Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/16R0hb-cpGerJ5HbX06JVar0dkA.cer
File:                     16R0hb-cpGerJ5HbX06JVar0dkA.cer (raw, json)
Hash identifier:          deQqCNuVJRVXKb2XFrAxtfj2pf4wZX0m+vBmO2OUinQ=
Subject key identifier:   D7:A4:74:85:BF:9C:A4:67:AB:27:91:DB:5F:4E:89:55:AA:F4:76:40
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       131B
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:15:37 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 45.222.104.0/21

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 26 Apr 2024 00:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4891 (0x131b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:15:37 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3614F54AR/serialNumber=D7A47485BF9CA467AB2791DB5F4E8955AAF47640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d5:1b:4b:48:45:87:d2:a4:46:cb:b6:be:1e:
                    a1:6d:48:bd:65:56:49:4b:af:d5:fb:8d:fc:24:b7:
                    13:b3:ca:41:df:c1:71:dc:31:39:46:8f:e4:6e:9c:
                    8a:a2:59:3d:d3:98:ad:b4:68:16:7f:3e:c0:6a:b6:
                    7f:66:58:a7:79:19:cc:f2:c1:36:82:56:6b:c0:3f:
                    59:b8:28:8e:40:94:85:fe:69:d0:9e:2f:46:cd:f9:
                    92:eb:4c:3f:76:6d:9d:6c:7f:d7:f3:ce:7f:51:95:
                    54:e3:bc:e0:92:21:3a:24:c3:99:aa:2a:bb:af:5c:
                    3e:65:01:34:73:13:1c:c3:90:9e:0a:0e:8a:98:05:
                    3e:6d:84:9a:a7:18:15:18:36:30:e5:62:b4:c9:9b:
                    ff:20:38:93:21:eb:b3:27:9f:ef:2d:bd:c7:8b:06:
                    83:68:f9:ea:89:59:52:e8:9d:96:e1:a1:82:9b:2e:
                    1d:d6:c7:48:01:2c:74:36:fc:d8:c1:21:03:a3:17:
                    14:18:32:21:7b:0c:d3:ba:05:d2:b3:9f:33:1c:59:
                    03:8e:3d:2a:3a:85:a2:d7:0a:d1:42:33:aa:2f:e5:
                    c2:cf:f0:e1:e3:cd:b1:e5:2c:8c:b8:89:74:05:9a:
                    08:a3:f1:30:c0:90:33:69:c7:ff:62:69:37:f1:e1:
                    10:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A4:74:85:BF:9C:A4:67:AB:27:91:DB:5F:4E:89:55:AA:F4:76:40
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.222.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         70:74:c8:b0:69:b9:c6:a2:6c:b0:be:e3:32:32:e1:ef:5a:80:
         4f:b3:cd:87:bb:76:b1:43:7e:e6:26:9b:6d:dd:17:80:38:f8:
         5b:3d:6e:49:bb:a3:5d:0f:dd:35:18:01:3c:34:ea:2f:cc:fc:
         c1:61:aa:ac:1e:11:a9:99:45:ee:6c:a2:dc:33:d9:ac:87:74:
         c6:81:0d:d3:53:5f:e4:5f:1b:05:3b:d7:51:61:81:50:4b:ee:
         f9:6b:73:d8:1a:e4:0f:39:af:64:3f:9f:21:18:95:4d:1f:7b:
         3c:68:98:d6:bf:b9:da:64:f7:fd:ee:66:77:cd:c5:29:e4:b8:
         80:89:7a:d7:67:51:05:8a:fe:3c:47:5c:73:3e:47:8c:36:dd:
         a2:fa:11:d9:41:68:1a:d2:20:39:61:f3:81:24:ce:17:6b:44:
         56:09:4b:86:d4:5b:2c:3a:8c:7d:b3:70:ba:e7:6b:eb:f7:65:
         2b:39:58:d6:d8:e7:6f:8c:be:34:cf:28:67:45:f5:4f:c8:54:
         ba:0b:fe:ec:df:21:83:52:aa:d4:3b:9e:87:8e:a4:9a:48:e6:
         ea:20:52:e6:4f:30:2f:e7:b7:a0:6a:4c:a3:dd:99:d7:bc:a5:
         f7:c4:bf:0b:6e:5e:a6:ca:aa:b6:7c:15:56:04:5a:2c:16:f9:
         8f:35:ad:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 01:49:47 2024 by rpki-client on console-fra.rpki-client.org