Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.cer
File:                     F8sYQ7ykciQ1KIBWBwoGcVYHf_g.cer (raw, json)
Hash identifier:          nwKus1lB5aPQ3xpC1XCebsizsfsPlYLRLs6BLRMVhgs=
Subject key identifier:   17:CB:18:43:BC:A4:72:24:35:28:80:56:07:0A:06:71:56:07:7F:F8
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1438
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:26:54 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 169.255.9.0/24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 30 Mar 2024 00:16:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5176 (0x1438)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:26:54 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36EC460AR/serialNumber=17CB1843BCA4722435288056070A067156077FF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:eb:41:a0:85:49:86:2e:d8:09:a4:a7:35:a9:
                    34:c5:a7:8e:53:5c:55:c5:f7:14:49:7b:a8:8a:c7:
                    8a:9f:b2:da:97:29:28:54:c9:d8:65:d1:47:9f:96:
                    41:9c:ae:27:a0:e0:bc:35:c7:d0:52:51:83:68:e1:
                    57:85:cb:7f:fb:bd:dc:2c:0d:7e:4b:ca:2a:f4:ea:
                    8a:e2:5e:92:74:74:cd:d4:51:57:44:a7:8d:c9:12:
                    04:f7:5f:3e:2d:d0:8e:bb:d3:f5:c4:9a:46:10:3d:
                    ed:07:cc:c6:c4:aa:9f:f1:df:44:fd:bd:a6:96:da:
                    fc:79:2f:12:a3:d4:46:d3:cf:30:ad:6c:e3:e9:3b:
                    66:56:25:fb:2a:68:40:5b:27:63:05:ce:84:1d:52:
                    35:e3:b9:4c:5a:0e:b0:a2:d1:4f:72:7f:28:b4:32:
                    ce:58:1f:fc:15:60:f4:ee:19:bb:19:f2:24:74:14:
                    85:b3:29:a2:dc:2b:c3:53:18:86:f9:f9:b0:bf:ac:
                    1c:8c:05:f5:9b:88:b4:9b:30:08:04:7b:ad:16:3b:
                    b0:37:3b:fc:17:d9:47:4a:ac:b7:33:86:91:c6:f7:
                    39:d1:11:82:0d:73:d9:32:b5:27:9b:ba:c8:58:d1:
                    72:f4:49:17:37:38:6d:93:c2:d3:d5:b0:b1:02:b5:
                    19:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:CB:18:43:BC:A4:72:24:35:28:80:56:07:0A:06:71:56:07:7F:F8
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.255.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:77:a4:dc:76:a9:ac:c1:e5:22:70:9c:4e:cd:3a:5a:d3:94:
         82:e9:cb:bf:c6:34:58:a0:2a:e2:c9:f8:3c:7e:85:db:c5:61:
         5e:0a:0a:45:29:cf:0d:45:91:aa:b4:da:75:8b:54:aa:81:d5:
         76:45:d9:82:9b:ef:c8:14:fd:42:be:56:74:49:bb:e4:28:4f:
         1c:b2:0e:64:be:f7:29:60:f7:4e:4b:cc:df:78:0e:3d:2b:ec:
         a6:0b:87:c0:cc:b4:90:72:09:7e:1c:6c:52:3b:8a:f2:a9:b0:
         31:bb:71:fe:a6:75:9d:99:cb:ee:dc:d4:ce:3f:e4:c9:b2:0d:
         97:0b:d2:a7:d2:1a:5a:fe:af:89:4d:d3:85:3d:f6:d3:de:78:
         a1:02:e4:51:31:10:84:b1:c0:be:db:2d:e2:20:f5:a8:9b:dc:
         ba:59:ff:d6:e7:99:18:f4:ad:f3:d6:d3:33:ed:39:20:c6:0d:
         6d:72:6c:2d:18:d3:e6:8f:1e:5c:18:3b:17:3f:ea:99:4a:18:
         d9:ef:b7:ec:6d:ae:2d:8a:ba:db:6c:d5:c4:e9:0c:95:d4:a2:
         68:82:d8:10:63:0b:a1:ef:e6:b4:4c:c0:44:20:18:69:7d:d0:
         c0:61:04:99:99:cf:54:ae:89:96:4b:46:d9:46:94:cc:c2:c8:
         a8:f1:3c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 01:01:40 2024 by rpki-client on console-fra.rpki-client.org