Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/GoGF_PY9B5sgajSouZSHpZ2Bjl0.cer
File:                     GoGF_PY9B5sgajSouZSHpZ2Bjl0.cer (raw, json)
Hash identifier:          ONqKTEM4D8Bw4Urbytdg5E1fBX2QC5sxfbd2gsFKeaE=
Subject key identifier:   1A:81:85:FC:F6:3D:07:9B:20:6A:34:A8:B9:94:87:A5:9D:81:8E:5D
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1599
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/GoGF_PY9B5sgajSouZSHpZ2Bjl0.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 12 Sep 2024 08:48:19 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 155.93.128.0/17

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Oct 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5529 (0x1599)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Sep 12 08:48:19 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36FC6C8AR/serialNumber=1A8185FCF63D079B206A34A8B99487A59D818E5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ec:5f:0b:c5:50:27:b8:59:8b:b3:59:67:e7:
                    aa:1a:b3:7e:3b:7f:7b:41:c4:89:14:7b:82:c1:0a:
                    3c:76:53:87:dd:f3:8f:61:bf:05:3c:b2:ab:27:49:
                    03:ef:ba:6b:b2:3a:18:cf:d3:de:e5:53:25:8b:39:
                    aa:23:54:7a:81:06:7e:04:6e:51:99:55:7f:23:42:
                    70:e5:72:da:0e:fa:25:86:36:5a:eb:95:8b:af:76:
                    22:c2:8a:3a:1e:a6:67:fb:29:76:73:b4:fd:b2:8f:
                    46:74:38:b4:14:dd:06:da:85:d8:43:18:67:36:43:
                    0b:d4:9b:46:9e:dd:11:dc:0f:fa:30:ff:d2:0d:d2:
                    bf:84:d2:fb:bf:f6:a4:7c:eb:4a:03:e2:df:77:ad:
                    29:77:6a:09:5b:0e:dd:36:d3:f4:d7:6a:84:ea:c6:
                    ff:51:7c:65:b1:e7:46:b1:88:b4:74:09:48:c4:78:
                    c0:95:d0:a4:54:fa:f0:6d:27:a0:32:ad:68:64:79:
                    2e:1f:37:fb:7f:27:29:a5:ec:75:21:c8:2e:ae:a0:
                    c5:a5:1c:c4:ca:2c:5c:55:28:78:02:5a:58:0d:9c:
                    70:26:36:af:8d:bb:e8:cb:d8:b0:cb:68:39:c6:47:
                    f4:0d:0b:47:41:45:dd:6a:f8:b5:79:8a:5d:cc:54:
                    d6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:81:85:FC:F6:3D:07:9B:20:6A:34:A8:B9:94:87:A5:9D:81:8E:5D
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/GoGF_PY9B5sgajSouZSHpZ2Bjl0.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.93.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         14:8e:a2:7d:39:8e:eb:52:db:10:21:13:58:4d:86:e0:29:db:
         f5:15:af:68:e6:02:25:dd:53:cf:07:89:26:7f:78:e1:9d:dc:
         b4:36:50:e1:f4:11:b5:c3:2b:71:5f:d7:ff:a9:db:61:85:27:
         2f:11:45:1c:5b:71:c2:10:80:99:dd:c0:89:87:84:7f:2e:6d:
         14:50:4f:98:04:99:6a:e1:28:51:37:bd:4e:2c:8e:8d:3e:78:
         ae:ca:96:ba:29:a6:2e:cf:97:fb:93:1f:c3:34:3c:ba:52:f7:
         bd:10:2d:59:6b:4b:ce:53:52:36:39:a0:6e:25:6f:24:42:85:
         7b:2b:87:82:27:91:3b:44:69:07:75:ed:52:ae:cb:32:fe:2b:
         41:e7:6c:a8:d3:33:40:d5:63:6e:07:af:4b:1c:3c:d0:81:1f:
         6a:b4:ed:5f:34:9f:4f:36:fe:4d:17:51:3c:b3:65:3f:6e:9b:
         ed:cc:f5:ea:73:bd:fe:fb:17:1c:c3:b5:6c:ca:62:09:e2:f7:
         ee:61:22:51:88:73:3e:5a:95:50:38:d1:63:6b:09:2f:66:10:
         ce:d5:6b:3e:4a:f5:39:7b:95:e9:10:9f:47:2e:f3:32:f2:ee:
         00:66:c6:4e:0a:f3:7f:b6:4c:8c:47:7e:6f:23:ea:d0:22:f4:
         44:25:78:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----