Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer
File:                     JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer (raw, json)
Hash identifier:          TvdV3adbLQ8C7KrctFsFKvuNYlrZDX4iKHTwORZyS0w=
Subject key identifier:   25:3F:1A:68:77:15:10:A6:65:6D:7D:66:0F:50:3D:55:B0:6B:90:04
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       135C
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:32:07 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 147.110.0.0/16

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 31 Mar 2024 00:16:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4956 (0x135c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:32:07 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3646FFEAR/serialNumber=253F1A68771510A6656D7D660F503D55B06B9004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:45:84:16:c5:ff:4e:2a:da:59:6e:cf:58:72:
                    ea:5e:7b:36:fb:94:41:54:a7:67:a6:8a:f9:12:8a:
                    7b:32:b1:e9:64:1d:cf:e6:55:8b:f7:23:f8:b6:81:
                    c1:16:5e:46:f5:8e:2d:10:e2:bc:34:63:83:bc:ff:
                    5b:1f:c7:83:ee:09:54:cd:46:3f:cd:75:4c:0c:19:
                    7f:de:b0:0d:06:a2:ba:3c:52:dd:ee:1a:a2:88:90:
                    53:d8:26:14:ad:e7:75:9d:1c:f2:6e:a3:fb:1f:9d:
                    a4:fb:16:75:aa:a9:8c:7e:0d:8e:7e:4e:43:ec:7b:
                    28:8c:2b:4a:a3:6b:54:db:a5:a2:94:f7:fb:48:2a:
                    c9:3e:a1:9d:bb:be:ee:b5:fd:12:0b:0c:24:fb:e0:
                    41:25:95:1c:88:49:6a:8d:17:22:57:a4:ca:dc:46:
                    86:cc:a1:b8:7f:6a:82:80:4a:be:c5:18:88:17:57:
                    e2:8d:e9:b3:35:f4:79:87:7f:81:59:c6:58:9c:ad:
                    93:cd:71:bd:8f:47:0a:6a:dc:d1:e6:b0:ce:c2:42:
                    87:f6:42:09:e0:dd:ad:57:c6:d3:36:e2:81:0a:6a:
                    58:73:52:7c:6a:21:fc:ad:77:ad:c1:7e:b2:4f:00:
                    14:05:83:d5:00:69:fc:95:d7:64:74:64:4a:0a:5e:
                    d7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:3F:1A:68:77:15:10:A6:65:6D:7D:66:0F:50:3D:55:B0:6B:90:04
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.110.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b2:26:68:a4:44:a3:5f:e6:23:07:97:2e:92:96:a2:3a:4a:64:
         89:ba:40:b4:13:87:08:c2:d2:22:73:c0:f8:17:29:13:64:9b:
         f9:94:02:62:a4:29:3e:5d:85:2e:69:84:e1:f3:22:61:d5:2e:
         3c:2c:f8:2b:09:a7:fc:8a:ac:5d:f2:9f:92:79:f9:cc:e0:e7:
         03:c7:0c:26:bf:1f:39:3c:1c:43:a3:be:00:af:55:2a:ce:5c:
         b1:cf:99:63:28:83:10:c9:46:4d:96:cf:78:53:4b:b5:d3:58:
         60:a6:72:f5:54:29:aa:30:e1:ce:f3:ab:18:e9:2e:4c:d4:2d:
         a0:a5:57:41:6f:87:45:21:f7:02:29:d0:63:ae:14:b5:f2:2a:
         45:89:36:a1:2b:95:36:a4:97:2f:f2:7a:2d:eb:50:89:0b:b9:
         81:36:d9:43:55:37:58:b6:42:6f:67:f7:db:5d:2e:73:37:4b:
         18:74:86:af:c1:85:45:f8:fc:bd:f3:06:46:21:cf:f2:34:1a:
         f9:49:ac:f6:f5:5b:1b:ca:d1:f5:54:18:1a:2a:5a:20:8c:ef:
         53:70:a1:e5:af:24:fd:9f:24:5c:c8:c0:e9:88:d3:07:d5:ec:
         49:ab:a1:dc:20:f7:ff:de:09:cf:ed:06:8a:f1:70:a8:57:ed:
         0e:ac:f0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:38:44 2024 by rpki-client on console-fra.rpki-client.org