Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/DQqYyjQmBIKxsXgOoyEN9IWsCIA.cer
File:                     DQqYyjQmBIKxsXgOoyEN9IWsCIA.cer (raw, json)
Hash identifier:          pA/EtlfOuCULmJybgHHxc2kpEejqzvXp2UwDPfgM7LY=
Subject key identifier:   0D:0A:98:CA:34:26:04:82:B1:B1:78:0E:A3:21:0D:F4:85:AC:08:80
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       137A
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/DQqYyjQmBIKxsXgOoyEN9IWsCIA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:39:16 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 169.239.132.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Apr 2024 00:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4986 (0x137a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:39:16 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F365E03DAR/serialNumber=0D0A98CA34260482B1B1780EA3210DF485AC0880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:20:f6:18:75:4b:be:80:5a:dd:6e:4f:d2:13:
                    8b:04:7a:0f:35:38:c7:83:74:14:27:3e:1d:74:af:
                    1e:4b:9a:97:3c:3d:9a:29:af:0a:67:02:62:d0:35:
                    3c:c4:5d:96:85:96:20:64:a4:55:05:de:3a:93:bc:
                    a2:e3:bd:e1:48:fc:21:0b:f0:e4:21:0f:80:cd:1b:
                    cd:81:8c:7b:47:14:9a:64:01:0c:b1:13:87:bf:dc:
                    2c:31:a1:69:f8:e8:7e:58:77:9d:57:dd:a3:e7:df:
                    54:34:0e:4c:bf:ee:0b:ce:1e:a2:60:f0:e4:4f:96:
                    b9:d7:b7:c6:db:4c:33:ca:f8:c9:07:88:45:bc:ea:
                    61:15:01:3e:69:79:62:9c:93:f7:eb:85:49:14:49:
                    10:70:bc:17:49:be:61:e5:0d:98:79:47:3e:fb:a4:
                    ac:12:db:16:f7:e8:e8:af:76:81:61:3d:01:6c:1d:
                    4c:0d:fd:7f:44:91:01:09:07:24:d9:7c:05:b7:15:
                    f3:3c:fa:45:74:ea:ef:40:d0:bf:37:75:61:da:26:
                    ec:09:e1:f5:14:a0:f3:b0:3e:6b:2e:df:7e:da:f4:
                    be:dd:74:d0:63:9b:96:36:33:c6:66:81:55:ec:ef:
                    bd:b4:f1:d2:a7:9c:d7:bc:55:36:d0:a7:fb:78:96:
                    5a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:0A:98:CA:34:26:04:82:B1:B1:78:0E:A3:21:0D:F4:85:AC:08:80
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/DQqYyjQmBIKxsXgOoyEN9IWsCIA.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.239.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:fd:7d:16:5d:72:0c:b9:9b:49:bb:09:4d:d8:72:97:56:51:
         08:8c:2d:84:8a:c0:cc:1f:19:97:a5:fa:cb:ad:ab:09:23:10:
         20:d5:6f:da:44:cb:d9:6e:c0:6f:6b:63:50:5c:95:56:8e:97:
         c8:eb:08:26:6c:94:4b:73:54:06:d3:56:fa:12:9d:ae:c9:bb:
         ef:2a:5f:fa:48:be:cf:a3:15:40:2a:4d:63:73:d7:19:55:5b:
         5f:38:60:60:70:7e:6f:59:fe:60:8a:11:b5:4f:21:0d:ef:22:
         dd:dd:38:ef:17:e6:d4:f3:ae:f0:1a:29:2f:43:c6:ef:49:1e:
         51:e5:7f:62:78:91:e4:77:df:0c:b8:83:b8:30:ee:a5:26:03:
         ea:4c:33:f6:72:8e:ef:21:31:38:5f:3f:68:5a:41:98:59:d9:
         ef:be:bc:52:f1:e3:50:25:4f:60:b4:f4:24:6c:eb:b5:1c:6c:
         40:48:6e:71:87:5c:43:cd:30:df:7e:d6:68:83:a3:36:ee:e2:
         64:4c:3c:ce:e9:99:2e:42:51:68:8e:95:d0:fd:8e:dd:9d:4a:
         3f:92:b9:a4:26:5a:28:8f:3e:f4:c5:b8:e2:e3:43:c4:58:24:
         5f:bf:da:82:88:01:cf:21:7d:8c:75:13:9a:3a:dc:73:82:89:
         84:c8:b8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:40:46 2024 by rpki-client on console-ams.rpki-client.org