Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/IG86iVTAbX-P1ttnm4NmlsxnQX8.cer
File:                     IG86iVTAbX-P1ttnm4NmlsxnQX8.cer (raw, json)
Hash identifier:          pqj2J2z51YxBbBD4D7DFr3ibUbWTTsKsqMNu8u2lNLE=
Subject key identifier:   20:6F:3A:89:54:C0:6D:7F:8F:D6:DB:67:9B:83:66:96:CC:67:41:7F
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1436
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/270CEFC4132011ED810BF0EDF1222468/IG86iVTAbX-P1ttnm4NmlsxnQX8.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/270CEFC4132011ED810BF0EDF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:26:23 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 165.73.136.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Apr 2024 07:21:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5174 (0x1436)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:26:23 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36EADB7AR/serialNumber=206F3A8954C06D7F8FD6DB679B836696CC67417F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ab:41:f5:7c:fc:ec:26:81:c8:d2:90:a9:a2:
                    a9:cb:fa:ff:1e:c1:f2:d7:48:5e:3f:a2:f0:4a:f1:
                    ba:8d:cb:20:14:f3:84:19:70:7b:22:33:de:9a:16:
                    fd:f3:d1:12:3e:a3:6d:82:a9:1e:e9:f7:6d:66:e6:
                    a3:45:b8:7a:07:cb:39:86:30:9f:21:fa:c3:b6:1a:
                    90:d2:e7:56:e2:05:61:0a:1a:f0:3d:d7:0f:cc:9c:
                    66:17:3c:7a:c7:e5:b1:3d:66:0e:27:c3:2c:66:ce:
                    0f:b3:3e:e7:5f:d1:e3:29:9a:13:a7:19:f8:f9:ac:
                    c1:a8:c6:35:15:08:d7:90:12:0b:e7:ed:39:f1:34:
                    3c:ab:e7:d3:89:c1:94:09:f0:37:6c:cc:de:ef:e5:
                    83:58:86:2f:13:17:58:d6:c3:af:a9:04:70:68:c6:
                    70:40:2d:cb:35:ce:ce:1b:82:79:a1:e6:85:29:ed:
                    01:90:b1:ff:24:ef:a7:62:9d:74:f2:ea:03:7c:68:
                    b9:ae:dd:92:73:56:b2:f4:e9:6f:fa:1d:dd:c5:af:
                    18:a8:a1:8d:70:42:4c:b2:2c:16:8f:08:b9:99:92:
                    33:41:c5:9d:fb:dc:76:b9:37:bc:75:94:ad:71:ff:
                    81:74:9c:e5:54:af:90:c1:f0:35:86:71:da:c1:4a:
                    5e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6F:3A:89:54:C0:6D:7F:8F:D6:DB:67:9B:83:66:96:CC:67:41:7F
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/270CEFC4132011ED810BF0EDF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/270CEFC4132011ED810BF0EDF1222468/IG86iVTAbX-P1ttnm4NmlsxnQX8.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.73.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:7b:01:99:45:c3:38:54:56:60:89:f3:25:ce:3d:93:59:28:
         78:a0:5c:68:bd:97:a8:7c:86:46:c3:4f:b5:d9:4f:72:9c:56:
         8a:69:2d:26:a9:5a:9a:c4:5b:cc:8c:e1:ee:e9:02:d7:f2:bb:
         7f:85:25:77:14:2d:39:02:7b:98:a4:08:42:58:57:d7:34:e7:
         42:36:8a:6c:bd:a0:8f:0a:b2:f9:7c:b5:6e:9e:47:58:da:23:
         34:12:fa:4d:17:f4:92:2d:8c:f4:5d:18:bc:37:4f:7c:b1:1f:
         d3:c0:0b:c3:53:64:25:20:c5:fc:e2:75:cb:75:63:2d:be:f8:
         27:38:e0:8f:84:c3:c0:1b:7b:f7:a9:c8:7e:ff:39:b3:a9:e6:
         d4:da:c9:9e:4b:75:87:47:eb:82:54:c7:4b:ae:c3:33:3c:af:
         38:f3:21:aa:ac:8e:60:34:70:cb:3d:8e:86:a5:38:ba:07:e9:
         31:75:c9:14:58:1c:2b:10:09:91:d3:06:ae:3d:38:32:fe:92:
         de:87:a5:ab:43:d1:6b:61:9b:f7:27:2a:3b:08:d2:a6:4d:0f:
         78:d5:09:b9:d0:27:c4:bd:8e:59:fb:5e:2a:1e:bc:dc:86:06:
         83:d2:d7:1a:7d:92:a3:75:ca:60:57:c8:55:35:97:2f:f9:e7:
         fc:4b:43:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 08:13:13 2024 by rpki-client on console-fra.rpki-client.org