Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer
File:                     GDcf6QPvCG9cH_b2hAumd2cmdnA.cer (raw, json)
Hash identifier:          v5yAGg7kxyoR6dwGIV5f0lMUeQB0PTrBell/kXHyZX8=
Subject key identifier:   18:37:1F:E9:03:EF:08:6F:5C:1F:F6:F6:84:0B:A6:77:67:26:76:70
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       145D
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:35:13 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 168.253.80.0/20

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 00:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5213 (0x145d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 02:35:13 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3655EE4AR/serialNumber=18371FE903EF086F5C1FF6F6840BA67767267670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:47:e0:b8:60:ab:89:ae:fc:f4:0d:0f:ef:fc:
                    29:ed:c0:31:89:a2:94:c0:bc:1b:d2:39:39:13:33:
                    30:c7:33:d1:2b:3e:cb:50:1d:e9:a7:4b:46:50:b2:
                    34:c0:e7:00:66:ed:16:8e:68:cb:1d:02:07:82:b4:
                    5f:30:b3:6b:95:37:4b:6b:98:b6:fe:71:13:2a:c9:
                    ec:b9:bb:35:f0:5e:08:39:0d:26:c2:24:53:a8:99:
                    65:65:b5:0a:41:85:9e:4a:b7:60:39:f6:eb:e1:d3:
                    9f:31:9d:e5:22:60:fe:86:f4:81:2d:88:75:7c:f3:
                    73:eb:ff:1c:dd:17:73:fa:1a:54:d8:c3:37:9f:36:
                    40:ea:92:1c:21:c7:4c:69:2d:1e:71:08:bd:18:b9:
                    18:f8:15:d7:cb:f0:8b:dd:f0:b8:21:dd:13:fa:58:
                    60:0c:e0:c9:a2:f8:8e:45:ef:ad:cf:59:49:5e:3e:
                    da:43:7b:3f:ac:fb:53:f9:ce:83:03:97:5b:0d:e4:
                    ef:f6:2c:0b:5d:a7:a1:9b:97:38:8e:40:18:da:b5:
                    a0:97:ea:6a:56:8f:66:95:e7:4c:d3:d2:f4:50:60:
                    85:52:ce:8c:57:6c:ee:28:a1:20:c8:9d:02:bc:10:
                    17:3d:24:fc:46:3f:29:5d:f5:0b:ee:fd:2e:b9:ef:
                    1f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:37:1F:E9:03:EF:08:6F:5C:1F:F6:F6:84:0B:A6:77:67:26:76:70
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.253.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9e:52:bc:e5:ae:6b:52:8d:7e:06:1c:da:a9:73:ad:22:86:70:
         90:78:d6:b8:aa:90:d1:8b:e2:7e:35:77:bd:ba:cd:e5:f6:a0:
         c3:2a:cf:69:df:84:82:61:60:90:3a:04:40:7b:a0:08:6e:68:
         e6:15:00:2a:31:4a:85:49:97:3e:6c:f7:79:45:9a:d6:54:ff:
         6a:73:66:c0:3e:b8:c9:82:82:2b:45:5f:30:3c:b2:ae:95:78:
         0b:1b:18:74:08:0d:79:07:2b:31:f2:c4:dd:79:0d:2b:3e:b5:
         8f:aa:5c:36:fc:49:e1:04:fe:75:12:ab:cf:3a:66:4d:04:15:
         ed:b9:7b:26:4d:d0:60:9f:ba:05:07:f7:5f:f5:f3:73:0d:f3:
         de:eb:0f:8a:e0:82:3a:74:d4:52:40:1d:c4:fa:0d:a7:bd:d0:
         51:31:b3:63:e2:64:3c:40:e0:55:25:3f:19:5a:ab:d6:56:e5:
         d7:06:6e:d5:5f:e1:83:64:be:af:bb:80:69:12:df:55:74:d3:
         73:e9:44:b0:2d:31:e0:6a:55:fe:fa:01:12:b2:2d:03:d2:67:
         05:37:06:b4:77:91:75:6f:07:c5:b9:04:cb:d4:27:a6:72:a1:
         88:24:b4:cb:3b:27:b0:64:ea:dd:64:0e:01:38:84:3b:a3:cb:
         95:7c:c9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:00:21 2024 by rpki-client on console-ams.rpki-client.org