Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/GS9iV_wr5XP3WbXyvfg9aar_ouc.cer
File:                     GS9iV_wr5XP3WbXyvfg9aar_ouc.cer (raw, json)
Hash identifier:          WWZeubvh/ZHJVxFWVQpGJ4zgk6T/bIfaMdcjDAF10mw=
Subject key identifier:   19:2F:62:57:FC:2B:E5:73:F7:59:B5:F2:BD:F8:3D:69:AA:FF:A2:E7
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       131F
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:16:59 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 160.119.192.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 07 May 2024 00:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4895 (0x131f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:16:59 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3615A48AR/serialNumber=192F6257FC2BE573F759B5F2BDF83D69AAFFA2E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5a:b5:5d:ee:b8:a9:fa:a8:51:9f:cb:f8:ee:
                    0f:dd:b0:2b:a4:ba:ca:d5:d9:6d:6e:15:d3:cf:a7:
                    17:fc:61:be:27:24:f2:64:d6:79:59:83:17:bb:c1:
                    a2:e4:5d:74:d3:25:0d:13:32:7d:83:1c:9c:d6:e4:
                    32:e7:71:1c:1b:6b:b6:a3:c0:e4:d4:34:99:2d:b0:
                    81:44:e8:5e:88:66:c8:e7:9a:e9:a5:6c:61:34:92:
                    87:9b:fd:fa:e5:fe:fc:36:fe:8a:b0:95:a8:ef:92:
                    fd:81:ce:13:f9:59:ef:8a:36:29:a0:92:6e:90:36:
                    92:6c:6d:98:59:76:f7:3f:93:2b:cf:86:a8:e0:0c:
                    30:6d:c7:89:ce:e9:3c:5d:7a:7f:6e:fb:72:f8:73:
                    4d:7e:87:8a:51:67:e2:24:ae:30:7e:d6:71:79:e0:
                    b4:4d:8c:23:54:65:87:f6:0a:71:57:06:8c:1d:16:
                    d2:12:cc:cb:c6:4b:c2:0d:f1:ce:0f:ad:79:ab:69:
                    e2:2a:72:db:9d:7b:05:56:93:8d:4a:77:6c:3c:0a:
                    14:c7:2b:50:5d:1a:52:f4:20:d8:1f:eb:d4:44:88:
                    63:3d:1b:90:73:73:4f:aa:27:ac:85:63:80:59:f0:
                    9c:33:22:b2:e3:d1:eb:07:a3:da:30:c3:97:94:42:
                    de:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2F:62:57:FC:2B:E5:73:F7:59:B5:F2:BD:F8:3D:69:AA:FF:A2:E7
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.119.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:c3:ee:ef:ba:6f:b8:05:04:27:e6:56:45:bd:3a:4d:62:3d:
         19:c0:6e:fa:c8:a7:d7:72:6e:5e:92:55:8a:2f:1e:22:eb:33:
         52:c8:fc:fd:4e:f7:6a:32:e4:03:b7:87:33:cb:be:50:24:0b:
         2b:03:3a:d7:bb:b0:47:d7:1a:9e:32:c3:e6:84:64:47:72:33:
         df:cc:58:0a:46:a4:c3:28:b1:88:f7:1e:54:f3:1c:b2:d5:d3:
         ae:53:a6:ae:bf:57:85:92:93:eb:a8:3d:e0:9f:70:e3:46:6b:
         24:f3:18:58:f8:e9:45:0b:05:af:57:c8:97:b4:40:32:48:c3:
         e3:16:fe:01:a2:84:d2:e2:ce:97:c9:f1:76:a8:41:2a:5f:9a:
         0c:90:16:2d:9e:fb:17:b9:6b:64:21:74:f9:18:95:3d:03:f2:
         a2:47:16:7c:e0:7d:e7:bd:d8:9c:c2:42:52:b0:57:18:fe:33:
         88:98:a8:37:d6:74:f8:41:69:57:f8:23:31:ff:f0:23:80:bc:
         44:62:f9:4e:1f:91:2e:38:5a:be:e1:b3:ef:21:3c:16:be:09:
         1f:2e:a6:ac:a7:53:50:c5:a4:35:2e:84:c4:22:1a:75:f3:7a:
         73:68:6e:14:df:a8:a3:ab:63:cd:07:c6:19:fe:82:43:48:9c:
         2b:f4:36:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:22:15 2024 by rpki-client on console-fra.rpki-client.org