Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/H_M-JaMrRpH3I_hQENNsHRmtJhM.cer
File:                     H_M-JaMrRpH3I_hQENNsHRmtJhM.cer (raw, json)
Hash identifier:          lmotzIrmSNEDu5mPmu+uKuVIb95btdmMK8O0UxzSXOk=
Subject key identifier:   1F:F3:3E:25:A3:2B:46:91:F7:23:F8:50:10:D3:6C:1D:19:AD:26:13
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       141A
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/H_M-JaMrRpH3I_hQENNsHRmtJhM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:19:24 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 45.220.0.0/19
                          IP: 169.255.196.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 00:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5146 (0x141a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:19:24 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36C65C6AR/serialNumber=1FF33E25A32B4691F723F85010D36C1D19AD2613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:30:45:fc:a8:12:28:18:5d:2f:86:e1:81:ff:
                    df:35:7c:30:3c:b6:82:be:90:c3:c4:20:f2:73:cf:
                    db:ff:fb:11:dd:fc:2a:c4:43:0f:f7:aa:07:11:a2:
                    94:47:ca:75:8e:ce:05:79:28:ac:b4:ec:94:ec:38:
                    37:38:a7:55:20:5f:8c:b8:f1:02:4d:de:f9:6d:28:
                    a4:d3:6c:67:ca:41:b6:4d:51:67:20:39:74:be:d3:
                    e3:a2:18:c8:3e:79:44:7f:24:c0:1c:b0:7e:ad:cd:
                    92:1c:d1:5c:21:b5:37:70:15:e2:5c:a9:0d:ad:03:
                    29:88:26:82:bb:74:d6:93:b1:51:ab:46:b2:6c:98:
                    98:42:00:94:e8:8b:1c:4a:9a:c4:ec:5b:6b:51:ed:
                    a3:24:3d:73:7a:ff:a1:91:32:b1:8b:b0:49:9e:b7:
                    6f:4c:39:0e:b3:80:7e:16:41:6b:94:ac:c2:38:c9:
                    ce:de:42:7f:b8:68:5e:61:c9:96:a8:c8:9e:69:5a:
                    9d:d4:8e:b2:4f:57:3a:01:ad:8b:25:c2:e8:77:f8:
                    af:12:e1:23:7f:75:25:65:f7:dd:3b:62:4e:8a:2b:
                    3a:55:46:d4:b1:63:d7:7d:4e:d6:c0:77:7a:98:01:
                    71:16:a1:2c:77:ad:93:7c:45:70:97:39:4a:2b:bf:
                    b1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F3:3E:25:A3:2B:46:91:F7:23:F8:50:10:D3:6C:1D:19:AD:26:13
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/H_M-JaMrRpH3I_hQENNsHRmtJhM.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.220.0.0/19
                  169.255.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:b5:be:c6:1a:78:0c:f3:67:65:1c:58:3e:ec:cb:0a:ec:a4:
         28:96:4b:df:4f:a6:85:96:73:75:97:85:c5:cc:32:cf:9d:80:
         cb:1a:b2:fa:e7:ee:fd:6d:47:76:8d:e4:4b:d6:05:8c:53:8a:
         fa:a4:ca:df:88:22:3a:18:b2:fc:4c:5f:3a:77:2f:eb:8a:40:
         ba:88:e5:3a:aa:39:78:b4:90:92:3e:7d:f0:d4:20:b1:70:66:
         03:1d:53:45:05:81:bf:8e:46:e3:6a:22:62:0a:42:6e:84:a9:
         00:c9:33:18:4a:84:73:20:18:93:d2:de:96:bd:40:b4:c7:cd:
         67:f4:b0:d0:5f:2d:16:e4:49:3d:df:17:d4:d7:16:2a:3a:c7:
         e2:6c:ba:c6:1e:8e:b4:ec:db:03:b8:40:9c:15:7e:cb:c2:dd:
         52:cf:af:22:3a:44:81:97:f3:ca:91:e7:82:64:d4:52:a2:5b:
         f3:67:3b:f6:b3:c7:78:2a:02:fd:ed:98:b2:ea:8c:45:fc:40:
         c0:76:13:9a:4f:52:c0:ac:a3:dd:e6:01:2d:31:0c:02:6a:6f:
         3c:06:97:8a:07:52:bb:dc:1c:47:cf:60:46:42:70:61:ce:b4:
         8d:be:a1:e4:56:02:e1:01:b7:3a:ad:56:35:65:4f:0f:8e:cf:
         c3:82:af:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 01:20:06 2024 by rpki-client on console-fra.rpki-client.org