Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/Abb7gSoUrvQLoDsWWv79W3SkZpY.cer
File:                     Abb7gSoUrvQLoDsWWv79W3SkZpY.cer (raw, json)
Hash identifier:          VFfG2tDyQqGJxJOQ2iM/aYqDT1keiX/Q7hPcIEUa4BE=
Subject key identifier:   01:B6:FB:81:2A:14:AE:F4:0B:A0:3B:16:5A:FE:FD:5B:74:A4:66:96
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       13A7
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:50:38 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 165.90.32.0/19

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 07 May 2024 00:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5031 (0x13a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:50:38 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3674008AR/serialNumber=01B6FB812A14AEF40BA03B165AFEFD5B74A46696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a4:3d:d6:0d:43:a4:35:7a:90:9d:29:c7:ce:
                    2e:89:d7:37:aa:39:ff:c3:d8:3a:45:41:2f:e0:b6:
                    3c:4a:9a:97:ff:ab:19:03:45:aa:bc:63:33:a3:b7:
                    3b:e5:d5:7d:93:68:54:f4:8c:08:1b:c3:f2:8a:a9:
                    5a:81:48:e6:58:2b:05:cd:52:a9:0e:fd:65:76:41:
                    46:7e:dd:fa:dd:59:7e:8c:1b:a3:eb:b0:2a:af:07:
                    cc:32:4d:ce:f6:b9:65:88:30:16:98:2c:79:cf:72:
                    09:26:4a:94:cb:40:05:2e:9b:ee:0c:2e:a5:64:ad:
                    6d:72:48:16:d7:49:d5:59:36:08:78:1e:49:70:1a:
                    18:f5:fa:62:82:6d:e8:dc:7a:84:c8:9c:a7:ef:15:
                    ea:87:ad:7b:b1:de:1b:d4:fa:9d:69:cd:6a:97:a9:
                    c4:6a:34:ad:b9:c6:db:7a:4c:da:8e:76:72:78:c3:
                    08:cd:81:c7:62:cf:95:bd:ae:7c:88:1f:c6:d1:6f:
                    1d:67:44:31:97:76:fd:34:61:cf:ba:48:b2:0a:dc:
                    df:27:0f:87:09:58:14:b5:af:eb:7c:6d:48:f8:16:
                    6c:c2:0b:f4:a2:d5:b2:07:72:90:8c:3d:6a:6c:c2:
                    44:51:44:99:39:8a:5c:6c:e5:44:5f:f8:67:b5:24:
                    e4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B6:FB:81:2A:14:AE:F4:0B:A0:3B:16:5A:FE:FD:5B:74:A4:66:96
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.90.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         23:fd:fb:75:05:fb:0e:1c:40:cb:9f:75:4f:c1:af:92:7a:cc:
         e5:00:24:e2:c6:ad:68:44:5d:17:eb:ea:20:90:2e:79:70:1b:
         0c:e9:91:44:e9:8e:f8:51:17:34:14:21:0a:7a:21:19:33:64:
         d8:3b:e1:95:5f:d6:d3:30:9a:cd:ac:31:ca:4d:c9:cf:74:7e:
         62:47:df:65:c4:a0:19:14:17:3e:e9:79:71:1a:59:30:2e:97:
         1a:01:d4:b0:e3:80:c9:33:c7:57:58:41:46:5c:0b:5e:8b:4e:
         4d:0b:27:11:cd:d5:fa:dd:12:66:30:d3:82:e9:d0:e5:64:50:
         f1:49:a7:19:59:39:12:70:a1:b4:ea:f2:bd:e4:84:43:a6:96:
         56:a8:e7:57:0e:f4:38:77:2f:28:49:65:e1:81:05:cc:c6:08:
         98:e9:47:76:ca:78:94:79:7b:58:5d:71:9e:12:ef:cf:4b:d4:
         d3:60:ad:60:44:1f:47:76:a4:0c:19:a2:5f:ee:d5:79:3f:be:
         a7:7d:15:1f:da:70:33:a2:7b:38:83:fc:39:4e:36:80:80:ac:
         d8:1b:33:1f:72:83:35:c8:70:c4:69:da:4c:3b:1d:b9:be:17:
         c8:e8:03:5e:13:22:3e:a2:c7:5a:ce:be:d6:17:b0:10:e3:7c:
         00:05:07:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:22:15 2024 by rpki-client on console-fra.rpki-client.org