Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/BWiAuMNgRKWRJvERqjVFvCDBKGI.cer
File:                     BWiAuMNgRKWRJvERqjVFvCDBKGI.cer (raw, json)
Hash identifier:          cgpsVV8aPzH8BDHHqysZl85nlLjZXLVqfJGnBCRqtzE=
Subject key identifier:   05:68:80:B8:C3:60:44:A5:91:26:F1:11:AA:35:45:BC:20:C1:28:62
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1456
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36FC328/2976E2BA511F11EC9329157DD8A014CE/BWiAuMNgRKWRJvERqjVFvCDBKGI.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36FC328/2976E2BA511F11EC9329157DD8A014CE/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:34:06 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 169.239.68.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 31 Mar 2024 00:16:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5206 (0x1456)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:34:06 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36FC328AR/serialNumber=056880B8C36044A59126F111AA3545BC20C12862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5d:7b:3c:31:1e:76:af:38:57:43:49:63:a5:
                    0c:11:d7:26:4c:87:43:c1:9d:bd:62:5a:35:08:c2:
                    82:25:dd:e6:31:80:21:83:52:cc:90:a5:97:d3:69:
                    86:ba:6b:f4:da:9b:2f:30:d2:d6:56:c3:c9:7f:6f:
                    4d:a6:d7:7a:b7:da:b6:39:2b:d5:a6:68:15:87:09:
                    46:38:35:9d:0b:33:e8:21:f0:8b:4d:6b:b2:0c:ee:
                    29:f2:9e:9c:85:b9:7f:56:6f:1a:aa:b8:a2:40:df:
                    d2:3d:0c:cb:38:ef:a1:cc:56:a7:24:2a:c8:9a:1a:
                    31:1d:4a:04:69:20:96:15:02:fa:fa:aa:e1:b4:98:
                    e5:fa:47:2b:10:f9:97:5f:b3:47:0c:1e:1f:04:2f:
                    07:82:ed:29:80:30:58:1b:bd:25:9a:42:a3:2c:48:
                    6b:a9:72:a8:88:3b:b5:b7:a5:3b:b7:5a:58:b2:c9:
                    71:0f:01:f6:15:47:03:ec:0e:ed:fe:96:b6:d9:11:
                    21:81:dc:e5:66:bc:c5:49:2c:8f:5b:a1:18:4f:3c:
                    84:2e:d2:6a:dc:c3:71:60:0b:43:fd:a1:22:1a:d8:
                    76:2c:d8:79:e4:b9:c3:5c:2c:5d:e2:62:34:78:37:
                    ef:f9:ca:d7:f7:99:d2:7c:11:c1:f5:5a:c5:b5:64:
                    36:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:68:80:B8:C3:60:44:A5:91:26:F1:11:AA:35:45:BC:20:C1:28:62
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC328/2976E2BA511F11EC9329157DD8A014CE/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC328/2976E2BA511F11EC9329157DD8A014CE/BWiAuMNgRKWRJvERqjVFvCDBKGI.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.239.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:8c:bd:48:e2:ce:e6:11:0d:57:5e:9b:26:9d:9f:61:3e:26:
         12:b1:e9:b2:17:5e:89:69:b3:77:51:c2:e9:2b:9c:c9:34:9c:
         6e:7d:55:26:aa:79:7d:4e:6f:f1:e1:35:a6:80:4d:4a:ac:d7:
         c7:c8:e7:4f:35:18:c5:a9:1c:f6:e4:6c:c5:ab:ed:21:61:7d:
         8f:e2:2f:68:20:dd:9f:53:45:a2:05:30:1a:23:b0:b7:54:82:
         ae:45:d8:89:8a:45:5d:f8:44:d0:c9:70:f3:74:97:dc:8f:72:
         6e:97:ac:38:55:59:ab:8d:65:77:41:2f:c6:53:fc:d5:c4:4d:
         14:4b:75:78:6c:da:b9:a6:b7:fb:9e:53:f4:a4:ca:6d:69:54:
         a5:25:48:e6:2c:94:d9:15:f8:c4:9b:45:3f:81:64:2b:74:88:
         b0:6a:2d:e9:8a:74:e0:d2:92:c7:d5:64:a8:1e:0d:37:32:1f:
         68:a8:88:98:be:c5:38:89:ac:c0:f3:85:fa:d9:05:4b:4b:ab:
         c9:f7:d9:bc:81:54:d3:e8:ba:1b:00:70:91:e4:1d:50:bb:f9:
         49:fd:97:9d:bd:4d:fb:4a:6a:3d:be:2a:e6:8a:c0:e7:a9:15:
         ce:db:6d:eb:11:3d:b7:4f:11:0f:14:0a:0e:03:d4:a8:7f:af:
         40:26:56:76
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICFFYwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNDAxMDEwMTM0MDZaFw0yNTAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNkZDMzI4QVIxMTAvBgNVBAUTKDA1Njg4MEI4QzM2MDQ0QTU5
MTI2RjExMUFBMzU0NUJDMjBDMTI4NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQCvXXs8MR52rzhXQ0ljpQwR1yZMh0PBnb1iWjUIwoIl3eYxgCGDUsyQ
pZfTaYa6a/Tamy8w0tZWw8l/b02m13q32rY5K9WmaBWHCUY4NZ0LM+gh8ItNa7IM
7inynpyFuX9WbxqquKJA39I9DMs476HMVqckKsiaGjEdSgRpIJYVAvr6quG0mOX6
RysQ+Zdfs0cMHh8ELweC7SmAMFgbvSWaQqMsSGupcqiIO7W3pTu3WliyyXEPAfYV
RwPsDu3+lrbZESGB3OVmvMVJLI9boRhPPIQu0mrcw3FgC0P9oSIa2HYs2HnkucNc
LF3iYjR4N+/5ytf3mdJ8EcH1WsW1ZDZPAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
BWiAuMNgRKWRJvERqjVFvCDBKGIwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkZDMzI4LzI5NzZF
MkJBNTExRjExRUM5MzI5MTU3REQ4QTAxNENFLzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZGQzMyOC8yOTc2RTJCQTUxMUYxMUVDOTMyOTE1N0REOEEwMTRD
RS9CV2lBdU1OZ1JLV1JKdkVScWpWRnZDREJLR0kubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCqe9EMA0GCSqGSIb3DQEBCwUAA4IBAQBLjL1I4s7mEQ1X
XpsmnZ9hPiYSsemyF16JabN3UcLpK5zJNJxufVUmqnl9Tm/x4TWmgE1KrNfHyOdP
NRjFqRz25GzFq+0hYX2P4i9oIN2fU0WiBTAaI7C3VIKuRdiJikVd+ETQyXDzdJfc
j3Jul6w4VVmrjWV3QS/GU/zVxE0US3V4bNq5prf7nlP0pMptaVSlJUjmLJTZFfjE
m0U/gWQrdIiwai3pinTg0pLH1WSoHg03Mh9oqIiYvsU4iazA84X62QVLS6vJ99m8
gVTT6LobAHCR5B1Qu/lJ/ZedvU37Smo9virmisDnqRXO223rET23TxEPFAoOA9So
f69AJlZ2
-----END CERTIFICATE-----
Generated at Fri Mar 29 02:18:42 2024 by rpki-client on console-ams.rpki-client.org