Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/VdvLWIZ1BvehPgl-PTWa3WJwsXU.cer
File:                     VdvLWIZ1BvehPgl-PTWa3WJwsXU.cer (raw, json)
Hash identifier:          ZoQ/swCc71b1li56cO7foNm70eri+380VVic+ahT3vQ=
Subject key identifier:   55:DB:CB:58:86:75:06:F7:A1:3E:09:7E:3D:35:9A:DD:62:70:B1:75
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       15F6
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/DC77632AB27011EF91F22F42762E951A/VdvLWIZ1BvehPgl-PTWa3WJwsXU.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/DC77632AB27011EF91F22F42762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 04 Dec 2024 18:52:17 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 165.73.232.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Dec 2024 00:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5622 (0x15f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Dec  4 18:52:17 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3623AE4AR/serialNumber=55DBCB58867506F7A13E097E3D359ADD6270B175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:7b:78:0b:60:74:09:97:0f:04:cf:a0:ec:5a:
                    bb:32:35:61:60:20:5b:03:9f:15:65:6c:25:c1:1f:
                    8f:49:ae:66:9a:cb:1f:27:a2:5f:dc:0f:c0:83:0d:
                    8e:aa:4d:2e:99:18:22:c2:5a:70:cd:11:9e:f2:d1:
                    a1:da:76:bd:f2:5c:e6:fc:1c:40:f8:74:48:f2:ea:
                    65:99:50:b3:2e:22:5d:90:4b:5d:97:12:7c:17:79:
                    09:53:f4:14:1b:b3:07:bc:78:33:2f:cb:f9:cc:33:
                    bc:a0:1b:1b:55:59:d7:d0:67:3a:b0:1e:fe:4e:5f:
                    40:b7:76:89:46:6d:36:da:97:ee:4a:e4:5a:b0:42:
                    e7:99:26:7c:89:6f:8f:50:72:b9:bf:b9:18:3d:d7:
                    76:aa:c5:6d:51:fc:53:0b:80:83:eb:d4:df:ae:58:
                    51:24:9a:15:bc:2c:f9:82:38:e0:1a:06:02:30:6c:
                    3a:b7:b4:c4:1f:b3:74:e5:dd:2e:a6:0c:04:68:c7:
                    0e:6c:0b:23:02:f1:f0:38:bc:6d:af:f9:1a:bf:82:
                    e2:a9:72:74:a3:6a:4d:df:4f:0a:d4:a1:47:b8:0c:
                    ee:23:f3:aa:ea:1d:72:67:3e:15:df:9f:83:c1:f3:
                    4a:71:f8:4a:6d:ff:4c:db:fa:45:95:9b:06:1b:0e:
                    c1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DB:CB:58:86:75:06:F7:A1:3E:09:7E:3D:35:9A:DD:62:70:B1:75
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/DC77632AB27011EF91F22F42762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/DC77632AB27011EF91F22F42762E951A/VdvLWIZ1BvehPgl-PTWa3WJwsXU.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.73.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:df:1e:57:8b:b6:e4:4b:6a:6c:78:de:89:90:1f:7a:03:94:
         70:f0:3e:16:9a:17:88:31:9c:c0:6a:98:2a:c8:16:7c:3c:4e:
         b3:e2:21:12:e4:dd:fd:f1:b4:3d:2b:de:26:86:2f:56:10:0b:
         4b:6f:90:8f:eb:de:d1:0b:64:47:0f:6b:7f:e0:92:33:fc:84:
         9d:d1:4f:b5:45:05:0c:1e:cd:66:1b:10:71:39:0b:50:5e:52:
         5a:87:08:e9:2a:76:28:03:37:1f:5f:52:24:fb:2f:e5:6a:9e:
         ff:c8:e4:3d:66:36:ca:6c:4b:29:c0:8c:44:2c:a2:8a:7d:e5:
         ca:01:0d:e0:c4:a7:9e:2c:46:62:c6:63:ac:10:28:fe:97:db:
         14:d8:f6:a4:38:90:7e:00:27:45:97:9b:8b:5d:63:42:c1:9e:
         bc:36:a3:bc:04:ad:c5:d0:72:81:d0:26:82:cb:b0:05:53:2d:
         d1:82:f2:85:91:43:ba:2e:7f:55:ed:f8:3b:c9:b6:a4:7b:77:
         30:41:86:99:be:61:9a:87:c8:f9:34:19:f5:b8:e7:b6:d6:64:
         70:a9:cd:8b:62:93:d5:c8:dd:fc:90:88:97:37:fa:23:bf:df:
         35:a0:7a:06:ea:1e:45:3d:2d:20:10:a0:93:36:b2:de:a3:f3:
         73:0f:d5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 01:24:19 2024 by rpki-client on console-fra.rpki-client.org