Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
File:                     9ghiikaC9VOASvOrLlihnDCordI.cer (raw, json)
Hash identifier:          s6OP0TCAKDC1HwfFZ8/AfY7wPvTwxePNF2v2ILtJKaE=
Subject key identifier:   F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       15A3
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Fri 20 Sep 2024 18:43:35 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 45.221.96.0/19

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Oct 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5539 (0x15a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Sep 20 18:43:35 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3644574AR/serialNumber=F608628A4682F553804AF3AB2E58A19C30A8ADD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fd:a0:b4:87:f9:0f:14:a8:a0:99:5a:0e:69:
                    b5:bd:b3:9e:8a:54:6c:ae:69:e4:18:0a:14:4b:89:
                    a8:23:1c:d8:bc:58:55:5a:68:79:22:8a:b5:5e:48:
                    d2:90:57:93:47:46:97:69:b2:e5:11:e1:3d:41:60:
                    78:8b:f3:88:59:9f:f2:89:92:56:ec:49:9c:53:e4:
                    2a:52:77:23:9c:23:81:63:41:93:d5:91:53:11:16:
                    a8:2a:3c:27:d2:65:36:2f:74:d8:d7:71:ae:4d:f2:
                    62:a4:39:cf:ae:e1:5e:43:b4:66:7e:a8:c9:6d:f7:
                    fb:c3:95:18:d5:6e:03:40:71:3b:73:b9:cb:a6:60:
                    d9:27:4b:a6:f9:03:70:69:ea:ba:24:bc:60:dc:3b:
                    c4:47:72:7a:6d:3d:06:32:59:bb:70:32:3c:6f:a9:
                    e8:c0:5c:e2:af:02:dd:52:f0:65:ff:5d:8f:55:b7:
                    a2:30:62:3e:53:9b:e5:78:9a:d8:97:43:58:66:9d:
                    52:ba:88:f5:73:df:f8:33:e2:b6:1a:79:0a:67:44:
                    c9:1c:39:9e:fc:cc:ee:a7:3d:2a:44:54:f6:c9:e8:
                    94:c6:99:19:12:f6:97:7c:a1:35:b7:9f:2a:bd:c7:
                    ce:d3:81:1c:1c:f8:3d:04:9e:84:76:39:c4:05:a3:
                    66:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.221.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ae:cd:bd:3f:f0:92:ea:67:0c:76:02:f9:a3:63:ec:7e:8c:92:
         d2:d6:cd:aa:1f:07:39:c2:0e:19:c8:f0:d0:16:31:52:bf:c5:
         7d:13:09:02:25:38:c7:38:bd:bf:cc:64:c2:48:fc:0c:2a:9d:
         5c:77:16:fb:32:6f:4e:e7:71:96:21:a5:4a:e0:23:a5:d9:91:
         a6:77:cf:bb:0a:7a:3d:0e:a8:e1:2c:37:eb:61:54:ac:d7:5f:
         d7:8f:7c:8b:ba:8a:ae:8f:4e:4d:0f:1a:c9:79:54:29:bf:10:
         9f:fc:4a:fb:cd:60:ca:16:71:83:78:63:f5:2c:9c:09:4c:6a:
         3c:13:28:76:68:04:8f:3d:46:d3:92:98:92:bd:50:04:06:81:
         47:53:2e:eb:a4:97:56:12:4d:07:59:e3:e3:c9:76:11:4e:56:
         d4:c7:72:3b:87:7d:86:16:b4:99:94:3f:f5:a6:02:4b:0c:00:
         66:f9:a6:56:b0:32:e4:4b:4e:16:39:f8:e0:b0:c8:1b:34:5a:
         0f:7b:c3:84:80:5e:2e:a0:50:67:47:8f:89:d1:1a:0b:26:38:
         af:b3:75:f3:66:e1:05:5d:be:4b:7b:b7:4d:da:06:00:5d:c6:
         c3:f5:42:0f:98:33:6d:66:ca:83:b5:e3:5f:7c:27:b8:f6:97:
         4e:e6:6a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 01:05:42 2024 by rpki-client on console-fra.rpki-client.org