Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/KEDdOiyCpwMrqmo9ct5yy7ixXdc.cer
File:                     KEDdOiyCpwMrqmo9ct5yy7ixXdc.cer (raw, json)
Hash identifier:          QsUBTwj0UVhCJ2iu4u82jmkDkvn5TsULU+Glx/GIdDk=
Subject key identifier:   28:40:DD:3A:2C:82:A7:03:2B:AA:6A:3D:72:DE:72:CB:B8:B1:5D:D7
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1370
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/KEDdOiyCpwMrqmo9ct5yy7ixXdc.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:36:41 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 160.20.24.0/21
                          IP: 164.160.44.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 26 Apr 2024 00:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4976 (0x1370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:36:41 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3656177AR/serialNumber=2840DD3A2C82A7032BAA6A3D72DE72CBB8B15DD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f7:94:43:87:8e:c4:dc:10:8e:e8:69:cf:8d:
                    c1:d6:a6:cd:77:02:67:95:6a:ee:e7:c2:87:75:05:
                    66:0c:fa:97:6c:92:8c:57:b2:1b:2d:d6:3c:77:45:
                    a6:ed:0e:df:c9:50:75:26:a8:7d:26:37:9e:61:e3:
                    9b:7c:e0:a1:86:4b:a1:df:72:e7:3f:63:30:8a:8a:
                    b7:e0:cf:5e:28:9c:2a:b7:dd:9a:3b:40:11:dc:3a:
                    9f:a7:eb:d8:67:5a:f4:29:66:72:1f:56:09:95:29:
                    48:79:e3:e4:3c:95:96:85:8e:f1:e7:61:15:1a:e6:
                    c6:b7:16:39:5a:ba:83:35:ac:c5:fc:96:bf:4f:1e:
                    81:f9:2b:2c:bf:f6:1d:0e:32:0c:e2:2f:b7:2c:38:
                    bf:1e:30:2c:22:fa:d7:a7:54:c5:44:9f:ad:7f:ef:
                    2b:2d:3b:e5:61:b1:34:00:c1:5e:82:d4:75:24:af:
                    68:91:fe:7c:5d:34:7e:36:ce:94:61:4a:2d:bd:83:
                    ff:b7:08:8d:00:fb:8e:63:7c:1c:2d:fe:c8:84:b7:
                    82:a3:05:73:b4:a9:1c:d0:e7:a7:ad:3b:64:90:90:
                    a5:0d:bb:c7:a2:3a:3b:7f:f7:72:b2:82:d2:6a:1d:
                    8b:08:a5:00:45:c6:2e:ec:32:0f:12:71:8c:fd:df:
                    16:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:40:DD:3A:2C:82:A7:03:2B:AA:6A:3D:72:DE:72:CB:B8:B1:5D:D7
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/KEDdOiyCpwMrqmo9ct5yy7ixXdc.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.24.0/21
                  164.160.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:f3:35:94:76:f5:b8:57:16:93:e0:a2:a7:4c:91:2c:54:16:
         a5:6d:9c:42:c7:eb:df:b5:25:45:a7:c8:ac:89:3a:15:8e:1e:
         ff:53:f3:f7:6e:8d:a4:84:a8:f3:87:ce:c8:bc:61:79:5a:c4:
         c9:be:e4:0d:25:af:22:96:82:0b:a7:23:ca:b3:96:f8:af:2e:
         cc:64:52:60:cd:b4:7f:49:da:3b:a7:76:f8:30:28:da:63:36:
         3f:24:2b:bb:3a:0e:f4:73:8a:ef:32:bc:85:84:a2:b1:5e:7f:
         38:90:dd:79:44:25:da:5b:fb:f9:3a:93:4c:63:cc:09:5e:23:
         60:1e:dc:21:f3:ad:17:8c:d9:39:ef:ad:00:90:05:fc:67:81:
         de:a9:15:ba:7b:91:eb:0f:7b:b0:63:3d:b1:50:01:2c:eb:81:
         18:16:a0:80:a5:58:fb:55:bf:d1:3b:84:a4:66:a4:32:d2:ad:
         d1:d9:19:d4:a1:31:5a:2a:ea:d6:be:12:ad:e7:e8:12:a9:39:
         f9:87:74:af:19:a3:68:9a:45:3e:c6:a9:69:b5:d4:d0:d1:72:
         85:87:00:5f:8f:27:2a:3b:79:21:0f:fa:a4:cd:c8:d0:78:b8:
         73:e1:bb:ad:55:b0:6a:9b:3e:80:53:5e:9e:7f:ff:59:31:62:
         30:46:90:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 01:55:48 2024 by rpki-client on console-ams.rpki-client.org