Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/9zORrduc3mc6pJF07KjUMLSfGcM.cer
File:                     9zORrduc3mc6pJF07KjUMLSfGcM.cer (raw, json)
Hash identifier:          1hQ+l8Zm1TK5FDpb/4L3KdwTwgpM8dc+np74Wxb7oS8=
Subject key identifier:   F7:33:91:AD:DB:9C:DE:67:3A:A4:91:74:EC:A8:D4:30:B4:9F:19:C3
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       13D1
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:01:12 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 156.0.255.0/24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5073 (0x13d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:01:12 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36914A7AR/serialNumber=F73391ADDB9CDE673AA49174ECA8D430B49F19C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:98:e8:71:40:d3:a7:e2:b0:a3:11:95:c4:07:
                    92:cc:ac:07:22:d7:3c:98:a3:a2:90:5a:33:18:2d:
                    20:4f:a6:c7:44:4e:c5:4b:ea:2b:63:ef:3b:ea:cd:
                    ff:7b:a3:c7:cf:50:24:1d:31:bc:f6:a6:23:0f:e5:
                    08:fb:6b:cf:59:c6:b7:5f:ec:d2:38:7e:ba:dc:55:
                    b1:f6:aa:9f:0e:19:62:48:55:7a:af:94:e2:1d:3e:
                    f9:c7:f9:76:d1:35:17:36:e7:d9:fa:13:0c:08:ad:
                    69:7c:80:32:e6:84:0b:4f:08:b7:c6:55:97:38:a7:
                    8e:f2:0d:fb:9d:af:af:0d:b4:11:76:cd:56:6a:3a:
                    58:1d:50:85:91:fe:97:ea:7a:37:b3:93:dc:aa:13:
                    a8:c9:75:57:5f:9b:f0:d7:57:52:3c:4f:b7:f1:73:
                    3e:46:c0:0a:15:af:ba:12:27:44:45:e1:53:0e:30:
                    18:4e:02:a6:76:12:b5:01:9a:39:27:ef:0d:19:d4:
                    b5:51:e7:12:d0:87:41:19:d3:4b:68:c7:79:3e:a1:
                    28:43:de:cf:e4:6a:cb:c9:c4:39:8c:6d:b9:e8:0e:
                    90:40:b2:a5:a8:ef:55:b4:60:4f:71:24:eb:5d:24:
                    e9:1d:2a:15:b5:f4:78:5f:ce:ba:b4:d9:ec:bf:8e:
                    4b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:33:91:AD:DB:9C:DE:67:3A:A4:91:74:EC:A8:D4:30:B4:9F:19:C3
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.0.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:4a:16:bc:f9:03:41:6a:67:f9:6c:fc:e6:a3:a2:6f:1d:21:
         90:03:a1:0a:4e:0e:2d:ad:40:59:04:bb:53:b1:6a:a5:16:be:
         d5:f0:e8:f8:94:e4:15:f1:e3:64:fd:a4:ab:e9:0b:03:24:c6:
         06:d9:28:69:92:b1:3c:b0:bf:f5:68:5b:a3:98:87:26:47:64:
         00:90:e8:a1:ec:26:21:65:2f:7a:61:e2:69:96:c3:90:9d:f6:
         87:96:bd:e7:40:ec:5f:95:fb:82:94:6e:be:cc:04:7d:fb:83:
         3c:09:3b:5d:32:81:8d:76:94:b5:73:77:e3:d0:0b:17:3c:f3:
         85:35:2e:7c:64:fc:5b:58:7d:e5:d1:c0:66:ca:8f:2c:cb:7b:
         da:ed:39:3d:f9:81:3d:3c:b3:e4:9b:3a:13:1a:60:b0:d2:66:
         a3:f7:84:66:21:a7:8b:f8:29:f5:67:31:81:e1:e4:6b:bc:73:
         18:60:ba:a1:82:da:43:39:63:ce:bc:04:c7:46:e5:36:70:33:
         44:be:9f:fe:5f:e2:f0:a0:6d:98:bf:d2:27:4f:0c:81:e1:43:
         5c:ca:6a:57:68:31:03:9f:65:23:96:c8:82:b3:89:a9:39:59:
         a4:e1:6c:0b:8e:5b:ab:e9:2a:51:ea:7f:e2:ad:e6:2d:b8:a0:
         e6:02:38:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:54 2024 by rpki-client on console-ams.rpki-client.org