Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
File:                     OckZvvVPpaxnw34-dWyhP7I0tT8.cer (raw, json)
Hash identifier:          s/N4dMe9s3YUvO6FxHWoz6tsw5OSIFCkJheeQCDSA30=
Subject key identifier:   39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       148F
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 08 Feb 2024 11:15:52 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 168.253.0.0/19

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 07 May 2024 00:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5263 (0x148f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Feb  8 11:15:52 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36F68F4AR/serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c3:ed:a4:94:1c:8e:23:85:cb:56:2a:a0:16:
                    75:34:34:ea:71:d6:4b:ae:e7:4e:5d:be:6b:8c:03:
                    b4:04:c3:fc:4b:8e:35:e3:46:d6:02:81:58:54:8d:
                    da:80:ad:88:ff:d0:53:8b:5d:61:a1:4e:3a:c3:f8:
                    d0:c1:90:01:93:27:a5:0a:4d:2d:b2:06:64:17:82:
                    a4:bc:52:8a:4b:39:a3:08:e7:9b:67:0e:6e:7f:8d:
                    1b:56:d1:3f:89:77:63:a3:89:3c:bc:4f:5d:80:f7:
                    ea:0d:e7:88:55:33:c4:f4:38:08:8a:be:12:2e:f9:
                    88:b6:9d:c5:f7:d1:57:18:de:ac:30:e2:3a:1f:c7:
                    6e:8f:e2:28:8e:02:22:5e:2f:5e:eb:97:38:60:a1:
                    8f:44:25:72:3e:a9:3d:32:3f:6c:e1:39:9d:47:d5:
                    9a:47:58:ac:72:98:80:e6:38:9d:aa:b8:7a:d9:36:
                    04:05:4e:ec:05:1d:b5:4f:96:c7:08:08:bd:4b:b0:
                    c6:f3:dd:9f:73:28:a1:da:ef:b9:33:3b:69:e8:de:
                    40:3d:21:3a:a2:e6:50:72:e5:bc:62:d6:91:42:7a:
                    de:14:38:31:85:7b:7f:93:82:14:f1:e5:85:b7:50:
                    aa:e5:6f:08:43:43:4a:31:62:7d:5c:b1:88:a4:9f:
                    b4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.253.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a0:ab:0a:a6:c0:c1:85:41:b2:98:ba:4b:d8:f2:ad:8e:84:79:
         f2:dd:45:c5:05:2e:2c:76:4c:29:ff:80:6a:bc:57:dd:9c:a8:
         48:2f:f7:7e:6e:3c:3f:ae:71:db:dd:12:87:ee:02:af:43:ed:
         9d:b0:81:cd:fc:ac:98:e7:54:26:1b:d6:99:00:c2:33:61:68:
         9c:3b:07:95:e9:2f:84:c6:a7:04:36:e1:f7:13:da:a4:26:52:
         6a:68:b7:16:9e:48:d7:66:02:ad:7f:e7:33:61:5a:f8:38:c2:
         6d:51:f1:91:07:a4:0f:24:1a:35:e4:00:5e:d7:f4:d8:19:54:
         a5:15:8e:be:3b:7f:61:ed:b5:42:a7:74:5a:31:9e:fa:ca:dc:
         fc:1e:6b:03:45:5b:ec:5a:72:57:47:aa:d6:e8:b6:c8:83:3a:
         ef:74:90:fc:6a:3c:a3:cc:1c:df:3c:5b:5f:b0:cb:3d:c0:f3:
         90:93:a6:ef:f6:0e:8d:48:a6:58:5d:cc:bd:71:8e:7b:0f:ea:
         f9:ce:e3:96:7c:1c:a2:3d:a1:1d:23:0b:78:1b:14:14:ac:fc:
         64:c5:b3:15:4b:af:e6:90:b0:2d:a7:26:d2:e6:29:a4:3c:07:
         3a:61:77:8e:b7:2f:13:1f:89:0f:95:e4:f2:6e:df:a7:da:30:
         7a:77:1e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:13:16 2024 by rpki-client on console-ams.rpki-client.org