Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/2eVaqLw0ZL9JPYZgcu8wvEaGGqg.cer
File:                     2eVaqLw0ZL9JPYZgcu8wvEaGGqg.cer (raw, json)
Hash identifier:          6JgwQCj2n3DvBo4gr4Vcd9oBm5jgKg/lxwCeV0T484k=
Subject key identifier:   D9:E5:5A:A8:BC:34:64:BF:49:3D:86:60:72:EF:30:BC:46:86:1A:A8
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       147C
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F362B5C8/A5EBEFE4BB6B11EEA0811C57775412E6/2eVaqLw0ZL9JPYZgcu8wvEaGGqg.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F362B5C8/A5EBEFE4BB6B11EEA0811C57775412E6/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 25 Jan 2024 10:22:38 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 169.239.116.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 07 May 2024 00:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5244 (0x147c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan 25 10:22:38 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F362B5C8AR/serialNumber=D9E55AA8BC3464BF493D866072EF30BC46861AA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:44:5a:b2:5f:7d:83:75:ef:6a:bd:11:80:2d:
                    75:d5:93:73:12:bd:64:d0:de:78:e4:c9:95:1e:0c:
                    8a:4a:a8:01:71:37:e9:82:ea:30:3d:c9:21:89:01:
                    7e:fb:69:d1:5d:5f:12:c7:41:23:d0:96:25:7c:fd:
                    84:a1:f9:ab:64:c9:49:ec:8d:97:9a:67:fd:57:51:
                    e8:91:2c:ca:e3:29:9a:36:8c:23:37:af:0d:ac:48:
                    94:51:f7:bb:af:4b:89:4e:c3:26:c8:2f:c7:6d:7a:
                    6e:69:50:6a:3d:99:2e:7e:24:8f:28:57:b2:8d:ca:
                    ef:46:3f:91:8b:d2:9d:53:9e:16:cb:8b:73:e6:33:
                    49:f2:6f:0b:c4:87:85:88:4c:2c:f7:a2:21:2d:31:
                    27:90:f2:80:a3:07:38:41:8e:e5:1b:b6:14:50:18:
                    7f:f0:0a:25:64:b3:86:f1:88:80:65:75:37:e0:a4:
                    b4:eb:62:17:41:dc:2e:ad:cc:8d:85:45:82:f8:a6:
                    b2:b1:97:f4:4e:af:a0:09:3c:86:fd:12:2f:df:4b:
                    82:e3:da:51:43:3a:66:83:02:86:24:50:99:a0:73:
                    fc:76:d8:14:61:4e:77:11:1e:1a:00:89:61:8c:46:
                    1b:00:1f:28:14:37:9e:ed:c3:a2:92:be:e3:2d:32:
                    82:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E5:5A:A8:BC:34:64:BF:49:3D:86:60:72:EF:30:BC:46:86:1A:A8
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B5C8/A5EBEFE4BB6B11EEA0811C57775412E6/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B5C8/A5EBEFE4BB6B11EEA0811C57775412E6/2eVaqLw0ZL9JPYZgcu8wvEaGGqg.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.239.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:e7:c3:89:9b:31:4e:84:62:c5:79:ad:da:9d:97:34:8f:ce:
         08:f8:76:fc:1f:49:d9:61:19:52:db:b6:06:36:0d:36:94:1a:
         df:b9:19:e1:9d:d4:54:13:ac:9c:db:14:b4:1e:d2:7e:16:92:
         81:99:63:36:90:c8:15:cf:35:2e:4b:f2:82:98:1e:a6:df:7e:
         9d:37:5d:02:d8:d5:5a:ee:e5:63:56:3c:d4:e1:ba:6e:8d:c2:
         1e:9e:b3:1e:e8:b1:48:6e:37:af:a5:e6:18:4a:40:52:20:c8:
         b1:07:67:a9:ba:bd:91:d6:bf:a6:96:6d:f6:e7:24:98:9d:b2:
         0c:1a:bf:10:8d:54:cd:e8:2e:4f:56:70:a1:4b:9b:fc:e9:cb:
         6f:bb:d2:71:2b:d6:fb:65:b2:87:b8:93:9e:85:e6:9a:41:58:
         81:3d:e5:20:d8:df:d6:b6:ad:68:f8:5c:40:eb:bd:08:45:d6:
         d8:2b:06:96:78:12:66:c7:6a:16:d3:27:9e:e1:54:67:60:d6:
         2b:94:5b:5f:d2:20:f6:02:2a:24:5e:b3:3a:50:89:ec:06:2d:
         46:e2:35:d2:d0:50:6a:a1:18:4c:6d:eb:80:5c:93:6d:68:8d:
         70:9e:0f:a8:3b:17:a9:be:0f:8a:4f:8a:f1:b6:74:2f:23:b7:
         95:41:5c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:22:15 2024 by rpki-client on console-fra.rpki-client.org