Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/16R0hb-cpGerJ5HbX06JVar0dkA.cer
File:                     16R0hb-cpGerJ5HbX06JVar0dkA.cer (raw, json)
Hash identifier:          RXxUHdqmO6y/EHm6wLSRfXoDjBEpSDrpL9W59XZR1Lw=
Subject key identifier:   D7:A4:74:85:BF:9C:A4:67:AB:27:91:DB:5F:4E:89:55:AA:F4:76:40
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1618
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 00:25:32 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 45.222.104.0/21
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 14 Apr 2025 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5656 (0x1618)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC
        Validity
            Not Before: Jan  1 00:25:32 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F3614F54AR
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d5:1b:4b:48:45:87:d2:a4:46:cb:b6:be:1e:
                    a1:6d:48:bd:65:56:49:4b:af:d5:fb:8d:fc:24:b7:
                    13:b3:ca:41:df:c1:71:dc:31:39:46:8f:e4:6e:9c:
                    8a:a2:59:3d:d3:98:ad:b4:68:16:7f:3e:c0:6a:b6:
                    7f:66:58:a7:79:19:cc:f2:c1:36:82:56:6b:c0:3f:
                    59:b8:28:8e:40:94:85:fe:69:d0:9e:2f:46:cd:f9:
                    92:eb:4c:3f:76:6d:9d:6c:7f:d7:f3:ce:7f:51:95:
                    54:e3:bc:e0:92:21:3a:24:c3:99:aa:2a:bb:af:5c:
                    3e:65:01:34:73:13:1c:c3:90:9e:0a:0e:8a:98:05:
                    3e:6d:84:9a:a7:18:15:18:36:30:e5:62:b4:c9:9b:
                    ff:20:38:93:21:eb:b3:27:9f:ef:2d:bd:c7:8b:06:
                    83:68:f9:ea:89:59:52:e8:9d:96:e1:a1:82:9b:2e:
                    1d:d6:c7:48:01:2c:74:36:fc:d8:c1:21:03:a3:17:
                    14:18:32:21:7b:0c:d3:ba:05:d2:b3:9f:33:1c:59:
                    03:8e:3d:2a:3a:85:a2:d7:0a:d1:42:33:aa:2f:e5:
                    c2:cf:f0:e1:e3:cd:b1:e5:2c:8c:b8:89:74:05:9a:
                    08:a3:f1:30:c0:90:33:69:c7:ff:62:69:37:f1:e1:
                    10:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A4:74:85:BF:9C:A4:67:AB:27:91:DB:5F:4E:89:55:AA:F4:76:40
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.222.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         77:2a:ac:31:5e:d2:81:9d:36:63:0c:67:31:64:71:3d:44:c0:
         66:16:d0:dc:ab:d1:24:43:84:85:ab:20:43:47:30:c8:c6:a6:
         1a:7a:27:4f:49:d6:58:3b:b5:cc:b8:98:63:28:83:27:1b:61:
         7b:67:5e:58:9e:83:7f:07:93:fb:57:e2:bc:fc:3f:af:b4:90:
         0d:a9:fc:59:64:0d:38:1c:77:5e:b8:85:db:f8:6c:69:0c:00:
         4d:11:16:55:e2:d6:6b:d6:b6:ef:94:c9:3d:f8:9d:4d:c0:b8:
         fd:99:2b:1f:99:b6:38:ae:a6:b8:e8:f2:5e:6d:e2:aa:d6:30:
         4d:16:db:a7:b9:25:5b:d8:e5:bf:b6:c0:77:aa:f0:35:c8:e5:
         55:c8:9c:5b:f8:95:32:d5:8c:34:00:e6:38:d4:ae:17:76:02:
         21:70:b8:92:34:cf:52:38:31:2a:70:2b:61:95:d1:70:6e:a5:
         86:e4:b6:3f:67:7e:18:67:f3:5d:c9:4b:62:94:c6:f6:e5:2f:
         8a:87:61:75:ce:45:ce:a5:45:1e:3a:57:d4:61:fc:6b:0e:ac:
         9c:14:68:51:1c:20:ef:6d:2f:ed:24:81:0b:41:13:91:13:4b:
         b2:4c:ca:a5:a3:0e:27:16:66:69:66:1e:35:5b:f3:c1:67:31:
         76:f6:49:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:34:57 2025 by rpki-client