Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer
File:                     MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer (raw, json)
Hash identifier:          ZEMfdlBsXBOxKllDiE0suiV4pgvYQn7pvy6nTSjA338=
Subject key identifier:   33:08:4F:AF:93:3C:72:4D:32:E6:DF:A7:9F:15:CD:16:F3:D8:2E:74
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       13D3
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:01:33 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 164.88.0.0/16

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 07 May 2024 00:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5075 (0x13d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:01:33 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3691854AR/serialNumber=33084FAF933C724D32E6DFA79F15CD16F3D82E74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:14:29:b2:17:55:1e:f4:df:05:32:d8:d8:2a:
                    97:45:2f:7c:ce:31:43:ae:8f:ef:cd:21:90:10:3e:
                    33:1e:0a:c8:ea:bb:97:c8:a3:86:a1:8e:90:48:9d:
                    d7:b1:45:59:a3:b9:4f:f2:27:f5:73:08:91:c5:5f:
                    36:69:d2:7e:9a:70:37:51:0f:64:81:f4:1e:fe:c0:
                    05:21:6c:6a:37:d2:07:bb:1e:ce:42:ef:23:19:81:
                    b6:0d:d6:d5:73:5b:74:8c:fd:45:d7:7e:15:ee:0b:
                    f2:96:44:92:21:a8:67:78:30:76:14:39:3f:e3:8e:
                    fe:2e:53:1f:ca:62:20:8d:09:95:bf:f4:e8:d5:ec:
                    90:16:8e:04:f2:7a:5f:b1:f8:4f:d5:76:69:6b:fd:
                    29:4d:17:04:53:00:00:b6:fe:b6:7a:84:19:02:bc:
                    85:3e:e9:f2:c4:de:84:97:e4:72:22:29:11:28:b1:
                    4e:ae:a5:b1:8c:63:91:bd:77:aa:08:16:db:a6:b8:
                    2d:09:e6:75:25:7e:4d:b6:48:71:dd:1f:03:2a:fb:
                    08:37:eb:61:fe:c5:b9:78:d6:16:61:77:c2:4c:c2:
                    0f:61:19:e1:5f:48:89:14:6d:b8:60:69:90:b5:e4:
                    9b:39:4b:4a:2c:ea:20:a6:8a:c8:a4:08:22:a5:75:
                    b4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:08:4F:AF:93:3C:72:4D:32:E6:DF:A7:9F:15:CD:16:F3:D8:2E:74
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.88.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ad:5f:0c:8f:d6:44:3c:af:11:50:78:33:a0:2c:1f:5f:37:94:
         a0:ba:62:33:2e:e1:7b:66:f1:19:7c:f2:a6:bf:f9:49:52:0b:
         8f:07:2f:53:d3:d3:cb:e8:17:cf:72:37:33:99:f2:fd:6e:1d:
         0b:18:50:06:0e:fd:37:4b:88:67:a7:84:fd:35:26:0d:80:f1:
         af:09:89:8a:36:c5:18:bd:8e:72:dd:2b:85:cd:02:6d:f7:09:
         a7:7f:02:fd:2d:f3:d6:01:c0:57:27:99:ee:5d:a4:44:c3:5d:
         3a:c8:93:51:61:47:26:47:16:f9:f1:78:79:a8:30:c4:9a:df:
         a6:9b:22:ce:46:50:12:4f:90:74:25:0c:cf:75:9e:47:7c:fd:
         4a:13:27:c5:3b:d5:67:80:84:36:52:02:6b:26:03:5d:9a:8e:
         1e:75:08:b6:17:37:5e:16:c0:d9:82:b3:ae:72:a3:2c:bb:69:
         18:5d:f0:02:b4:35:61:30:ef:6f:94:95:40:b6:0d:8a:ac:ff:
         3c:46:d5:00:e0:33:a8:0b:cb:2a:66:1c:6c:6f:96:97:0b:bb:
         49:1a:96:54:ee:52:ec:1f:76:f2:75:11:bd:e6:3c:cc:4b:75:
         2d:7f:b2:18:d5:b4:db:61:f8:44:9f:4a:78:7f:4a:95:bf:7f:
         b6:68:d0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:13:16 2024 by rpki-client on console-ams.rpki-client.org