Signature Algorithm: sha256WithRSAEncryption
75:d9:13:e9:54:47:d9:fd:d2:3d:7b:5d:d7:16:df:d5:4e:a5:
78:4f:d1:62:cc:c0:e9:ba:ca:1a:ef:ec:e9:44:79:a3:94:55:
fd:09:c7:52:2a:06:da:85:30:fb:a4:e2:a0:58:bb:e0:dd:7e:
e1:ed:79:df:f4:2e:ce:df:1e:2d:32:51:24:e4:cb:18:d3:97:
83:f2:eb:9e:c5:99:bb:5f:12:25:ae:1d:00:94:e3:d5:43:fd:
e2:48:11:20:ef:e6:4f:40:55:09:78:ad:4c:fe:9d:d9:ff:27:
19:85:c0:c1:b8:0d:a4:6a:6c:cf:fe:c4:8a:e6:d1:78:e6:03:
09:c5:8d:f5:ca:a5:79:81:b1:78:8e:93:ab:89:7a:9f:f1:64:
c2:1b:c7:33:3c:f6:54:61:3b:33:d4:82:df:97:ab:da:57:46:
24:8c:5b:1c:f6:08:dc:f9:61:bb:24:82:85:03:e2:0d:6f:a5:
e8:20:21:9a:65:c9:05:fb:6e:03:31:35:95:f5:7d:a5:60:ab:
36:a8:d4:e2:71:21:f0:24:fa:54:62:6d:ea:6e:35:15:4d:a5:
a0:3c:60:8d:13:b0:2a:dc:a0:4e:16:2c:07:d0:60:f5:fb:bd:
a3:dd:e1:5b:96:c2:bb:86:19:1f:ca:27:53:ad:b5:9b:6f:d1:
32:6f:f0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:37:19 2025 by rpki-client