Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/Udu6_LtToFkBz0FQ2Njs1hjk19w.cer
File:                     Udu6_LtToFkBz0FQ2Njs1hjk19w.cer (raw, json)
Hash identifier:          pGGLX7rPpsI6ADbI7r6zX0IFC4WgAJBYEVfuwcM/UBU=
Subject key identifier:   51:DB:BA:FC:BB:53:A0:59:01:CF:41:50:D8:D8:EC:D6:18:E4:D7:DC
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1388
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3662367/A06359C2082011ED9C901AF7F1222468/Udu6_LtToFkBz0FQ2Njs1hjk19w.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3662367/A06359C2082011ED9C901AF7F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:42:46 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 160.226.128.0/20

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 28 Apr 2024 00:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5000 (0x1388)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:42:46 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3662367AR/serialNumber=51DBBAFCBB53A05901CF4150D8D8ECD618E4D7DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fb:7b:2b:0d:f5:cc:2f:b0:c6:63:e9:23:6e:
                    81:c0:15:b4:05:40:db:75:f9:b6:ea:65:ef:95:6b:
                    d1:dc:ea:24:ed:18:ca:12:35:68:07:00:db:17:6b:
                    2c:c0:ae:2a:2c:c1:58:81:39:60:db:6f:cf:8d:27:
                    00:65:57:22:92:b7:7a:af:5b:b3:cd:26:73:23:17:
                    6c:51:98:16:d6:da:99:fd:f3:d2:0d:35:4f:f2:d5:
                    22:5e:25:f6:57:82:82:dd:f4:fd:0d:18:a4:53:20:
                    39:be:c3:c0:7c:70:91:93:c9:ff:da:51:ba:98:c7:
                    28:ce:c3:2d:85:2b:44:be:cb:d5:f0:34:64:7b:57:
                    09:2a:0e:44:2a:ee:c2:39:22:63:39:5c:dd:61:63:
                    06:78:bf:d1:79:ff:78:e9:98:bd:09:b0:42:6a:41:
                    e9:16:f4:9c:de:16:66:14:08:b1:0a:bb:2d:28:36:
                    4a:ad:a6:ca:2d:28:a6:e7:70:ad:09:35:25:f8:89:
                    51:3c:27:2c:d0:4f:a1:28:72:2a:eb:a3:3b:58:67:
                    e7:44:9a:30:4f:65:23:17:87:9a:54:1b:4c:12:8d:
                    3b:56:b6:b6:c7:60:65:8b:ca:99:bf:e8:5c:0e:59:
                    ee:32:79:28:8d:f7:dd:c4:37:e4:e7:62:c8:44:d5:
                    22:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DB:BA:FC:BB:53:A0:59:01:CF:41:50:D8:D8:EC:D6:18:E4:D7:DC
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662367/A06359C2082011ED9C901AF7F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662367/A06359C2082011ED9C901AF7F1222468/Udu6_LtToFkBz0FQ2Njs1hjk19w.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.226.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6a:fd:e7:11:98:56:a5:26:1b:b6:87:16:00:96:d8:17:21:91:
         ca:fd:10:17:7d:26:a2:ff:39:db:cf:09:0a:ef:0b:03:0a:b7:
         51:06:da:11:bc:44:7b:89:d6:cb:22:6b:a8:e6:6a:09:58:04:
         b2:79:c4:c8:39:a7:44:ec:6d:da:50:a8:c8:e1:93:fb:1b:3e:
         07:c9:df:fa:7e:45:06:6c:d1:d4:78:8f:1a:b8:4a:cb:13:ec:
         9c:c8:98:06:2f:4a:97:ea:1c:1d:9b:00:b0:b8:4d:d8:46:4e:
         71:51:0e:c2:5b:4d:1e:f4:2a:c3:39:de:59:d4:7f:db:74:82:
         c4:60:e5:9c:c1:38:b0:38:97:b6:44:7d:8b:42:8b:c6:ca:32:
         8c:24:22:69:58:ac:83:87:fc:34:ca:39:bb:a1:18:fa:a6:72:
         e9:03:31:af:be:9f:4e:00:d9:0b:51:77:59:b5:0f:5a:94:28:
         7e:2b:c8:9b:0b:54:85:1e:d6:13:27:2e:43:f7:d1:90:44:31:
         fe:ac:75:03:56:f9:d6:57:17:bc:07:52:2a:e6:3e:e9:f3:35:
         f1:6c:a1:46:f0:e0:2c:50:a9:cb:79:88:b2:0e:cd:10:46:3a:
         6d:78:ce:cd:3e:09:5f:53:d2:9b:b3:28:62:d1:80:df:2b:42:
         94:6f:d3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:12 2024 by rpki-client on console-ams.rpki-client.org