Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/Gty1eCVKwMgZscFo71XAG7LCSpM.cer
File:                     Gty1eCVKwMgZscFo71XAG7LCSpM.cer (raw, json)
Hash identifier:          pd2Kof0xMysqE0VG0d11XWWIsgRBoI8Q11ecJHRzdD8=
Subject key identifier:   1A:DC:B5:78:25:4A:C0:C8:19:B1:C1:68:EF:55:C0:1B:B2:C2:4A:93
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1368
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F365062A/BA505688CD7211ED924A748FF1222468/Gty1eCVKwMgZscFo71XAG7LCSpM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F365062A/BA505688CD7211ED924A748FF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:34:56 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 146.196.128.0/17
                          IP: 155.251.0.0/16
                          IP: 160.182.0.0/15

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4968 (0x1368)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:34:56 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F365062AAR/serialNumber=1ADCB578254AC0C819B1C168EF55C01BB2C24A93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:41:6d:b8:f5:e5:50:0f:b4:10:e9:f7:2f:b9:
                    e6:3a:bb:e7:3f:dd:c1:35:7d:20:e1:3d:b8:d2:d2:
                    dd:eb:e9:35:f7:d8:ba:55:b7:90:29:6e:79:d2:3d:
                    8e:04:2b:86:48:6b:ff:a8:cd:b4:a8:d5:95:05:75:
                    93:d3:f7:79:17:de:5f:fa:1f:63:80:5d:4f:f5:c0:
                    98:d5:ec:d0:46:96:db:63:fe:d6:33:45:7f:41:28:
                    85:65:fa:43:85:9d:fe:88:d6:88:40:87:69:91:57:
                    fb:70:03:ee:5c:a3:27:14:1f:5b:e9:06:e9:3a:d0:
                    15:5d:8e:8d:3d:55:4d:e9:2c:b5:31:f5:81:4c:da:
                    d7:1f:52:5e:90:f4:c1:46:dc:68:b6:16:1f:36:3b:
                    28:77:8b:d9:c0:7d:51:bf:1e:f1:c2:ed:33:b4:c1:
                    28:23:b0:70:d7:c4:02:fa:9f:a3:5c:60:e1:09:0c:
                    dc:f4:18:71:44:d0:f0:06:29:a7:74:26:d9:70:a3:
                    2a:f8:39:b9:2d:59:2a:b6:09:67:54:53:86:a9:fe:
                    a9:18:53:93:86:34:86:ba:37:1f:45:65:d3:1b:b5:
                    93:1c:64:7a:e2:f8:40:4f:52:1d:f1:89:a6:7c:d4:
                    40:7d:a2:88:c6:53:13:53:e2:62:84:8b:8c:2b:62:
                    e2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DC:B5:78:25:4A:C0:C8:19:B1:C1:68:EF:55:C0:1B:B2:C2:4A:93
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365062A/BA505688CD7211ED924A748FF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365062A/BA505688CD7211ED924A748FF1222468/Gty1eCVKwMgZscFo71XAG7LCSpM.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.196.128.0/17
                  155.251.0.0/16
                  160.182.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         7f:90:cd:a9:d1:6e:1d:dd:87:ce:58:22:bc:5d:d7:b6:70:0b:
         d9:75:d3:28:d1:31:8d:c1:c6:c6:bd:7f:d1:45:db:dd:96:ea:
         43:dd:d3:57:58:9b:23:a5:28:a2:64:9c:c6:9f:f8:79:5a:ef:
         3d:1e:d3:97:fd:94:83:15:c3:9c:ad:d7:44:c2:ae:d4:16:17:
         b5:cb:37:46:36:23:e4:3c:49:5d:a0:df:d8:41:d7:ba:eb:cd:
         e9:31:9a:bc:dd:7d:a4:54:c8:1f:d2:79:bf:f0:87:3e:b0:69:
         53:95:3a:62:cc:cb:16:a5:c0:51:19:d0:5e:91:db:17:3b:74:
         a7:7a:56:e9:90:5f:a8:32:2c:5a:9f:22:cc:5e:f5:29:18:16:
         ff:b9:09:4a:81:81:e8:09:36:41:f3:e0:91:26:d8:28:f1:ef:
         65:82:84:7c:10:9d:a4:11:af:18:c9:bb:51:18:b0:dc:c8:bd:
         d7:3e:ad:9c:f1:e1:5d:9b:68:4e:56:d9:ec:a0:08:91:c8:a2:
         83:fc:02:87:68:4e:0e:77:22:cb:16:78:81:e9:fd:bd:93:10:
         f5:ed:bf:b4:ac:aa:b6:10:a7:8c:b3:63:48:1b:17:cf:2b:74:
         dd:94:06:5d:8c:db:0a:0e:02:25:42:c5:1f:b0:97:a2:29:3c:
         f0:a8:7d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:51 2024 by rpki-client on console-fra.rpki-client.org