Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer
File: zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer (raw, json)
Hash identifier: I0vJIQf17MtB2MIf/y8aVNFmTIaBd/jXvnBvZk+7+78=
Subject key identifier: CE:14:7C:A4:05:94:5A:CF:5C:DF:E1:5E:4F:A5:D2:BD:EA:48:D9:0A
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 30D8
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:41:51 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37027
AS: 37084
IP: 41.188.128.0/18
IP: 41.221.32.0/20
IP: 196.45.32.0/20
IP: 2001:4258::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12504 (0x30d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 03:41:51 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F368BC41AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4c:42:40:1f:5f:79:28:92:cf:55:40:d2:2f:
4c:42:a5:ca:f1:05:21:35:29:74:44:22:3d:af:84:
40:f9:28:b7:3f:74:34:1a:9b:05:9c:c0:83:cd:48:
14:56:7b:88:de:38:c6:49:46:35:f6:b6:89:47:af:
a9:fa:ee:f3:88:17:08:df:25:36:41:e3:08:79:76:
4a:b4:e3:48:76:98:f9:b2:6c:db:ba:3d:68:6b:db:
49:75:07:82:6d:43:bc:2e:8b:35:34:ec:ce:33:03:
60:7c:5d:33:40:4f:74:e4:fc:e3:69:25:ab:18:a9:
1d:d5:63:f4:da:9a:08:49:6a:6f:d7:40:b2:ea:86:
a2:3c:8e:36:48:78:cc:b9:be:eb:13:82:6c:c9:d4:
f7:17:2a:07:74:a3:5b:ae:41:bc:32:bd:fe:b3:b6:
10:44:6a:e2:fd:8c:46:a1:8f:e3:d3:a1:a5:c3:5c:
3c:d6:a2:36:0a:e8:20:c6:ab:5f:b1:84:16:63:82:
43:29:78:3e:1d:63:77:90:72:10:8c:56:2e:5a:ae:
b9:56:17:61:ca:5f:99:c0:af:bb:23:01:35:ae:93:
31:d6:4a:48:46:35:1a:09:e4:16:99:e6:6e:4d:ea:
99:9c:25:76:54:ba:00:80:ed:b5:96:c1:60:08:7d:
7f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:14:7C:A4:05:94:5A:CF:5C:DF:E1:5E:4F:A5:D2:BD:EA:48:D9:0A
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37027
37084
sbgp-ipAddrBlock: critical
IPv4:
41.188.128.0/18
41.221.32.0/20
196.45.32.0/20
IPv6:
2001:4258::/32
Signature Algorithm: sha256WithRSAEncryption
54:d0:63:d0:d1:3c:b7:ac:4f:c9:c0:45:1e:16:52:4b:a2:91:
fb:a1:5b:e4:44:4a:70:51:c1:e8:5a:74:c3:3a:df:b3:63:4b:
02:5c:01:6e:17:d4:4f:0e:86:f9:61:ca:7c:23:3c:e8:a1:90:
d3:42:ca:3a:d1:94:10:ea:d8:49:a3:18:33:37:5a:56:a1:a9:
3f:92:13:29:cc:5a:2b:80:64:92:93:0a:33:4f:fe:4c:f8:9a:
19:85:06:1e:67:0b:77:08:c0:98:e3:a4:fd:a9:c8:ba:62:fb:
90:23:e0:98:38:8e:06:ba:1b:ae:f5:a6:f4:d3:8a:d5:72:96:
82:e2:a6:13:b3:7f:97:d5:50:eb:e0:22:bd:25:42:c0:14:11:
28:00:46:c7:2f:95:47:55:d5:59:95:14:59:05:ea:26:ff:53:
09:87:3a:65:37:1c:96:c1:57:7e:50:62:e3:18:7f:e8:17:85:
8d:b5:f0:d0:09:4c:df:38:0a:6f:89:b1:b9:e0:09:4c:f9:46:
85:33:9a:e4:a4:df:e3:69:ec:fd:45:ea:25:8c:10:ff:e5:43:
4b:e2:b8:66:10:ea:2f:b1:c9:ca:59:f7:c9:57:1e:2d:e7:7e:
21:49:98:67:54:0e:3b:3a:8e:fb:cc:d6:30:6d:df:d5:8a:25:
f4:e8:93:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:39:27 2025 by rpki-client