Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/TuWp-sfUawsWJ8ZO5wq929LVXn0.cer
File:                     TuWp-sfUawsWJ8ZO5wq929LVXn0.cer (raw, json)
Hash identifier:          aTsWN7OM+U/x+FhnoXfl+iBPL9t4g8tKFurkfPkuFM4=
Subject key identifier:   4E:E5:A9:FA:C7:D4:6B:0B:16:27:C6:4E:E7:0A:BD:DB:D2:D5:5E:7D
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       139B
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F366EFDF/B8FBFDC6C3A811EBB226A912F8AEA228/TuWp-sfUawsWJ8ZO5wq929LVXn0.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F366EFDF/B8FBFDC6C3A811EBB226A912F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:47:21 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 192.145.186.0/23

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Apr 2024 00:16:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5019 (0x139b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:47:21 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F366EFDFAR/serialNumber=4EE5A9FAC7D46B0B1627C64EE70ABDDBD2D55E7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:da:86:81:bb:3a:9b:70:ef:0c:1f:92:c8:e2:
                    28:3e:c3:e6:aa:17:40:56:4c:27:83:67:e3:77:07:
                    8a:18:f7:7e:72:97:df:bf:b2:d1:15:ee:52:36:c7:
                    86:6f:85:66:fd:d9:eb:df:50:ba:54:5a:5f:dd:98:
                    49:bc:12:b7:21:66:f2:d4:0c:b2:e1:09:ed:5a:fc:
                    ba:b9:53:d4:ca:87:4b:b8:dd:c3:09:e5:43:1e:ce:
                    62:a3:e6:17:95:e8:44:16:1a:bd:82:d8:50:87:84:
                    2d:7c:55:86:85:9a:49:6b:22:bf:8a:ca:8c:ca:d3:
                    72:70:27:e3:ed:17:aa:b1:15:9a:e8:e8:e2:4a:e1:
                    0c:e0:d2:83:e9:0a:dc:2c:d5:9f:c7:df:0a:d0:19:
                    12:54:ef:a3:af:64:e3:87:bc:06:bd:4c:2f:1b:67:
                    00:10:e0:cd:44:6f:51:56:57:7d:9c:f8:07:49:79:
                    dd:60:19:e4:00:1e:30:f1:0a:ab:ee:81:73:18:81:
                    7c:c0:39:9f:e6:c0:d6:61:95:ef:db:d4:f9:de:f7:
                    ce:94:ce:25:ee:32:76:6a:76:6e:a8:64:c9:1a:16:
                    46:1e:46:91:37:0a:38:52:81:78:87:d5:27:3b:96:
                    d6:16:a0:26:79:86:6d:cd:a5:da:11:c1:4d:13:16:
                    77:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E5:A9:FA:C7:D4:6B:0B:16:27:C6:4E:E7:0A:BD:DB:D2:D5:5E:7D
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366EFDF/B8FBFDC6C3A811EBB226A912F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366EFDF/B8FBFDC6C3A811EBB226A912F8AEA228/TuWp-sfUawsWJ8ZO5wq929LVXn0.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:c9:5d:4f:f9:dc:6a:41:64:bc:f6:0b:d7:73:3c:3d:37:30:
         d3:16:a7:fd:ba:aa:8f:bd:63:7e:7b:c2:3d:62:f9:55:d4:e2:
         2b:23:5e:8a:a6:fe:03:13:88:c6:98:bd:5b:14:37:ad:ea:9c:
         30:6f:59:1e:f4:9a:e6:b1:3c:3f:b6:bb:5a:7f:19:e2:14:f5:
         72:8a:48:1d:00:c3:a5:c8:5d:2d:69:74:81:96:78:08:e9:8d:
         08:41:6a:5e:cb:7a:11:c8:08:82:62:85:a2:24:47:06:3b:f2:
         63:dc:7c:5f:bf:ca:fe:6b:24:46:4e:f2:a2:bd:d4:17:3e:22:
         be:b9:c9:a9:3a:52:fb:a8:f7:7f:5e:a8:f0:6e:c5:14:e6:25:
         5f:d3:1d:41:fb:4c:4d:69:3e:73:1e:9f:c2:7a:89:5f:6f:46:
         c3:04:8d:32:60:9a:73:f7:47:2a:a4:56:38:1e:f4:8e:ca:5b:
         39:bc:66:83:f0:66:ee:15:7e:02:b0:41:9e:d4:1c:9a:3b:05:
         c8:25:c4:45:32:15:9a:b0:91:9a:6b:1b:34:1a:b2:b4:8a:a6:
         56:ab:76:2b:6f:ab:58:6b:bb:f0:89:9f:d1:fe:e5:a5:08:8c:
         72:7a:32:cc:6d:19:22:87:9c:d8:07:b8:e2:97:bd:f1:5b:67:
         1e:65:cc:c9
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICE5swDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNDAxMDEwMDQ3MjFaFw0yNTAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNjZFRkRGQVIxMTAvBgNVBAUTKDRFRTVBOUZBQzdENDZCMEIx
NjI3QzY0RUU3MEFCRERCRDJENTVFN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDm2oaBuzqbcO8MH5LI4ig+w+aqF0BWTCeDZ+N3B4oY935yl9+/stEV
7lI2x4ZvhWb92evfULpUWl/dmEm8ErchZvLUDLLhCe1a/Lq5U9TKh0u43cMJ5UMe
zmKj5heV6EQWGr2C2FCHhC18VYaFmklrIr+KyozK03JwJ+PtF6qxFZro6OJK4Qzg
0oPpCtws1Z/H3wrQGRJU76OvZOOHvAa9TC8bZwAQ4M1Eb1FWV32c+AdJed1gGeQA
HjDxCqvugXMYgXzAOZ/mwNZhle/b1Pne986UziXuMnZqdm6oZMkaFkYeRpE3CjhS
gXiH1Sc7ltYWoCZ5hm3NpdoRwU0TFneNAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
TuWp+sfUawsWJ8ZO5wq929LVXn0wHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjZFRkRGL0I4RkJG
REM2QzNBODExRUJCMjI2QTkxMkY4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzY2RUZERi9COEZCRkRDNkMzQTgxMUVCQjIyNkE5MTJGOEFFQTIy
OC9UdVdwLXNmVWF3c1dKOFpPNXdxOTI5TFZYbjAubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBwJG6MA0GCSqGSIb3DQEBCwUAA4IBAQAryV1P+dxqQWS8
9gvXczw9NzDTFqf9uqqPvWN+e8I9YvlV1OIrI16Kpv4DE4jGmL1bFDet6pwwb1ke
9JrmsTw/trtafxniFPVyikgdAMOlyF0taXSBlngI6Y0IQWpey3oRyAiCYoWiJEcG
O/Jj3Hxfv8r+ayRGTvKivdQXPiK+ucmpOlL7qPd/XqjwbsUU5iVf0x1B+0xNaT5z
Hp/Ceolfb0bDBI0yYJpz90cqpFY4HvSOyls5vGaD8GbuFX4CsEGe1ByaOwXIJcRF
MhWasJGaaxs0GrK0iqZWq3Yrb6tYa7vwiZ/R/uWlCIxyejLMbRkih5zYB7jil73x
W2ceZczJ
-----END CERTIFICATE-----
Generated at Thu Apr 18 00:47:06 2024 by rpki-client on console-fra.rpki-client.org