Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer
File:                     GDcf6QPvCG9cH_b2hAumd2cmdnA.cer (raw, json)
Hash identifier:          d06zuB1pT3xGwDOfEtHx0EJ31iABgRxDOH2bmNVxGzE=
Subject key identifier:   18:37:1F:E9:03:EF:08:6F:5C:1F:F6:F6:84:0B:A6:77:67:26:76:70
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1680
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 00:45:52 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 168.253.80.0/20
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 11 Apr 2025 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5760 (0x1680)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC
        Validity
            Not Before: Jan  1 00:45:52 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F3655EE4AR
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:47:e0:b8:60:ab:89:ae:fc:f4:0d:0f:ef:fc:
                    29:ed:c0:31:89:a2:94:c0:bc:1b:d2:39:39:13:33:
                    30:c7:33:d1:2b:3e:cb:50:1d:e9:a7:4b:46:50:b2:
                    34:c0:e7:00:66:ed:16:8e:68:cb:1d:02:07:82:b4:
                    5f:30:b3:6b:95:37:4b:6b:98:b6:fe:71:13:2a:c9:
                    ec:b9:bb:35:f0:5e:08:39:0d:26:c2:24:53:a8:99:
                    65:65:b5:0a:41:85:9e:4a:b7:60:39:f6:eb:e1:d3:
                    9f:31:9d:e5:22:60:fe:86:f4:81:2d:88:75:7c:f3:
                    73:eb:ff:1c:dd:17:73:fa:1a:54:d8:c3:37:9f:36:
                    40:ea:92:1c:21:c7:4c:69:2d:1e:71:08:bd:18:b9:
                    18:f8:15:d7:cb:f0:8b:dd:f0:b8:21:dd:13:fa:58:
                    60:0c:e0:c9:a2:f8:8e:45:ef:ad:cf:59:49:5e:3e:
                    da:43:7b:3f:ac:fb:53:f9:ce:83:03:97:5b:0d:e4:
                    ef:f6:2c:0b:5d:a7:a1:9b:97:38:8e:40:18:da:b5:
                    a0:97:ea:6a:56:8f:66:95:e7:4c:d3:d2:f4:50:60:
                    85:52:ce:8c:57:6c:ee:28:a1:20:c8:9d:02:bc:10:
                    17:3d:24:fc:46:3f:29:5d:f5:0b:ee:fd:2e:b9:ef:
                    1f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:37:1F:E9:03:EF:08:6F:5C:1F:F6:F6:84:0B:A6:77:67:26:76:70
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.253.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         55:16:b8:d6:16:0b:c6:20:bf:4f:3b:5f:35:a0:b8:52:34:5a:
         11:e2:fa:03:70:8b:99:d2:93:a1:02:3b:ee:a3:4b:c8:3d:03:
         e6:fc:a7:63:e5:17:6c:e5:00:22:fb:9e:61:30:ce:16:23:57:
         28:f5:47:ae:6c:fc:8c:12:29:76:f7:bd:7a:c8:06:85:c5:9c:
         e3:3a:62:6d:9c:ee:f4:3f:45:bb:5d:54:6e:9c:0a:47:98:7e:
         8a:e5:8b:36:44:4f:c1:6f:08:a3:0f:da:3f:f4:f5:e0:65:e9:
         67:33:58:c0:ff:ae:00:11:69:59:0f:5f:96:47:bf:20:a6:8c:
         50:64:f6:98:47:4f:39:74:dd:70:7a:f2:bf:72:90:99:5b:cd:
         ad:ff:7e:f9:e0:2b:9e:5e:c4:f4:9f:45:2b:92:73:e0:62:a5:
         b2:64:02:ae:83:eb:24:44:96:65:41:bf:3f:bf:51:f1:84:e0:
         1d:87:b3:84:5c:e6:6c:76:a3:b5:8f:ef:e2:af:ec:5e:c4:46:
         a0:84:c5:2f:c4:b3:5e:f1:6d:7c:b7:37:4f:3c:d8:d7:35:66:
         6b:c4:99:7c:4b:bb:f3:71:2c:87:f2:81:d6:79:fb:13:15:18:
         8c:d1:ef:c2:d6:fb:d2:b8:02:b5:79:1a:5a:36:15:74:01:a0:
         d2:29:94:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:35 2025 by rpki-client