Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
File: xaUP22PDxb0fR0h14JTxitF-H5Y.cer (raw, json)
Hash identifier: Hhr7WE1LV4mnvNUkqGC9XBrwEeTYXHSMS4uETpWC8eA=
Subject key identifier: C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2F5F
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 02:25:06 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328176
IP: 102.128.172.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12127 (0x2f5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 02:25:06 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F365F7E8AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:11:b0:20:8e:02:ae:ea:25:56:76:b6:4d:91:
5d:d2:8e:15:28:0e:55:1b:43:42:81:e4:80:31:31:
61:38:0e:d3:6e:f7:7c:56:c0:cd:55:12:92:a1:45:
f2:eb:7e:36:11:d5:61:6f:7e:45:4b:6a:5d:18:b6:
c0:f6:cf:68:0b:05:b2:41:3d:79:35:06:09:45:93:
d0:98:22:a4:f8:8a:d6:b8:3f:72:90:50:6a:7e:cf:
3e:d0:3a:45:f4:5f:61:2a:36:75:30:30:cb:02:48:
f6:36:dc:b6:0f:4b:04:8e:3e:04:b6:07:dd:eb:b1:
7e:fa:eb:38:07:eb:26:e0:67:8f:dd:e7:08:d9:3c:
9d:95:79:f3:ae:b7:f0:b1:47:1d:2d:3c:d8:1a:71:
79:44:20:e9:b4:53:ca:59:77:e9:a2:c5:f3:de:92:
a9:56:2a:cb:c7:5d:56:59:a6:f0:d5:2f:45:4c:1d:
d1:81:f3:68:6a:0f:10:80:b0:e4:87:64:a1:e2:1c:
0c:bd:3e:7e:f1:86:20:8d:ac:54:8b:b4:3e:b4:eb:
70:31:b4:52:24:d5:75:df:c4:19:3c:d7:08:ae:03:
dc:d5:de:2c:63:73:2e:13:72:22:6c:09:5c:4a:d8:
45:8a:b8:89:57:cf:de:fe:98:aa:25:20:88:47:69:
14:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328176
sbgp-ipAddrBlock: critical
IPv4:
102.128.172.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:47:00:61:1d:92:d9:b3:45:3d:0c:a6:7a:9e:02:d0:27:1f:
0b:f1:fe:b7:f0:28:fa:7c:55:3f:9e:b5:3a:f2:95:08:cb:f1:
c4:19:bc:c7:12:d3:16:08:a9:3b:d8:b0:2c:3a:52:b2:aa:17:
0e:36:5d:6d:b8:f4:95:a5:1e:b4:c9:14:e5:a4:92:bd:8f:dd:
f2:b5:1e:ef:89:d0:17:7e:fb:27:71:ef:b3:2d:5b:f9:6d:d4:
55:f4:34:d6:d8:56:73:6d:32:67:e1:b9:30:6e:e9:6c:55:c5:
e9:20:5c:3a:90:27:45:c0:75:76:a4:f1:ba:d4:04:07:40:0f:
a0:08:d7:f4:ff:1f:75:01:09:70:95:e3:ae:37:6d:9c:37:7a:
79:79:78:fc:e6:fb:9c:ce:ef:d7:6d:98:8b:aa:12:3d:41:1b:
69:9f:b6:ff:8c:7b:d9:04:a8:27:cd:ad:f3:83:c3:c6:2d:26:
ff:01:9b:a5:06:7a:e8:a1:9c:66:35:21:52:d9:c2:94:fb:b6:
83:10:83:88:e3:f4:41:b6:ea:3b:16:7a:31:46:a0:53:ea:ba:
e0:36:a8:87:14:c8:e5:a0:66:f0:ca:c9:b3:3d:c9:1e:99:6f:
59:16:9a:1a:28:b5:a6:aa:99:a3:3d:5c:5a:66:97:9d:85:70:
64:0c:3b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:52:18 2025 by rpki-client