Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
File:                     I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer (raw, json)
Hash identifier:          FScNdbVOy+UQE8YSpGlgWhRWutnzpIOPIezzHBP3TDQ=
Subject key identifier:   23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1335
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:22:44 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 137.63.128.0/17

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 00:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4917 (0x1335)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:22:44 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8b:55:67:f3:56:35:c7:f3:b6:bd:e2:1f:0b:
                    96:8b:29:a1:3f:74:29:c1:e9:59:e2:63:b7:72:e3:
                    df:57:fa:67:25:72:23:64:d6:1a:74:a0:77:92:41:
                    1c:f0:7c:ee:3c:34:09:36:8a:ef:bb:85:8a:cb:ee:
                    8d:56:ac:e5:2d:f6:a3:7f:65:08:82:81:12:31:47:
                    a4:fc:ed:18:b8:b4:36:6c:81:2c:ea:f3:20:55:fe:
                    e2:bf:a2:31:88:4c:c2:34:e9:a7:6e:14:4c:57:25:
                    8b:83:48:23:cf:da:67:6b:c6:39:db:38:db:a7:41:
                    b5:93:c6:55:fb:07:6a:40:7c:bc:42:ea:01:cb:ee:
                    88:43:be:3f:8e:96:4e:cc:bf:2d:ad:b7:b9:30:e1:
                    7d:3d:cb:cc:80:33:b2:83:b3:9f:e3:71:69:1d:a1:
                    2d:4a:4d:5b:ba:19:25:38:0c:74:b2:a3:cb:c2:7d:
                    bc:11:71:bc:97:15:8b:4e:31:8b:64:1a:d2:6d:5c:
                    8d:5e:74:99:45:16:d4:4e:ff:1e:72:62:d6:60:fc:
                    c3:7c:38:e7:ba:64:b9:a1:75:3f:d4:d9:9d:ba:09:
                    6e:86:7b:97:a9:49:10:2f:8f:20:0e:0e:82:90:fe:
                    f0:5b:e2:cd:e4:d1:8a:9e:b7:8e:64:24:e7:92:58:
                    0f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.63.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         34:3e:22:af:4f:5f:7e:50:a6:86:b5:cf:02:4d:f5:64:1a:13:
         72:0d:2d:28:6f:b4:f7:ac:53:2e:0b:12:0b:43:48:35:ab:87:
         37:cd:f3:31:5a:ee:e5:1a:aa:2c:dd:f2:de:f6:43:69:7e:38:
         1b:84:1f:82:28:aa:06:4c:ec:17:2e:68:c0:65:53:2d:74:2f:
         9b:bd:37:b6:59:77:45:4d:90:b4:27:f1:a2:82:9b:d2:52:6a:
         08:45:10:20:75:ed:9b:5d:c3:de:c1:96:7f:4f:22:ae:90:a6:
         a9:62:30:96:58:f2:7b:bb:d5:c2:93:0f:aa:b1:61:a7:94:f6:
         fe:99:7b:98:ed:c5:e4:20:2e:01:71:e4:99:4b:3f:f6:49:f3:
         7d:3b:4e:87:45:f7:7f:6e:da:36:99:e5:e9:5f:71:8a:b6:17:
         66:7d:4b:e6:8c:16:73:41:8b:a1:ff:99:28:5a:db:73:56:7c:
         7e:38:8b:6b:a4:7b:49:98:e4:1c:09:dc:44:3e:af:9d:09:f8:
         23:a5:e0:9e:50:d9:02:ce:6d:6e:8e:be:e9:69:ab:86:e5:fd:
         a5:c0:a1:6e:24:4b:12:6e:ac:d7:e9:91:d1:c3:ae:53:13:b2:
         a7:e9:26:f1:62:82:4e:36:19:0a:d2:05:7c:c0:57:0d:9d:3d:
         b6:46:82:3e
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICEzUwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNDAxMDEwMDIyNDRaFw0yNTAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNjJCMzhFQVIxMTAvBgNVBAUTKDIzRTYzQkE1NTEzNjVGQzU5
MTIzQTYzNzEyRDc5NzgyQUYxMDI4RDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDKi1Vn81Y1x/O2veIfC5aLKaE/dCnB6VniY7dy499X+mclciNk1hp0
oHeSQRzwfO48NAk2iu+7hYrL7o1WrOUt9qN/ZQiCgRIxR6T87Ri4tDZsgSzq8yBV
/uK/ojGITMI06aduFExXJYuDSCPP2mdrxjnbONunQbWTxlX7B2pAfLxC6gHL7ohD
vj+Olk7Mvy2tt7kw4X09y8yAM7KDs5/jcWkdoS1KTVu6GSU4DHSyo8vCfbwRcbyX
FYtOMYtkGtJtXI1edJlFFtRO/x5yYtZg/MN8OOe6ZLmhdT/U2Z26CW6Ge5epSRAv
jyAODoKQ/vBb4s3k0Yqet45kJOeSWA+BAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
I+Y7pVE2X8WRI6Y3EteXgq8QKNEwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjJCMzhFLzg3RUY5
NzEwREY2MTExRTk4RjM5NDUzMEY4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzYyQjM4RS84N0VGOTcxMERGNjExMUU5OEYzOTQ1MzBGOEFFQTIy
OC9JLVk3cFZFMlg4V1JJNlkzRXRlWGdxOFFLTkUubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQHiT+AMA0GCSqGSIb3DQEBCwUAA4IBAQA0PiKvT19+UKaG
tc8CTfVkGhNyDS0ob7T3rFMuCxILQ0g1q4c3zfMxWu7lGqos3fLe9kNpfjgbhB+C
KKoGTOwXLmjAZVMtdC+bvTe2WXdFTZC0J/GigpvSUmoIRRAgde2bXcPewZZ/TyKu
kKapYjCWWPJ7u9XCkw+qsWGnlPb+mXuY7cXkIC4BceSZSz/2SfN9O06HRfd/bto2
meXpX3GKthdmfUvmjBZzQYuh/5koWttzVnx+OItrpHtJmOQcCdxEPq+dCfgjpeCe
UNkCzm1ujr7paauG5f2lwKFuJEsSbqzX6ZHRw65TE7Kn6SbxYoJONhkK0gV8wFcN
nT22RoI+
-----END CERTIFICATE-----
Generated at Thu Apr 25 02:00:21 2024 by rpki-client on console-ams.rpki-client.org