Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/AgpK8ND-EbcD0R85elNjzQ-6E6Q.cer
File:                     AgpK8ND-EbcD0R85elNjzQ-6E6Q.cer (raw, json)
Hash identifier:          XiYM+lYY9kitwrFgAF34OxevQsLDpkRHrYq766zaq6k=
Subject key identifier:   02:0A:4A:F0:D0:FE:11:B7:03:D1:1F:39:7A:53:63:CD:0F:BA:13:A4
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1444
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/139026B082E011EE9099DC254AD9E6FC/AgpK8ND-EbcD0R85elNjzQ-6E6Q.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/139026B082E011EE9099DC254AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:29:32 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 156.38.8.0/21

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 07 May 2024 00:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5188 (0x1444)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:29:32 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36F5D39AR/serialNumber=020A4AF0D0FE11B703D11F397A5363CD0FBA13A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:b5:75:8e:42:16:70:88:20:df:5c:26:d0:
                    e5:83:b6:6b:21:7e:93:35:22:b5:5d:ca:6b:52:f7:
                    89:81:e8:c0:7b:ae:8d:f5:23:18:9b:a3:73:1e:3d:
                    e4:96:0d:6a:97:02:f9:8a:5a:a4:48:af:8c:d3:a7:
                    8d:e8:a2:ed:da:c4:94:0d:ff:14:ef:d7:af:b8:95:
                    bc:f3:fe:f8:7e:f7:1e:1e:65:dc:86:3e:56:5c:29:
                    b7:23:63:c4:e3:a3:74:5d:4a:d2:35:f6:c0:2f:f7:
                    d7:6c:50:a7:19:63:81:d9:4f:58:2a:11:c6:3a:a3:
                    70:9b:3b:c0:8a:39:08:ad:c3:2f:ad:b6:42:93:c7:
                    77:59:6d:09:5f:2d:08:ce:39:14:4c:11:c8:87:f1:
                    04:87:60:bc:45:59:ed:fb:b1:67:52:85:ab:5d:04:
                    37:b7:bf:93:1b:d7:7e:db:cc:a2:2d:72:b2:a7:2c:
                    fb:d9:c0:ca:c8:ce:50:21:07:0a:06:29:fa:71:81:
                    b5:e7:8b:71:e4:b2:19:ec:5a:e2:7f:fe:79:ee:54:
                    e0:21:f6:e0:df:ea:ac:df:fb:6b:dd:ce:c8:cf:f1:
                    fc:03:8e:95:80:f8:91:01:dd:fc:6b:70:2d:24:52:
                    d2:9e:08:f4:fa:6b:cb:fa:10:75:c8:b7:14:6f:4b:
                    aa:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0A:4A:F0:D0:FE:11:B7:03:D1:1F:39:7A:53:63:CD:0F:BA:13:A4
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/139026B082E011EE9099DC254AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/139026B082E011EE9099DC254AD9E6FC/AgpK8ND-EbcD0R85elNjzQ-6E6Q.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.38.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         37:e4:a5:b5:d9:2b:65:0f:28:4a:8e:a7:0b:2b:9a:6f:78:53:
         b5:3c:61:44:1d:2f:32:67:67:d0:da:c8:3d:21:ed:ff:17:24:
         b3:1a:f3:ab:36:ff:43:9f:fd:a0:b7:85:9a:ec:59:e4:6b:8f:
         2c:3e:57:88:df:a5:be:65:09:9d:03:ab:bc:98:23:6a:7b:83:
         ab:6c:7f:7c:30:1c:74:69:41:f4:96:d9:55:62:d1:31:c3:94:
         9a:37:62:9d:66:5a:c6:5a:fb:1b:1e:43:a8:69:98:d6:67:d2:
         a4:47:10:79:fe:8e:1c:1a:09:21:25:76:49:0e:74:a3:50:52:
         89:45:61:75:3f:88:de:ac:f2:f1:9d:4e:41:17:71:d5:ae:b0:
         31:da:97:61:76:d2:5e:7a:14:67:d8:53:5d:27:94:d0:8f:55:
         ef:0c:51:36:b6:5a:e4:b1:80:5a:5a:17:16:50:14:d8:52:ee:
         ab:29:57:20:60:ba:3a:86:9f:7a:87:53:7c:86:94:47:17:2a:
         bc:a2:c8:b2:86:8d:2f:38:fa:fc:ef:28:1b:73:61:57:80:1d:
         33:fd:4f:43:95:67:e8:ec:d2:2c:78:ef:ca:29:b4:7f:48:4a:
         ff:05:55:d2:5c:14:f5:f9:25:d9:8f:1b:d0:c2:2d:be:73:c7:
         13:92:a1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:13:16 2024 by rpki-client on console-ams.rpki-client.org