Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/LjUlNVWULww8pjeATUbZWgKk-ek.cer
File:                     LjUlNVWULww8pjeATUbZWgKk-ek.cer (raw, json)
Hash identifier:          5hYg0tN5sZG6k1S5w3yxDuWPjCBu1iLrHE7C0oRsAzs=
Subject key identifier:   2E:35:25:35:55:94:2F:0C:3C:A6:37:80:4D:46:D9:5A:02:A4:F9:E9
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1331
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:21:43 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 165.233.0.0/16

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Apr 2024 00:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4913 (0x1331)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:21:43 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3627BD6AR/serialNumber=2E35253555942F0C3CA637804D46D95A02A4F9E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:36:3e:c0:27:f2:a1:ea:25:bb:3e:fa:fd:d6:
                    66:05:b6:41:c2:c7:a3:64:f0:97:e3:90:1b:02:94:
                    81:a9:78:3b:d8:b7:a0:79:2a:92:8e:43:4b:4d:55:
                    13:6c:bb:23:c4:de:ff:55:b6:63:73:c5:7b:bf:f0:
                    ff:e7:39:24:55:8f:e3:a5:19:a6:cc:c0:c7:e7:5a:
                    1a:da:97:ff:b5:0f:36:e0:2a:f8:3e:a9:10:aa:2a:
                    30:97:3e:e5:0e:38:8d:f9:d2:fa:a9:84:31:7d:da:
                    72:12:0e:69:ce:f8:48:fd:fe:2f:75:4b:57:6c:11:
                    2c:b8:4e:17:43:f1:53:74:5c:05:c3:f3:2f:f3:66:
                    61:91:24:ca:94:6b:21:f2:1d:d9:c6:5d:42:5e:c6:
                    f6:e3:ca:83:0d:e4:a0:e0:0f:26:9e:7c:0d:7c:87:
                    3a:52:f7:4d:a1:29:06:da:32:9f:8c:c2:e9:6c:0c:
                    d9:73:96:b7:26:b3:7e:2f:47:ec:f6:b5:bf:18:20:
                    82:ac:8e:e8:b4:e5:ab:00:42:b8:03:db:cc:e7:c7:
                    5a:76:44:02:42:84:1e:29:be:23:e5:57:0e:cd:11:
                    f2:d5:b8:4c:0d:3b:62:31:4a:f4:c3:1d:3a:15:94:
                    67:df:87:f6:7b:39:6a:04:92:cd:f2:b6:a3:6f:ff:
                    70:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:35:25:35:55:94:2F:0C:3C:A6:37:80:4D:46:D9:5A:02:A4:F9:E9
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.233.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         af:63:18:f1:c1:68:c2:fa:af:7f:d8:20:89:83:bc:ca:41:a4:
         6d:17:7c:bf:c1:87:d9:61:ba:c3:7b:0b:a7:bb:8f:b3:1e:2e:
         4a:62:ff:48:ab:96:17:b2:b9:5d:51:ac:e1:de:2b:85:eb:e8:
         60:5a:60:f0:0a:a3:12:49:ee:87:02:7f:69:12:a1:33:ac:39:
         1f:dc:07:33:f7:a4:26:00:eb:fe:e7:28:e0:cb:9b:3b:01:eb:
         41:1d:80:15:b0:82:60:37:15:01:9f:23:8c:42:11:0a:92:65:
         e5:0e:9c:28:b7:5b:3d:06:8d:dd:4d:be:c8:84:4b:bf:37:a1:
         d8:23:f1:39:6f:fc:a6:45:f6:17:4d:3d:d8:d0:31:cc:26:bd:
         58:d6:36:59:f8:4f:b2:81:a3:6b:33:70:17:c9:c3:5e:cb:05:
         b8:d1:51:8d:d1:54:f2:4f:e3:19:db:b5:f3:49:2a:c3:f4:a8:
         83:4a:59:8f:aa:9d:24:58:2f:8e:93:0f:de:14:6f:37:12:da:
         38:b8:0e:52:71:3f:17:b4:b4:27:7c:7c:30:02:e3:d1:a9:3e:
         85:73:ec:3b:75:b1:9d:35:89:91:b2:25:4e:2a:39:7a:55:1c:
         db:5d:c0:53:0e:dc:c6:00:60:e1:b6:2e:b2:99:6b:f4:70:84:
         05:02:bf:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:52:28 2024 by rpki-client on console-ams.rpki-client.org