Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/FYtqLCVMV_R84q9RE2jZtjz44NI.cer
File:                     FYtqLCVMV_R84q9RE2jZtjz44NI.cer (raw, json)
Hash identifier:          sn7jBq+lO4ydpdz54PA31avJ9aO/WLez44QwIhhpcAw=
Subject key identifier:   15:8B:6A:2C:25:4C:57:F4:7C:E2:AF:51:13:68:D9:B6:3C:F8:E0:D2
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       141C
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/FYtqLCVMV_R84q9RE2jZtjz44NI.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:19:44 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 160.119.32.0/19

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 28 Apr 2024 00:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5148 (0x141c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:19:44 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36C8371AR/serialNumber=158B6A2C254C57F47CE2AF511368D9B63CF8E0D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:63:04:d1:88:56:92:8f:72:be:31:06:cc:69:
                    b5:c0:15:8e:d1:f2:42:98:e3:3c:2c:6d:33:c2:f0:
                    71:bc:c8:bb:f7:c3:0b:17:56:a4:d2:8c:72:40:b2:
                    ec:87:66:f3:a3:aa:bb:b1:6d:70:19:36:62:32:f0:
                    fd:bf:54:5e:7a:e9:79:5b:47:07:06:0c:6a:14:3a:
                    f6:5f:eb:57:01:a3:a1:66:5b:21:0f:83:0f:a8:84:
                    6f:ac:8e:4c:1e:cb:82:cf:73:b1:ed:27:0b:87:0a:
                    85:d9:ea:1d:1f:85:7f:3f:6b:94:cb:f0:66:b0:b8:
                    f8:54:cd:bd:4b:08:56:27:4a:db:b2:67:71:b2:6c:
                    0e:0c:7c:85:47:ca:16:83:23:16:df:fb:46:82:e8:
                    1f:5b:8f:61:c6:3e:e8:63:3e:02:8e:11:37:6d:eb:
                    17:f7:9e:70:81:d8:a0:17:77:88:4e:22:ec:22:f3:
                    31:a9:46:d9:67:b7:73:69:00:2b:43:e0:f0:06:e3:
                    34:77:ec:d2:62:10:1e:c9:40:e0:cd:4e:56:a0:b4:
                    ce:a9:9b:ae:ed:8e:e6:82:8f:e8:80:a5:bd:17:59:
                    66:e4:b5:71:ee:f3:29:4d:5c:c0:8c:3c:b2:b3:a2:
                    65:3b:ca:ba:c8:f7:ce:de:30:3d:b4:ad:6a:e5:0d:
                    d3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8B:6A:2C:25:4C:57:F4:7C:E2:AF:51:13:68:D9:B6:3C:F8:E0:D2
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/FYtqLCVMV_R84q9RE2jZtjz44NI.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.119.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2b:ef:f1:0c:1b:8b:67:68:ba:44:5b:92:30:bb:6e:45:a6:c7:
         cf:aa:12:db:c9:ea:a1:6b:4d:97:af:ef:bc:1e:3b:c0:01:8a:
         52:55:30:b0:aa:92:bb:16:1b:00:e1:92:24:f4:96:46:ab:46:
         42:e9:a3:40:98:60:6e:bb:08:e3:c3:86:08:4a:dd:4a:e4:0c:
         e8:9a:f8:fe:ab:2e:47:26:e3:5e:5f:93:61:d5:dc:79:85:e9:
         80:16:ad:d8:8b:27:6f:6d:13:5a:b9:46:24:8c:de:69:fb:33:
         e4:b4:82:53:91:ac:a3:4f:ce:b6:f3:f1:49:94:44:ac:6f:43:
         29:91:70:fa:12:ff:c1:ca:65:f9:79:57:3f:cd:b3:d2:b2:86:
         47:09:69:d1:42:ee:d7:e4:d5:c7:04:c1:69:d0:71:75:17:9a:
         4e:74:b7:67:4d:7a:ce:2f:42:be:8a:4f:c9:21:e5:c2:16:eb:
         7e:4b:14:5f:2c:f4:0a:9b:43:f9:d2:38:10:6b:4b:74:e0:c4:
         16:6e:fc:56:f3:73:bf:c0:99:43:9f:7f:97:d2:3e:ce:35:e0:
         06:08:ae:53:f6:17:1a:f5:1d:18:e2:2b:2a:e8:e8:87:da:61:
         b6:8a:ff:dd:7f:fc:45:35:5f:46:14:91:70:d8:03:00:8c:c0:
         e8:82:e4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:12 2024 by rpki-client on console-ams.rpki-client.org