Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
File:                     rHWTnKcrl03kXiFyCNngbn4brAI.cer (raw, json)
Hash identifier:          0E4tVVjitSniHsV5sfNNRTCuhWWL7x5lVM+vLNRdMhU=
Subject key identifier:   AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1428
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:22:51 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 168.253.216.0/21

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 23 May 2024 00:16:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5160 (0x1428)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:22:51 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36D8637AR/serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:42:cf:dd:58:33:27:55:ed:71:fa:84:58:2e:
                    2d:71:06:66:f8:5b:82:36:aa:8b:a6:93:18:34:8c:
                    c9:b1:95:31:3c:ea:fd:2f:a3:fa:1f:c2:50:38:e8:
                    ad:67:8b:ee:05:98:0c:12:29:62:03:8e:af:a3:bc:
                    27:be:3a:fb:b3:53:b9:2b:3b:01:92:a8:4f:68:bc:
                    72:50:66:1c:bb:62:58:09:30:97:3d:0f:1f:66:d2:
                    c9:70:e4:82:f4:39:bc:f4:f1:bc:9f:9e:8a:45:ec:
                    07:df:03:18:7c:92:84:fa:31:df:b6:54:e4:f8:45:
                    65:c0:bd:41:f1:a0:ae:ff:f7:b1:be:41:2f:bf:f1:
                    55:57:4c:9a:8c:21:1a:44:e7:06:94:96:5d:03:4c:
                    e4:25:bb:c8:3a:55:ac:96:2a:c7:28:71:9c:c2:84:
                    82:59:85:f3:cb:5b:f2:75:6c:93:45:9a:c5:dc:47:
                    62:81:8b:d1:15:13:c5:0b:e9:0c:85:c0:79:01:24:
                    07:72:5b:fe:4f:fb:54:6c:1b:6d:68:37:c9:74:7e:
                    1f:50:c4:71:ad:4d:24:fc:3e:5d:91:14:aa:b7:f2:
                    e0:d5:40:29:6d:97:c1:6d:07:e7:6b:76:58:f0:8e:
                    b1:4b:53:83:5b:56:f8:d5:22:c2:39:a4:96:70:84:
                    e0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.253.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         81:bc:12:99:52:55:0d:e7:a2:82:b0:87:2a:cc:a7:53:38:7c:
         28:19:3c:07:91:7b:71:32:08:23:d2:3a:00:ef:67:e0:6f:ee:
         97:0e:12:6d:65:f7:5c:29:e2:f8:4b:03:7c:97:bf:6f:8b:64:
         d8:98:27:ce:52:5f:44:66:e6:d3:13:d8:e2:22:40:db:f2:27:
         9e:2c:84:8d:10:09:6c:5f:74:89:58:e6:59:72:6f:55:2e:8d:
         d8:19:f0:55:b3:0e:b1:81:a2:f5:75:49:56:c2:67:1a:bb:81:
         cc:b3:19:d7:70:03:f9:03:d9:15:e9:d5:1b:79:07:4c:e1:2a:
         a2:8b:7f:a3:35:87:19:20:32:b5:74:46:ea:8a:7b:b6:a6:47:
         5e:df:c3:25:81:09:81:3d:61:f5:04:e3:03:66:c5:66:8c:4a:
         3c:0c:c6:f5:4c:09:d3:0d:3d:bc:d6:e9:14:2f:51:07:2f:d6:
         cf:f6:24:f5:45:de:27:3e:7a:bb:00:60:df:07:41:44:41:5f:
         a4:5b:9f:e3:6d:82:ff:fb:45:49:ae:a7:88:4f:fc:42:c5:d0:
         f6:0e:5f:00:55:7a:11:b7:07:2f:c7:5d:40:89:0c:bf:38:ce:
         2d:93:54:e9:bc:72:fa:0f:36:b0:d5:fe:6a:d9:91:52:1b:36:
         0d:8d:88:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 01:49:59 2024 by rpki-client on console-ams.rpki-client.org