Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/FT3AEVEg4kCgSqua4E-tZHkmsSQ.cer
File:                     FT3AEVEg4kCgSqua4E-tZHkmsSQ.cer (raw, json)
Hash identifier:          +5xbIHUa5HMyMSdml8gnl8Pl7AVU5GJGGjyLkffYqC0=
Subject key identifier:   15:3D:C0:11:51:20:E2:40:A0:4A:AB:9A:E0:4F:AD:64:79:26:B1:24
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       13BB
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367F26D/5003E4B270B911E9996C873FF8AEA228/FT3AEVEg4kCgSqua4E-tZHkmsSQ.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367F26D/5003E4B270B911E9996C873FF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:55:15 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 160.226.144.0/20

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Apr 2024 00:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5051 (0x13bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:55:15 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F367F26DAR/serialNumber=153DC0115120E240A04AAB9AE04FAD647926B124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:63:9f:0a:8d:14:52:b9:26:c4:5b:39:de:22:
                    35:63:5a:e8:06:7b:3c:cd:e5:41:4f:ac:fe:6e:33:
                    1d:55:76:2f:aa:ec:01:df:07:6d:84:4d:25:aa:08:
                    52:28:e5:e5:07:5b:91:b8:73:81:5b:cb:0c:50:25:
                    ad:94:86:0f:c0:52:bb:15:14:e9:29:60:7f:e7:45:
                    54:5a:6d:1a:06:cb:ec:6f:40:a5:a6:15:fa:49:05:
                    ea:ce:2d:08:95:22:ef:9d:b5:85:0d:f0:c5:a9:dc:
                    ad:8f:14:ee:d1:36:3e:1c:d8:d4:d8:88:92:cc:19:
                    f4:8c:f6:d2:cf:51:8f:1f:7d:bc:3e:5d:d9:18:78:
                    1f:35:9b:e7:0d:ed:f6:40:fd:4a:90:b7:09:3b:11:
                    e6:c9:60:a0:cd:a8:3f:cb:a4:c7:6b:ee:6e:3b:75:
                    cd:27:c4:b1:0a:11:87:2f:20:bc:39:a8:73:b6:0c:
                    06:eb:08:6e:03:f0:24:3c:ee:d2:9a:4d:fe:13:4b:
                    36:92:fe:68:af:a1:8c:ef:6f:54:5c:99:8d:29:98:
                    bf:10:d0:f3:c1:bb:85:71:21:6f:35:1f:8a:fd:22:
                    bd:fb:4b:d0:7e:5e:42:49:f8:7e:b7:ee:1e:a9:dc:
                    af:1f:e5:45:3b:cd:a2:7c:87:14:62:af:b3:1a:b7:
                    bd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3D:C0:11:51:20:E2:40:A0:4A:AB:9A:E0:4F:AD:64:79:26:B1:24
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/5003E4B270B911E9996C873FF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/5003E4B270B911E9996C873FF8AEA228/FT3AEVEg4kCgSqua4E-tZHkmsSQ.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.226.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:a3:94:39:0f:72:b3:3f:b8:d1:b6:e6:d9:d8:78:fd:5e:aa:
         44:55:7f:8d:6d:e9:7f:8a:58:12:c6:c1:6d:8d:d3:d1:0c:cc:
         9c:32:11:bc:98:a1:0a:10:f4:e6:25:ea:50:95:d8:f2:e7:49:
         b1:b0:49:67:09:d5:26:dd:18:33:75:de:d9:cc:56:6b:6f:77:
         41:b6:c6:bd:47:b1:a4:1b:a4:a9:69:a5:80:24:60:7a:2e:75:
         f7:4d:b2:63:7d:78:13:c4:ca:c4:70:e1:bc:25:e0:1f:60:11:
         36:b2:0d:e9:e4:a8:77:47:bd:31:97:af:be:5d:ff:c8:8d:b8:
         0b:d5:a0:be:e7:9c:79:b4:6e:e3:ff:63:b7:cd:14:c0:75:f5:
         be:ed:09:52:c2:22:45:a0:73:74:28:21:a0:54:c2:7b:1f:3a:
         74:c5:8c:1a:61:bb:09:8d:a8:54:68:83:27:e3:cf:2d:6f:9d:
         0b:44:d8:03:12:bd:a7:5a:8f:ff:d6:5b:68:6b:5c:01:f8:30:
         ef:a3:f8:77:75:d6:04:a9:91:4e:40:e0:7a:6c:25:8e:b0:13:
         a5:49:3b:90:3f:a7:45:b8:16:db:6f:75:1c:ba:2a:f4:85:b5:
         3b:9f:b3:4f:91:2c:55:93:d5:9a:f4:f7:45:64:d4:93:eb:50:
         05:21:6c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:52:27 2024 by rpki-client on console-ams.rpki-client.org