Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/H_M-JaMrRpH3I_hQENNsHRmtJhM.cer
File:                     H_M-JaMrRpH3I_hQENNsHRmtJhM.cer (raw, json)
Hash identifier:          FtPLJXitIaO4RwwGPmLP2Q+NNTAaD/Xxdadg5G8zzx0=
Subject key identifier:   1F:F3:3E:25:A3:2B:46:91:F7:23:F8:50:10:D3:6C:1D:19:AD:26:13
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1748
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/H_M-JaMrRpH3I_hQENNsHRmtJhM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:24:26 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 45.220.0.0/19
                          IP: 169.255.196.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 14 Apr 2025 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5960 (0x1748)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC
        Validity
            Not Before: Jan  1 01:24:26 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36C65C6AR
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:30:45:fc:a8:12:28:18:5d:2f:86:e1:81:ff:
                    df:35:7c:30:3c:b6:82:be:90:c3:c4:20:f2:73:cf:
                    db:ff:fb:11:dd:fc:2a:c4:43:0f:f7:aa:07:11:a2:
                    94:47:ca:75:8e:ce:05:79:28:ac:b4:ec:94:ec:38:
                    37:38:a7:55:20:5f:8c:b8:f1:02:4d:de:f9:6d:28:
                    a4:d3:6c:67:ca:41:b6:4d:51:67:20:39:74:be:d3:
                    e3:a2:18:c8:3e:79:44:7f:24:c0:1c:b0:7e:ad:cd:
                    92:1c:d1:5c:21:b5:37:70:15:e2:5c:a9:0d:ad:03:
                    29:88:26:82:bb:74:d6:93:b1:51:ab:46:b2:6c:98:
                    98:42:00:94:e8:8b:1c:4a:9a:c4:ec:5b:6b:51:ed:
                    a3:24:3d:73:7a:ff:a1:91:32:b1:8b:b0:49:9e:b7:
                    6f:4c:39:0e:b3:80:7e:16:41:6b:94:ac:c2:38:c9:
                    ce:de:42:7f:b8:68:5e:61:c9:96:a8:c8:9e:69:5a:
                    9d:d4:8e:b2:4f:57:3a:01:ad:8b:25:c2:e8:77:f8:
                    af:12:e1:23:7f:75:25:65:f7:dd:3b:62:4e:8a:2b:
                    3a:55:46:d4:b1:63:d7:7d:4e:d6:c0:77:7a:98:01:
                    71:16:a1:2c:77:ad:93:7c:45:70:97:39:4a:2b:bf:
                    b1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F3:3E:25:A3:2B:46:91:F7:23:F8:50:10:D3:6C:1D:19:AD:26:13
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/H_M-JaMrRpH3I_hQENNsHRmtJhM.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.220.0.0/19
                  169.255.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:39:96:b6:ca:fb:a8:77:e4:8f:5f:98:26:4d:99:20:37:0d:
         8c:85:8c:10:8a:16:ed:e3:99:6d:b6:9d:f1:0b:cc:54:9e:00:
         ed:60:22:90:99:a5:4a:27:2c:69:19:5a:9f:07:28:9f:3c:00:
         e5:20:70:20:7e:d1:e8:4d:1a:21:a4:c6:84:43:54:8c:0c:50:
         c8:f2:1c:92:d5:dd:6e:aa:15:90:06:90:2e:b7:34:db:53:52:
         f9:2e:d2:c8:88:dc:3b:25:30:7e:2b:ff:99:ab:f7:11:c0:83:
         61:61:0f:13:1b:f1:66:1f:70:43:9f:08:15:67:9a:44:27:0a:
         8b:47:fc:5b:46:f9:65:e2:40:b2:b7:04:89:cc:d7:7f:1b:b3:
         d2:bd:68:62:f2:08:8e:9e:e3:21:32:cc:6f:84:a6:bd:ec:71:
         2a:b9:86:6b:ad:8b:0b:b3:5e:57:ba:a8:f5:08:4a:97:1d:55:
         0c:39:0f:08:c0:99:d7:f9:9b:d9:3e:45:ef:e9:ac:c8:04:77:
         95:31:7f:ab:9d:7c:77:18:ea:7a:c9:d5:59:9c:2b:15:44:71:
         f2:4e:56:a4:85:58:bb:07:e3:5f:76:56:a9:4a:c5:2e:99:2e:
         25:74:e9:78:05:ce:bc:ab:ab:8e:7f:2a:f3:44:cf:68:6c:ca:
         4a:a2:07:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:32:15 2025 by rpki-client