Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/h8J36lRFUp3Qay_l7p8zzcfOhOA.cer
File: h8J36lRFUp3Qay_l7p8zzcfOhOA.cer (raw, json)
Hash identifier: e8eFsPnE7xDY/qElA1qNOnmHh6OM9Bi3uNkzkrzb2O8=
Subject key identifier: 87:C2:77:EA:54:45:52:9D:D0:6B:2F:E5:EE:9F:33:CD:C7:CE:84:E0
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3253
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/h8J36lRFUp3Qay_l7p8zzcfOhOA.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:02:14 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328250
IP: 41.223.108.0/22
IP: 102.220.40.0/22
IP: 102.223.188.0/22
IP: 2c0f:f8f8::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12883 (0x3253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 05:02:14 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36BCC19AF/serialNumber=87C277EA5445529DD06B2FE5EE9F33CDC7CE84E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5b:a9:99:af:12:eb:e8:5b:9e:5a:58:20:25:
1d:53:c3:52:43:98:e0:6b:47:4a:6f:06:68:4b:d2:
7d:21:df:d8:2f:b9:7a:e0:92:ba:b8:53:4f:32:7f:
24:1b:f0:85:64:06:07:0b:24:1b:d0:3b:75:ee:cc:
9c:ea:0e:89:f3:3f:24:a2:65:99:db:5d:b9:02:cd:
ab:5d:09:90:10:57:ae:5f:fe:a1:74:d0:56:50:87:
23:47:a9:08:71:dc:42:b1:12:b7:86:a3:93:93:5b:
7d:71:9f:f0:df:41:05:6e:93:68:62:72:6c:50:e2:
17:33:28:c4:93:2c:e8:61:1c:63:21:ed:3e:94:92:
10:ff:d5:6c:61:f3:15:72:f8:46:35:82:32:d0:13:
54:bc:a0:90:45:70:5c:ba:94:9e:6c:09:53:63:b0:
86:11:d5:22:80:45:6f:1f:f1:47:6e:7a:e0:3e:82:
e1:21:e1:1c:dc:cd:30:8a:41:5c:8b:8e:36:b8:77:
16:12:40:af:b0:6f:33:f9:a2:f2:93:57:2c:4a:5c:
a3:0a:d8:e0:4f:8f:73:cc:90:f3:c7:47:67:81:9b:
11:72:b8:a4:01:1b:d8:aa:f2:ba:e0:64:e4:1e:c2:
08:15:41:cb:bf:bd:5d:49:8b:76:7a:c5:ba:8d:87:
53:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C2:77:EA:54:45:52:9D:D0:6B:2F:E5:EE:9F:33:CD:C7:CE:84:E0
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/h8J36lRFUp3Qay_l7p8zzcfOhOA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328250
sbgp-ipAddrBlock: critical
IPv4:
41.223.108.0/22
102.220.40.0/22
102.223.188.0/22
IPv6:
2c0f:f8f8::/32
Signature Algorithm: sha256WithRSAEncryption
42:a4:8b:64:e7:0e:80:f3:0b:f8:44:aa:4f:de:1d:ae:45:cb:
cb:28:41:74:5e:cc:d5:dd:d5:bb:15:51:c1:1b:e8:61:13:1b:
06:83:e0:ea:a0:8a:56:1c:94:da:26:3a:a9:02:c2:47:7a:e1:
1e:17:d8:14:72:bf:87:75:fd:ba:48:4b:d0:8c:cf:4a:8d:d7:
4e:cc:cb:ea:57:f6:33:03:c7:8d:d9:9a:3b:2d:71:ab:c5:a2:
a3:4b:de:cb:dc:4c:22:2b:71:5d:8b:ce:bf:ec:1d:a2:f7:4d:
87:e1:90:c5:82:b4:a3:ee:47:be:da:44:b9:34:e9:98:8d:07:
e2:13:6a:ef:d9:f4:d5:ec:05:2b:9c:7a:86:80:db:76:5e:9d:
ff:ff:cd:f0:9e:b1:eb:75:6f:1a:da:f3:3d:f4:84:fc:b7:fe:
ec:34:78:64:89:e4:14:4e:94:a1:3d:06:98:f7:3c:95:f4:39:
05:43:73:35:55:c4:13:42:62:54:cd:ef:fc:b3:0d:e0:97:11:
7c:17:65:6a:a6:fd:63:1a:6e:6c:70:2b:d4:95:9b:dd:c7:57:
77:bd:67:17:37:12:f9:52:34:79:a2:aa:9f:5b:67:26:b0:e5:
dd:e2:10:4f:10:62:9d:bc:c3:ee:11:0b:48:02:3d:c6:b5:d4:
38:a1:e9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:11:04 2025 by rpki-client