Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/xA-V6X2DLw9XbRPuNa6z11pdMNQ.cer
File: xA-V6X2DLw9XbRPuNa6z11pdMNQ.cer (raw, json)
Hash identifier: s6ZTTCN9VcfM0Goq4lQiQUdogcTFMUddu6nGHYSus/w=
Subject key identifier: C4:0F:95:E9:7D:83:2F:0F:57:6D:13:EE:35:AE:B3:D7:5A:5D:30:D4
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2E04
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/xA-V6X2DLw9XbRPuNa6z11pdMNQ.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:14:18 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 327892
IP: 102.22.32.0/19
IP: 2c0f:f478::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11780 (0x2e04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 01:14:18 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F363C3E1AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0d:cb:96:24:1f:4d:2d:ea:f2:b9:53:d6:8e:
48:69:39:d4:ee:55:4d:5f:2b:81:50:d0:37:79:a1:
da:28:93:e7:6a:ec:34:ba:a6:b5:9e:4f:c5:e8:a3:
7e:96:e0:37:65:9c:08:1e:da:99:d6:75:85:05:56:
c2:53:04:d4:a1:f8:a4:f5:fd:8a:ef:f0:0b:2f:a7:
3d:ee:2e:9a:c3:81:c1:ba:70:31:c9:75:ea:10:a4:
c7:4e:76:9b:c9:fc:ff:74:77:8d:c6:71:7e:db:8d:
10:1b:a0:a1:d8:64:ef:41:a2:c4:01:d3:57:2c:f6:
2a:bf:6c:69:8b:b7:2d:bf:95:6c:2f:fc:61:ab:fe:
3f:d5:66:89:30:83:17:b0:67:49:99:64:00:6c:f0:
0b:1c:5a:e2:02:f8:20:18:21:d6:e3:fa:9c:86:09:
5f:c6:f8:eb:b4:3a:00:fa:39:e2:56:21:a6:20:63:
bd:cf:cd:a3:12:90:36:96:0a:a2:db:a5:ef:a0:e2:
8f:2f:72:cd:8e:c1:9f:8a:fd:3d:2c:fc:fd:26:c7:
05:ef:37:7d:70:35:f7:85:e5:45:c4:8c:57:ee:d5:
d2:7b:68:7f:ec:67:2c:ad:4e:b1:30:6f:36:70:0c:
b2:5f:8e:3e:88:b1:f1:94:5f:49:e9:b2:2d:69:1e:
b3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0F:95:E9:7D:83:2F:0F:57:6D:13:EE:35:AE:B3:D7:5A:5D:30:D4
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/xA-V6X2DLw9XbRPuNa6z11pdMNQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
327892
sbgp-ipAddrBlock: critical
IPv4:
102.22.32.0/19
IPv6:
2c0f:f478::/32
Signature Algorithm: sha256WithRSAEncryption
6f:a3:c1:c3:9c:91:86:01:e8:97:20:24:81:36:a8:a5:44:09:
2e:89:bb:74:d7:0c:32:be:9e:98:19:de:50:50:c2:e7:a5:0a:
77:65:33:64:69:5d:82:db:cf:4f:4c:73:26:a8:62:94:0d:e9:
cf:bd:99:89:77:c0:d8:ae:47:e0:c7:78:ed:09:66:d4:7d:dc:
e7:6c:bc:fb:f1:5b:00:be:b5:ee:08:b1:ad:3f:bd:c0:0b:b8:
18:23:e9:e0:0f:fe:f7:76:83:62:fe:21:c6:41:52:43:fd:c4:
88:41:92:bc:3c:38:3e:9d:d3:eb:61:24:d8:87:46:13:76:1e:
e9:af:ca:41:8b:71:c9:98:af:8d:e4:3d:86:4c:99:a0:7e:15:
3f:ca:55:4b:75:4f:54:8c:1b:5c:75:c6:33:c6:e4:01:87:a5:
db:5c:30:7c:aa:02:73:6a:7e:b5:b2:73:1c:09:58:9f:60:70:
e8:a7:bd:1c:1b:c5:2a:51:53:8a:29:0a:33:af:c9:8a:f8:8d:
71:17:a5:4e:55:92:38:da:84:6e:be:b1:cd:85:e0:68:6e:33:
92:89:5d:a7:d1:fb:03:00:70:f9:08:6d:ff:c0:46:3b:03:79:
50:65:7a:c8:1d:56:57:2f:ec:35:c4:4c:be:a9:d0:34:35:90:
46:9f:71:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:47:00 2025 by rpki-client