Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/FT3AEVEg4kCgSqua4E-tZHkmsSQ.cer
File:                     FT3AEVEg4kCgSqua4E-tZHkmsSQ.cer (raw, json)
Hash identifier:          eGWdNd60JM21F15n1r2PY3tDieG2rl2EJCpLFLVzjGc=
Subject key identifier:   15:3D:C0:11:51:20:E2:40:A0:4A:AB:9A:E0:4F:AD:64:79:26:B1:24
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       16D5
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367F26D/5003E4B270B911E9996C873FF8AEA228/FT3AEVEg4kCgSqua4E-tZHkmsSQ.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367F26D/5003E4B270B911E9996C873FF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:02:26 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 160.226.144.0/20
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 08 Apr 2025 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5845 (0x16d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC
        Validity
            Not Before: Jan  1 01:02:26 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F367F26DAR
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:63:9f:0a:8d:14:52:b9:26:c4:5b:39:de:22:
                    35:63:5a:e8:06:7b:3c:cd:e5:41:4f:ac:fe:6e:33:
                    1d:55:76:2f:aa:ec:01:df:07:6d:84:4d:25:aa:08:
                    52:28:e5:e5:07:5b:91:b8:73:81:5b:cb:0c:50:25:
                    ad:94:86:0f:c0:52:bb:15:14:e9:29:60:7f:e7:45:
                    54:5a:6d:1a:06:cb:ec:6f:40:a5:a6:15:fa:49:05:
                    ea:ce:2d:08:95:22:ef:9d:b5:85:0d:f0:c5:a9:dc:
                    ad:8f:14:ee:d1:36:3e:1c:d8:d4:d8:88:92:cc:19:
                    f4:8c:f6:d2:cf:51:8f:1f:7d:bc:3e:5d:d9:18:78:
                    1f:35:9b:e7:0d:ed:f6:40:fd:4a:90:b7:09:3b:11:
                    e6:c9:60:a0:cd:a8:3f:cb:a4:c7:6b:ee:6e:3b:75:
                    cd:27:c4:b1:0a:11:87:2f:20:bc:39:a8:73:b6:0c:
                    06:eb:08:6e:03:f0:24:3c:ee:d2:9a:4d:fe:13:4b:
                    36:92:fe:68:af:a1:8c:ef:6f:54:5c:99:8d:29:98:
                    bf:10:d0:f3:c1:bb:85:71:21:6f:35:1f:8a:fd:22:
                    bd:fb:4b:d0:7e:5e:42:49:f8:7e:b7:ee:1e:a9:dc:
                    af:1f:e5:45:3b:cd:a2:7c:87:14:62:af:b3:1a:b7:
                    bd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3D:C0:11:51:20:E2:40:A0:4A:AB:9A:E0:4F:AD:64:79:26:B1:24
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/5003E4B270B911E9996C873FF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/5003E4B270B911E9996C873FF8AEA228/FT3AEVEg4kCgSqua4E-tZHkmsSQ.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.226.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         95:55:93:1d:f5:1b:34:93:8b:83:3e:7e:81:d2:75:3d:21:87:
         4b:bd:90:72:36:de:cc:96:f8:6e:c1:24:d3:c6:26:62:4d:1c:
         6a:34:42:b2:03:66:94:e2:24:ac:f3:3a:90:31:c9:c0:ed:18:
         12:b6:60:9f:76:2b:68:29:6b:28:f5:29:d3:10:53:a1:2c:67:
         d7:d3:1b:f2:a2:af:21:58:98:59:66:5e:ff:d9:1c:73:a4:e1:
         32:a8:69:60:ba:8f:f2:ea:f1:97:07:89:70:5f:3a:6d:9d:b6:
         8c:ba:16:ed:14:4b:41:12:4b:20:a2:08:04:e3:97:7a:37:cc:
         ae:64:22:74:c3:38:43:d4:ec:4e:96:91:bc:5f:ae:28:f7:5f:
         93:d9:79:c7:79:44:50:ef:63:aa:38:f0:28:cb:fa:4b:0b:52:
         0b:34:95:9e:3e:69:f8:4c:d5:c5:33:a6:29:54:de:23:8d:91:
         93:cf:96:18:0e:32:66:e9:84:8c:8c:2d:f5:9e:f4:6c:85:31:
         50:49:57:ec:94:fb:6d:d6:76:b2:8a:97:c1:4f:d9:f5:37:f7:
         1d:cb:ee:d9:14:a7:d5:af:07:6b:09:6b:df:06:1e:12:50:0a:
         22:b3:33:0b:89:33:11:9c:c3:8f:37:09:28:81:3f:57:a1:ce:
         1d:df:00:7f
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICFtUwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNTAxMDEwMTAyMjZaFw0yNjAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNjdGMjZEQVIxMTAvBgNVBAUTKDE1M0RDMDExNTEyMEUyNDBB
MDRBQUI5QUUwNEZBRDY0NzkyNkIxMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQC7Y58KjRRSuSbEWzneIjVjWugGezzN5UFPrP5uMx1Vdi+q7AHfB22E
TSWqCFIo5eUHW5G4c4FbywxQJa2Uhg/AUrsVFOkpYH/nRVRabRoGy+xvQKWmFfpJ
BerOLQiVIu+dtYUN8MWp3K2PFO7RNj4c2NTYiJLMGfSM9tLPUY8ffbw+XdkYeB81
m+cN7fZA/UqQtwk7EebJYKDNqD/LpMdr7m47dc0nxLEKEYcvILw5qHO2DAbrCG4D
8CQ87tKaTf4TSzaS/mivoYzvb1RcmY0pmL8Q0PPBu4VxIW81H4r9Ir37S9B+XkJJ
+H637h6p3K8f5UU7zaJ8hxRir7Mat72JAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
FT3AEVEg4kCgSqua4E+tZHkmsSQwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjdGMjZELzUwMDNF
NEIyNzBCOTExRTk5OTZDODczRkY4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzY3RjI2RC81MDAzRTRCMjcwQjkxMUU5OTk2Qzg3M0ZGOEFFQTIy
OC9GVDNBRVZFZzRrQ2dTcXVhNEUtdFpIa21zU1EubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQEoOKQMA0GCSqGSIb3DQEBCwUAA4IBAQCVVZMd9Rs0k4uD
Pn6B0nU9IYdLvZByNt7MlvhuwSTTxiZiTRxqNEKyA2aU4iSs8zqQMcnA7RgStmCf
ditoKWso9SnTEFOhLGfX0xvyoq8hWJhZZl7/2RxzpOEyqGlguo/y6vGXB4lwXzpt
nbaMuhbtFEtBEksgoggE45d6N8yuZCJ0wzhD1OxOlpG8X64o91+T2XnHeURQ72Oq
OPAoy/pLC1ILNJWePmn4TNXFM6YpVN4jjZGTz5YYDjJm6YSMjC31nvRshTFQSVfs
lPtt1nayipfBT9n1N/cdy+7ZFKfVrwdrCWvfBh4SUAoiszMLiTMRnMOPNwkogT9X
oc4d3wB/
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:54:07 2025 by rpki-client