Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/QVvN73HfdO_cZVY4QJM9lPIraRM.cer
File:                     QVvN73HfdO_cZVY4QJM9lPIraRM.cer (raw, json)
Hash identifier:          ByF35eC2Bw9rMkIowMlsfNBfUn2zBQtUJh/ljUErcCs=
Subject key identifier:   41:5B:CD:EF:71:DF:74:EF:DC:65:56:38:40:93:3D:94:F2:2B:69:13
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1343
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:26:08 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 45.222.64.0/19

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 00:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4931 (0x1343)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:26:08 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36374C9AR/serialNumber=415BCDEF71DF74EFDC65563840933D94F22B6913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:4d:41:9e:f6:c8:c5:19:68:bb:ba:71:e5:89:
                    cf:07:fb:a8:08:15:e2:0c:36:c7:75:cc:55:c0:72:
                    f3:c6:ec:5f:2c:20:b3:29:38:b6:ea:74:82:da:e6:
                    ac:92:85:b9:93:16:c8:81:5d:f2:d7:45:06:46:02:
                    07:16:59:33:19:5b:dd:98:91:aa:e0:cf:b3:e4:4e:
                    1f:ef:d7:0b:69:7c:2e:94:50:d5:0c:05:f9:93:77:
                    94:4d:8c:e4:c6:ec:4e:6f:91:22:55:a4:6c:d4:0c:
                    65:7b:45:4a:fc:8b:50:0d:cf:b7:4f:c0:8e:b2:ef:
                    0a:5a:20:ee:6c:c7:99:f6:84:32:b2:6f:ab:fd:57:
                    16:dd:31:02:22:a2:09:c6:88:73:90:52:a7:8c:69:
                    9d:08:41:45:f1:63:3b:ed:69:fd:55:9f:9c:4b:47:
                    69:83:d1:1a:45:11:a8:ac:7b:64:d7:be:86:86:8b:
                    2d:c7:09:f9:fa:d5:1e:6e:45:bc:1f:8b:f3:62:b9:
                    15:6d:d2:f3:60:9a:d6:e9:1b:98:99:e3:a9:88:ce:
                    c0:1f:e6:4a:b7:ce:da:89:6c:50:92:da:b9:05:0f:
                    e1:83:f1:45:69:90:22:9b:ce:03:86:61:10:24:a8:
                    c6:ae:a1:8d:24:a7:d5:86:1c:a0:87:35:62:b9:cd:
                    fc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5B:CD:EF:71:DF:74:EF:DC:65:56:38:40:93:3D:94:F2:2B:69:13
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.222.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9c:8f:5e:57:4d:3e:46:20:a9:09:d3:45:df:db:fd:82:79:51:
         28:aa:50:e3:a4:3d:14:37:8c:41:a2:69:25:ec:70:af:58:8c:
         dd:01:1d:80:0b:9c:ac:bd:51:0e:d9:96:54:c7:f4:7a:d5:ff:
         ad:c3:5f:14:a9:ad:36:81:b0:8a:58:3d:a5:85:ae:04:87:d7:
         ab:d2:a5:58:81:7b:fc:6a:64:19:29:f1:12:ea:13:3c:7a:70:
         2a:11:e0:33:53:83:e5:85:b4:22:cf:ff:5f:33:d6:55:3a:dd:
         f3:a8:38:ee:42:41:51:66:b1:fe:c2:de:39:46:81:35:bc:1b:
         a8:fd:22:64:95:9d:34:83:90:5e:6d:4c:89:69:dc:4e:bb:65:
         96:e9:f3:4e:57:49:e7:ba:ab:8f:b2:5f:fe:24:5e:b2:7e:57:
         6c:da:f6:11:26:e1:1b:a1:c8:52:16:c5:c8:e1:8c:b9:90:89:
         a6:4e:df:76:97:bb:2f:1c:89:74:3f:83:50:d9:63:df:2b:83:
         04:f2:46:5b:2e:e0:28:15:8c:f6:86:9b:16:36:be:90:4a:fa:
         6d:3d:63:d9:ab:12:18:f5:98:53:47:e8:99:55:a5:11:5c:c6:
         be:a3:b4:98:b3:63:6d:1f:8c:87:74:cc:27:ba:37:b6:02:0e:
         03:c0:3a:6f
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICE0MwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNDAxMDEwMDI2MDhaFw0yNTAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNjM3NEM5QVIxMTAvBgNVBAUTKDQxNUJDREVGNzFERjc0RUZE
QzY1NTYzODQwOTMzRDk0RjIyQjY5MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDzTUGe9sjFGWi7unHlic8H+6gIFeIMNsd1zFXAcvPG7F8sILMpOLbq
dILa5qyShbmTFsiBXfLXRQZGAgcWWTMZW92Ykargz7PkTh/v1wtpfC6UUNUMBfmT
d5RNjOTG7E5vkSJVpGzUDGV7RUr8i1ANz7dPwI6y7wpaIO5sx5n2hDKyb6v9Vxbd
MQIiognGiHOQUqeMaZ0IQUXxYzvtaf1Vn5xLR2mD0RpFEaise2TXvoaGiy3HCfn6
1R5uRbwfi/NiuRVt0vNgmtbpG5iZ46mIzsAf5kq3ztqJbFCS2rkFD+GD8UVpkCKb
zgOGYRAkqMauoY0kp9WGHKCHNWK5zfxtAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
QVvN73HfdO/cZVY4QJM9lPIraRMwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjM3NEM5LzUwMjRE
RTQyNTQyRTExRTZCOEJFMDcxRUY4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzYzNzRDOS81MDI0REU0MjU0MkUxMUU2QjhCRTA3MUVGOEFFQTIy
OC9RVnZONzNIZmRPX2NaVlk0UUpNOWxQSXJhUk0ubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQFLd5AMA0GCSqGSIb3DQEBCwUAA4IBAQCcj15XTT5GIKkJ
00Xf2/2CeVEoqlDjpD0UN4xBomkl7HCvWIzdAR2AC5ysvVEO2ZZUx/R61f+tw18U
qa02gbCKWD2lha4Eh9er0qVYgXv8amQZKfES6hM8enAqEeAzU4PlhbQiz/9fM9ZV
Ot3zqDjuQkFRZrH+wt45RoE1vBuo/SJklZ00g5BebUyJadxOu2WW6fNOV0nnuquP
sl/+JF6yflds2vYRJuEbochSFsXI4Yy5kImmTt92l7svHIl0P4NQ2WPfK4ME8kZb
LuAoFYz2hpsWNr6QSvptPWPZqxIY9ZhTR+iZVaURXMa+o7SYs2NtH4yHdMwnuje2
Ag4DwDpv
-----END CERTIFICATE-----
Generated at Thu Apr 25 01:20:06 2024 by rpki-client on console-fra.rpki-client.org