Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
File: ycEp-8PIJzpGKVWpUo4KrC8umCw.cer (raw, json)
Hash identifier: y8J0rnoiJe2ZZ7fykJvHJXaqY44SVNRI/UqNYTpY/tI=
Subject key identifier: C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2DC3
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:00:51 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329403
IP: 102.209.180.0/22
IP: 2c0f:2e40::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11715 (0x2dc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 01:00:51 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36337E5AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:54:3e:2e:e9:02:91:97:83:e6:a4:eb:8a:ad:
39:2c:7f:d1:86:b2:29:33:62:6b:11:dd:09:5a:fd:
95:2c:6f:09:f7:a9:55:e5:27:a8:f1:f8:90:8e:7c:
aa:bb:87:6e:7c:a6:69:21:0b:75:b3:1c:b1:90:85:
62:2a:81:34:5b:e3:e4:6f:a0:2f:87:b6:9a:5a:90:
04:0b:81:8e:54:e8:d2:01:89:ea:3d:c2:da:55:ed:
cc:a6:e0:4d:7f:cc:76:f4:c1:29:92:0a:23:9a:76:
fa:9d:e2:c5:82:e7:3c:25:c4:f2:6c:22:fb:48:59:
d9:b8:cb:2b:27:ab:91:bc:67:ea:9e:06:4a:93:86:
3d:cc:cc:85:03:45:16:61:e7:a3:a1:e0:16:58:34:
2a:d5:b8:fa:98:b7:07:da:24:50:3c:e0:de:4e:c6:
a6:87:fa:71:2f:d4:3e:8f:e4:4b:3c:f6:48:14:87:
26:0c:57:33:8f:36:46:6d:27:50:2e:37:fd:19:1c:
98:bf:32:fb:51:ea:89:30:6a:79:90:66:c1:2f:4b:
53:fc:e1:2d:b7:3e:19:15:21:88:40:06:34:02:48:
47:f2:84:a3:18:ec:d0:c4:dc:de:b5:32:02:14:25:
c9:b8:86:a9:01:a5:a2:72:67:fe:14:ae:e7:44:9c:
68:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329403
sbgp-ipAddrBlock: critical
IPv4:
102.209.180.0/22
IPv6:
2c0f:2e40::/32
Signature Algorithm: sha256WithRSAEncryption
14:5a:ab:00:0e:a0:52:c2:ee:09:a8:89:53:03:c6:6f:f0:ef:
95:bc:a8:c5:6c:8d:4e:7d:ba:23:ff:9a:44:3b:b1:9b:9f:7b:
24:d0:7e:76:67:a1:17:59:9b:82:06:74:70:52:55:e8:c3:76:
df:b1:de:50:cc:a3:a6:57:20:bb:b8:8a:21:90:28:21:b3:4c:
25:03:4d:c3:99:3a:3d:e7:f0:d8:ad:30:77:b7:78:1c:6f:8a:
d3:74:d8:cc:07:50:44:24:15:97:a0:f3:9f:93:3c:df:36:05:
a3:e7:63:13:2c:4c:57:eb:0d:77:af:d6:46:32:1e:0c:bd:c4:
c0:58:bd:78:d3:9b:1e:53:cd:7d:24:5d:f0:4f:5e:a2:fd:1e:
c6:10:e4:85:51:4e:a5:84:d7:95:f8:3b:dc:16:e6:e4:d0:aa:
2c:f5:b6:27:b8:62:36:45:4a:8e:d5:15:7e:c8:d4:20:73:98:
68:ed:78:49:a2:96:7d:43:5a:ee:ad:fb:3b:00:a4:c9:9d:93:
35:a7:05:70:7e:c5:c5:78:f5:ea:0b:bb:fa:1a:9a:c1:42:30:
e9:29:65:e2:6c:6d:9d:b0:71:5a:ff:a7:df:dd:9b:44:47:62:
8d:41:2c:d7:4c:2a:98:2f:95:1d:ee:0d:73:b6:a8:0c:6e:38:
1f:70:50:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:51:01 2025 by rpki-client