Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer
File:                     MzQdyhYYc65_OkSzbhzbObXAoJo.cer (raw, json)
Hash identifier:          G9HGyKKJmGV28VVmUY3ZBUHqWC5J9djEi6T3RUZudgE=
Subject key identifier:   33:34:1D:CA:16:18:73:AE:7F:3A:44:B3:6E:1C:DB:39:B5:C0:A0:9A
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1696
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 00:50:11 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 169.239.92.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 14 Apr 2025 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5782 (0x1696)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC
        Validity
            Not Before: Jan  1 00:50:11 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F3662123AR
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:32:a3:9d:e6:7e:4f:14:98:52:78:73:45:5b:
                    29:46:02:33:fe:33:87:74:14:0e:08:68:0c:d1:fd:
                    bf:50:82:2b:ee:c1:a3:a9:67:d5:31:7c:dc:8e:e3:
                    bf:9b:04:0a:f2:5d:d0:db:ef:05:81:90:19:c7:08:
                    75:1c:39:af:d1:dd:e3:52:93:1e:ef:12:d2:38:93:
                    ad:62:d7:45:a0:4d:d9:f6:27:f7:c7:99:9f:43:e1:
                    38:82:34:f8:8d:35:38:13:6a:d7:23:fb:4f:a4:4a:
                    98:26:c5:ef:f5:fb:a2:c3:52:1b:90:2d:9f:39:e2:
                    33:8c:dd:7b:ab:21:14:ba:eb:85:47:ad:fc:73:3b:
                    a6:14:e1:81:d8:c9:91:cc:49:b0:6b:66:2d:ca:3e:
                    d6:c1:7d:ff:a5:df:c5:ff:75:89:81:dd:4d:83:97:
                    af:b8:32:08:c1:34:d1:eb:e5:63:6c:26:73:88:cc:
                    52:f7:20:f4:f1:9f:bb:32:87:cf:7e:e3:9f:d9:99:
                    9e:13:55:f8:66:74:b2:38:0f:57:31:e4:4a:b9:43:
                    6e:f4:3d:99:39:b0:ab:12:6e:0b:af:6e:28:18:d1:
                    07:8d:23:13:65:a3:f8:75:01:a8:8e:e1:79:dd:0b:
                    8a:4b:92:ac:a3:ae:43:52:b9:e4:47:94:79:14:db:
                    d5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:34:1D:CA:16:18:73:AE:7F:3A:44:B3:6E:1C:DB:39:B5:C0:A0:9A
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.239.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:e4:81:05:90:59:1e:a0:2a:20:4b:5b:df:b7:ba:43:31:73:
         0c:1d:70:79:9b:95:1d:58:18:3a:66:45:6d:5a:a1:1a:d0:c9:
         9e:9f:5b:4a:da:9f:8b:fe:d9:92:72:53:ea:f4:5e:6f:78:f3:
         54:0a:fd:ae:e7:25:04:0f:fa:b1:84:1f:d3:19:fe:3c:8f:41:
         1c:79:f1:3b:63:a0:a1:4c:13:04:db:1f:0e:99:37:19:22:b8:
         38:30:3c:09:fb:33:1b:b2:dd:e4:5d:13:12:97:4d:79:b7:ab:
         0b:07:b0:d4:84:2f:74:2c:ce:50:88:a1:4b:dd:60:e7:1a:24:
         a1:30:eb:e4:1a:59:ae:16:51:bb:64:a2:e2:ab:1b:23:8a:36:
         c2:0e:7f:a7:ed:bd:45:d6:66:e2:9a:cf:76:49:f3:6e:ca:72:
         86:a7:e5:3c:8c:0b:1b:a9:ae:f7:d2:3c:f7:ae:f7:ac:e2:ca:
         50:c8:6a:c6:70:c2:f1:99:ad:b3:ce:e1:af:eb:0f:f5:d3:bb:
         17:c6:89:f2:0d:44:9b:11:f9:26:89:53:bf:00:71:03:de:bd:
         24:93:63:af:8d:c4:37:fa:30:32:6c:47:43:6d:c8:24:5a:d7:
         f9:f9:a4:49:87:0d:71:eb:f9:44:26:be:02:35:df:c3:6a:0f:
         4f:98:65:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:37:15 2025 by rpki-client