Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer
File:                     MzQdyhYYc65_OkSzbhzbObXAoJo.cer (raw, json)
Hash identifier:          3p/7LYamg+J8Lg9mhzWOIkeTNbWgXD3vyKUiN527K98=
Subject key identifier:   33:34:1D:CA:16:18:73:AE:7F:3A:44:B3:6E:1C:DB:39:B5:C0:A0:9A
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1386
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:42:20 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 169.239.92.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 00:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4998 (0x1386)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:42:20 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3662123AR/serialNumber=33341DCA161873AE7F3A44B36E1CDB39B5C0A09A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:32:a3:9d:e6:7e:4f:14:98:52:78:73:45:5b:
                    29:46:02:33:fe:33:87:74:14:0e:08:68:0c:d1:fd:
                    bf:50:82:2b:ee:c1:a3:a9:67:d5:31:7c:dc:8e:e3:
                    bf:9b:04:0a:f2:5d:d0:db:ef:05:81:90:19:c7:08:
                    75:1c:39:af:d1:dd:e3:52:93:1e:ef:12:d2:38:93:
                    ad:62:d7:45:a0:4d:d9:f6:27:f7:c7:99:9f:43:e1:
                    38:82:34:f8:8d:35:38:13:6a:d7:23:fb:4f:a4:4a:
                    98:26:c5:ef:f5:fb:a2:c3:52:1b:90:2d:9f:39:e2:
                    33:8c:dd:7b:ab:21:14:ba:eb:85:47:ad:fc:73:3b:
                    a6:14:e1:81:d8:c9:91:cc:49:b0:6b:66:2d:ca:3e:
                    d6:c1:7d:ff:a5:df:c5:ff:75:89:81:dd:4d:83:97:
                    af:b8:32:08:c1:34:d1:eb:e5:63:6c:26:73:88:cc:
                    52:f7:20:f4:f1:9f:bb:32:87:cf:7e:e3:9f:d9:99:
                    9e:13:55:f8:66:74:b2:38:0f:57:31:e4:4a:b9:43:
                    6e:f4:3d:99:39:b0:ab:12:6e:0b:af:6e:28:18:d1:
                    07:8d:23:13:65:a3:f8:75:01:a8:8e:e1:79:dd:0b:
                    8a:4b:92:ac:a3:ae:43:52:b9:e4:47:94:79:14:db:
                    d5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:34:1D:CA:16:18:73:AE:7F:3A:44:B3:6E:1C:DB:39:B5:C0:A0:9A
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.239.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:a7:ae:96:d6:24:6d:c2:6d:06:a0:2c:e0:2e:d5:db:97:3e:
         0e:ea:88:0f:c3:4e:60:0a:86:09:c6:b4:3d:7f:41:d3:ce:fd:
         a5:76:32:d8:66:39:e1:fd:34:13:7d:6e:78:41:f8:1f:ae:07:
         15:9d:ad:6f:0f:13:2f:42:6b:6d:73:5c:3a:43:81:34:aa:dd:
         6d:c0:ef:d3:7d:e5:63:57:4e:0e:c1:85:62:aa:4a:8c:45:96:
         f0:e2:e5:a5:c8:51:be:cc:81:4f:70:f7:51:1c:53:df:e5:2e:
         1c:bb:dd:17:d5:38:1c:99:b9:a1:4f:ba:cd:36:ec:e5:ef:12:
         8f:aa:b3:19:33:a5:4c:2e:97:b5:a9:78:59:a2:53:e1:e2:ba:
         ea:71:ab:a5:a7:03:75:6f:db:34:8b:48:ef:b3:77:1e:e8:a7:
         2d:88:cb:25:ae:1d:6b:7d:a2:e3:1b:79:f2:c0:54:53:38:b9:
         eb:bf:4d:06:2f:16:5d:9e:6b:36:f5:57:76:56:f3:d2:c7:03:
         28:e4:6b:c5:bc:7d:d8:0d:cb:42:9e:4f:03:d0:12:97:26:c7:
         22:de:28:b6:52:e1:70:30:15:79:6b:6b:41:82:3c:34:e3:c1:
         25:cf:5b:9e:e8:69:2f:83:e5:47:34:55:37:55:af:5b:01:6b:
         45:9a:98:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 01:20:06 2024 by rpki-client on console-fra.rpki-client.org