Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/zCzeBNPUNh6EROKuXkLw7fYi3OQ.cer
File: zCzeBNPUNh6EROKuXkLw7fYi3OQ.cer (raw, json)
Hash identifier: l6AE+IbBc3cGTO733PkOWW4Z/BymSFV7Z5TiVlkllC8=
Subject key identifier: CC:2C:DE:04:D3:D4:36:1E:84:44:E2:AE:5E:42:F0:ED:F6:22:DC:E4
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3289
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:14:15 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 22354
IP: 41.86.160.0/19
IP: 196.44.160.0/20
IP: 2c0f:f538::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12937 (0x3289)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 05:14:15 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36C3DC5AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:13:7d:7d:f8:09:c6:74:f1:55:1b:f5:a9:31:
ab:06:55:60:d2:34:5b:03:09:02:e0:e4:e1:37:92:
2c:06:d6:a5:31:c9:00:ad:71:71:6a:68:ea:1e:69:
56:8d:b3:d7:28:1f:74:e6:cf:44:d9:ea:85:04:eb:
f6:6e:83:55:a1:2f:77:09:7d:b5:21:18:97:d7:b9:
4b:ff:85:fc:07:b4:30:25:33:d6:5e:5c:ec:b7:8c:
0a:5c:3c:82:83:73:a8:f2:bc:0e:26:96:04:5e:59:
aa:a6:5f:04:f3:05:e8:3d:e9:6f:06:f2:dc:37:e2:
3e:42:98:f5:66:2d:b2:d5:b6:16:e7:83:12:68:d4:
9d:d9:ca:b4:e3:95:73:46:5d:88:b3:f4:31:88:e2:
c2:7f:6b:a3:93:b7:29:48:e1:53:0d:c4:1a:85:bf:
50:2a:e7:75:42:f9:d3:06:a1:cd:f8:11:9e:95:aa:
77:a3:df:e2:1d:77:8f:95:82:6b:72:12:e8:bc:33:
7e:d6:a8:3f:07:40:86:42:41:8e:3b:e5:b2:29:a1:
23:2f:5b:11:2b:a1:41:08:b8:29:8f:9b:e8:9a:14:
a8:4a:b4:67:49:0a:b2:de:da:a9:ad:e9:bd:81:2b:
f2:2a:7d:14:98:94:38:04:93:45:a7:84:27:5b:2e:
72:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2C:DE:04:D3:D4:36:1E:84:44:E2:AE:5E:42:F0:ED:F6:22:DC:E4
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
22354
sbgp-ipAddrBlock: critical
IPv4:
41.86.160.0/19
196.44.160.0/20
IPv6:
2c0f:f538::/32
Signature Algorithm: sha256WithRSAEncryption
26:14:7a:e9:f9:de:a0:94:0d:f2:e4:16:83:2b:f3:57:2b:fa:
34:a0:8d:09:fc:9e:df:41:f8:d6:47:cc:02:64:c5:fd:65:c1:
ca:55:b8:a9:21:be:de:75:57:5d:e8:c5:5b:86:9c:42:4c:3d:
9d:74:2c:77:58:c2:18:21:35:a4:7d:57:b5:e1:af:d0:37:05:
8c:bc:d3:be:48:59:6a:0c:58:41:8f:75:97:da:71:fd:bc:eb:
52:86:70:65:bc:b0:f4:2d:a4:c3:4b:c5:5b:dc:8f:d1:03:81:
44:f7:97:25:5f:d8:01:a6:4f:c5:05:0d:dc:02:e7:de:f7:80:
71:6a:a3:a0:58:f9:49:1c:24:e4:57:a8:f5:cb:3f:fe:89:57:
67:0a:f6:42:f2:42:17:ef:1c:b6:2d:25:d4:02:0e:94:d5:a2:
10:76:d8:9d:0c:fe:d7:b4:0b:d0:f2:df:55:cf:3d:7f:2c:fb:
79:63:2f:0d:b6:19:ec:a0:a1:8d:bd:ce:45:1c:b7:04:18:7b:
a2:6d:42:59:4a:f7:25:77:c9:52:52:51:2a:97:20:82:84:a6:
b4:cc:84:d6:d1:46:55:36:95:87:83:2f:ec:07:81:f1:8c:e2:
14:83:b2:b1:c9:02:9d:94:8f:65:be:49:64:4a:2b:12:2d:3e:
ac:fe:f9:00
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:54:21 2025 by rpki-client