Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer
File:                     -sDqJCqAq1tZab-mHdXZlLIVbrU.cer (raw, json)
Hash identifier:          l0nWdOyOzo8DimpP6Dm8+BJr5AC9ZWRb9bi/BbWYa3E=
Subject key identifier:   FA:C0:EA:24:2A:80:AB:5B:59:69:BF:A6:1D:D5:D9:94:B2:15:6E:B5
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1356
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:30:42 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 156.38.4.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4950 (0x1356)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:30:42 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F364379DAR/serialNumber=FAC0EA242A80AB5B5969BFA61DD5D994B2156EB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e9:54:6d:17:f2:fc:60:c4:c2:cd:a7:cd:56:
                    52:dc:e8:31:0a:8b:c0:1f:6d:07:c6:8a:a4:d7:39:
                    e0:b1:d7:ba:3c:89:d5:37:ff:d4:ab:62:79:1a:bf:
                    5a:71:b1:8e:a0:3c:35:07:18:c7:ee:55:d0:b0:38:
                    73:77:73:02:a9:2f:0f:19:92:29:b7:3c:37:c1:e1:
                    f5:ad:4e:d3:10:b0:30:24:32:7f:e6:56:5c:1c:36:
                    49:41:1b:a2:8f:fc:91:74:7d:50:b6:15:68:9f:f3:
                    e6:7a:3c:68:29:50:b5:e3:0f:f7:7c:c6:0b:7a:9b:
                    7d:05:b7:2c:5a:8a:f5:af:ba:5f:34:c8:51:2a:8c:
                    2a:41:45:e7:9e:37:09:0c:ff:6c:16:87:1b:da:29:
                    5b:3a:72:5d:39:ba:b5:41:77:3f:89:82:9a:64:7e:
                    e4:d3:42:11:c1:6c:05:e5:d2:40:2c:c1:97:dc:1b:
                    03:2f:6e:94:72:61:a3:3f:43:d3:12:77:c9:65:90:
                    d8:37:85:5a:04:c4:70:b0:2e:a6:67:53:68:5a:6e:
                    1d:9a:04:93:40:aa:36:97:e4:19:42:18:d7:02:26:
                    e0:1a:a6:18:12:0d:4f:e5:a3:18:16:5b:73:06:91:
                    cc:21:2b:c6:5e:cb:ca:ab:cd:b9:a2:46:ee:6f:48:
                    20:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C0:EA:24:2A:80:AB:5B:59:69:BF:A6:1D:D5:D9:94:B2:15:6E:B5
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.38.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:43:e4:15:9e:bc:75:14:b2:bd:b9:06:0e:f0:8e:69:93:46:
         e4:6a:11:3e:85:84:72:eb:45:41:75:be:2d:cd:ee:1c:e8:7f:
         ad:5f:48:b2:6f:a6:29:2c:b1:8f:66:e3:0f:2a:ef:8e:73:dc:
         da:e4:58:a2:99:28:ae:04:64:09:d4:a5:90:0b:af:43:98:04:
         f9:8a:3f:47:ee:8e:57:3e:d8:7f:ac:f9:55:46:8d:55:d6:5f:
         4f:09:64:61:42:9b:f5:e7:0a:80:65:0c:48:0e:00:74:17:aa:
         fc:7e:8d:04:a6:79:aa:3d:76:ad:08:d1:71:88:03:42:49:7c:
         b3:db:22:3f:9f:56:4a:bb:63:4e:61:14:83:8d:e9:27:99:3a:
         6f:f7:ff:8e:d7:88:7b:d1:ee:3f:76:0d:82:84:ea:70:ae:59:
         dc:e1:61:ec:d7:43:3e:be:91:8c:c0:29:1f:8a:8c:01:c7:c4:
         6d:b9:54:c3:81:17:27:f1:8e:9d:b9:88:9c:ef:ca:02:20:2e:
         c9:4e:26:74:91:65:44:20:d3:5b:d8:e9:cd:3a:a6:f6:c6:14:
         68:ea:77:b2:9e:e2:99:5c:ee:77:39:cd:e0:b8:ca:aa:51:ce:
         5a:42:5f:ce:18:3b:80:91:b7:43:b4:77:b6:a2:d7:34:92:c2:
         e1:6b:ea:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:54 2024 by rpki-client on console-ams.rpki-client.org