Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
File:                     7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer (raw, json)
Hash identifier:          f+8Wil4Wj7HONxQ1UHRwUt/64rbNyyVHpbQ/SQ5xWig=
Subject key identifier:   EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       140F
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:16:48 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 160.242.192.0/18

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5135 (0x140f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:16:48 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36BD97CAR/serialNumber=EFF4061F35572E6BFA1C24BB2368FCFE2EAE605A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e8:83:71:8c:5a:49:d2:a3:fe:73:6c:26:84:
                    7d:e2:a8:79:c9:f1:25:b4:81:a2:17:51:8a:5a:43:
                    9f:f6:e4:7c:aa:bb:0f:98:c8:a3:62:a9:01:9a:a8:
                    f4:6d:56:7c:c4:86:12:28:8e:4e:c2:d9:d8:f6:e6:
                    8e:0d:61:0b:38:c8:4d:e2:cb:ab:ad:13:dd:17:b7:
                    51:18:dc:7d:ab:c4:c5:50:22:14:03:e8:b9:4a:e2:
                    69:85:2e:5e:70:ab:02:ec:1e:35:f2:78:1c:ca:0c:
                    32:55:7c:97:6a:ee:36:8c:57:e4:04:14:7a:52:3b:
                    8b:59:f9:7b:22:85:a7:d6:f2:0c:f1:7f:4f:4b:e6:
                    11:cb:61:b4:c0:93:8c:00:48:2d:20:fa:d3:1c:55:
                    c1:33:06:7f:55:8a:68:d3:2b:e6:f8:a1:b6:6f:0a:
                    59:05:8e:b0:8b:28:f9:dd:6f:9a:17:11:1e:99:60:
                    1f:b8:8d:f7:b1:d0:c1:45:ec:8d:62:fc:c0:09:ee:
                    ca:6c:14:45:0b:bc:8f:86:b9:1c:aa:84:5b:df:fa:
                    e3:dc:94:05:20:e9:27:6b:b7:e0:d4:04:8a:9a:af:
                    19:51:49:39:8b:0e:fa:a6:80:6b:d7:7f:e9:44:68:
                    ca:5e:25:73:f5:72:4b:28:1c:a0:1f:65:44:3d:f9:
                    1b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.242.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         51:d1:2b:df:b0:b4:d7:8b:18:67:71:84:ed:13:e2:84:f4:99:
         00:22:83:7b:6a:81:e9:5c:f7:70:e5:c7:9f:ab:c8:bc:5f:33:
         06:be:30:fb:85:87:01:15:a9:e7:f0:fa:3e:76:df:ee:92:09:
         24:e6:1b:84:58:0b:c4:bc:59:dd:c7:c8:ae:07:cd:8e:e2:9d:
         4e:8c:17:7d:bf:f8:8e:b2:92:c6:d0:5c:58:b0:90:9b:59:a3:
         68:1e:bf:6f:0f:9d:25:69:1f:7d:df:e5:67:66:1e:88:b0:d1:
         2a:92:83:4f:41:cb:56:27:98:ad:23:6f:1d:a1:81:3b:1c:5a:
         9c:ef:97:79:2c:24:d4:d2:ce:44:a2:61:bf:23:ce:46:22:ae:
         6f:46:60:e6:17:ae:33:8e:73:0b:dc:02:f7:38:5c:ee:1e:1f:
         96:96:6e:a7:a7:9f:4a:87:fc:f1:a9:02:d9:f7:b7:58:0f:3b:
         3a:54:f6:3d:05:36:0c:a1:f7:68:27:fc:71:23:21:17:60:c9:
         65:64:4d:8d:30:f0:d0:39:26:ca:5d:76:f0:31:68:82:60:51:
         7e:94:d5:b3:13:15:42:4b:c2:63:0f:08:f1:31:99:89:28:4e:
         19:95:a9:2b:1d:ee:74:23:22:a0:d5:99:39:0c:62:a1:b9:a2:
         e5:b8:7d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:54 2024 by rpki-client on console-ams.rpki-client.org