Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/35Ti668FVkXR68M9dxpKkrH1obo.cer
File:                     35Ti668FVkXR68M9dxpKkrH1obo.cer (raw, json)
Hash identifier:          hgjx/PPU6YCyB2jtK2yNT51Q07CTGtzvksNCzHsfb80=
Subject key identifier:   DF:94:E2:EB:AF:05:56:45:D1:EB:C3:3D:77:1A:4A:92:B1:F5:A1:BA
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1405
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:14:36 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 165.90.192.0/20

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5125 (0x1405)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:14:36 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36B4943AR/serialNumber=DF94E2EBAF055645D1EBC33D771A4A92B1F5A1BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3f:bc:08:75:19:80:10:7a:c4:3d:68:04:e2:
                    e0:b6:d1:43:fb:a0:f3:dc:ee:78:4e:69:a3:47:e8:
                    15:d7:13:75:3f:49:55:42:1d:a4:a1:0a:4c:2e:2b:
                    27:89:4a:89:6f:31:31:6d:d5:1f:ec:20:4a:67:2b:
                    1e:73:45:27:b8:1b:2d:d7:d5:a8:c5:8e:ad:8d:a3:
                    7d:4b:bd:d2:73:52:68:eb:9d:4e:83:69:e7:6e:48:
                    36:39:55:a0:a5:96:b8:96:5e:48:6b:a6:f0:51:44:
                    73:f9:c1:39:2d:3b:ae:ed:7f:99:0c:62:6c:94:62:
                    e9:57:8a:2a:bf:34:40:0d:b6:71:4e:da:9d:59:c1:
                    b3:6e:d3:b2:65:61:10:ad:24:9c:23:22:3c:34:e8:
                    4b:ac:c7:62:7c:a6:d5:e5:d1:f5:e7:73:e9:06:97:
                    0a:5e:57:20:54:b9:4f:21:70:d5:e8:8c:8f:37:b0:
                    fb:62:5b:4b:68:4c:2e:3f:ca:2b:d0:f9:2b:ee:7c:
                    9a:d2:f1:24:c8:b5:97:42:29:f1:2a:d8:ec:77:c1:
                    c1:d2:97:cb:be:f4:fa:8f:74:eb:7e:71:07:95:da:
                    e3:4e:ed:10:63:23:88:d2:18:ea:6a:c0:e1:c0:d0:
                    86:84:63:8e:e7:31:06:2d:96:13:9b:7d:c5:06:c1:
                    48:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:94:E2:EB:AF:05:56:45:D1:EB:C3:3D:77:1A:4A:92:B1:F5:A1:BA
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.90.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:ed:17:c2:7d:42:b8:b5:bd:a0:54:2e:97:e4:78:25:26:28:
         2e:c2:ce:b1:af:28:54:0a:c5:aa:44:85:77:82:2c:aa:39:57:
         03:5b:92:10:c7:a1:cc:43:df:08:3a:86:52:bd:38:28:63:90:
         7e:19:69:89:f6:cf:c7:99:f1:16:4b:82:69:b1:de:86:8c:24:
         0b:f4:ef:6f:4a:af:b8:20:c9:d0:ad:a2:8c:48:71:81:d0:dd:
         75:4f:6e:0a:dd:63:d4:37:bc:ec:6d:d4:da:6d:03:7c:b3:a8:
         27:f0:07:59:5c:f7:a3:ef:c0:aa:08:57:03:f2:b9:a4:6e:16:
         4b:e4:6b:23:1c:87:5a:d0:b4:67:a8:75:90:03:93:2e:41:92:
         7a:4a:7f:e3:a1:cb:1c:d0:dc:55:29:c5:5b:f4:a2:69:5c:32:
         5f:e3:6b:67:f3:75:a8:d9:e0:8b:a7:c3:5d:4b:6b:f9:2f:da:
         66:81:00:d1:cf:20:39:b3:00:f4:5a:6d:14:20:54:23:2e:7f:
         50:cb:f2:6b:02:ec:8f:18:9c:4a:76:f2:aa:dd:6f:dd:13:27:
         fa:2e:00:e4:7e:4c:cf:1e:2f:fe:0f:ce:9a:3b:aa:93:52:19:
         4b:e6:a3:6d:c6:df:e4:0b:ba:ef:75:a6:93:74:6b:4b:87:36:
         87:5d:f1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:54 2024 by rpki-client on console-ams.rpki-client.org