Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/W2-LDYYuYSEE0fy6aR8DaN008KE.cer
File:                     W2-LDYYuYSEE0fy6aR8DaN008KE.cer (raw, json)
Hash identifier:          zERjZRKeEt8n7slBIbzfA+i42JSBJwr60T0GpgfECSs=
Subject key identifier:   5B:6F:8B:0D:86:2E:61:21:04:D1:FC:BA:69:1F:03:68:DD:34:F0:A1
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1740
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/346B2F2278E711EE9F4E993C4AD9E6FC/W2-LDYYuYSEE0fy6aR8DaN008KE.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/346B2F2278E711EE9F4E993C4AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:22:52 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 160.119.216.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 14 Apr 2025 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5952 (0x1740)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC
        Validity
            Not Before: Jan  1 01:22:52 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36C1E88AR
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:73:03:52:7e:36:7d:a6:c5:f3:ee:e6:f3:b7:
                    01:ac:f1:fe:ad:c7:b4:5a:43:a4:14:cb:16:ea:15:
                    1b:3e:0d:d9:cc:26:61:b1:0f:2d:55:fa:b9:2e:12:
                    44:2d:56:ed:da:ad:74:a5:9e:45:15:48:61:19:fc:
                    ff:35:02:2e:04:04:3b:8e:64:4b:c4:10:d0:39:8a:
                    95:b1:fd:62:3a:20:88:a0:e7:a7:27:b5:33:5c:3a:
                    88:a0:b5:f7:5f:96:e6:53:8d:e6:a3:80:02:57:a9:
                    07:15:c8:f1:3a:a8:16:67:75:b3:ca:c6:b9:7f:b8:
                    66:31:97:5b:51:79:6c:3f:1b:ae:2e:b0:6d:9e:76:
                    33:4a:b7:15:2b:e1:13:e9:96:e5:07:c9:cd:f9:44:
                    cc:2f:e9:b6:d3:91:4b:30:65:28:fa:17:eb:f7:97:
                    ec:d6:eb:9d:e1:89:13:25:eb:f1:0b:44:38:7f:87:
                    d9:1a:5c:ed:28:4e:d9:b1:f1:51:8f:f0:f4:48:95:
                    9d:ae:2f:4d:f5:a8:c6:a0:fa:11:ef:f3:16:99:ef:
                    00:a6:ba:ff:d0:0b:1b:fa:57:6a:e8:d9:61:b1:f5:
                    5a:44:fe:08:ca:d9:bc:aa:18:f1:ad:a4:2d:12:79:
                    53:22:05:f1:0e:ad:ad:e9:f4:20:f9:6f:27:68:1d:
                    7b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:6F:8B:0D:86:2E:61:21:04:D1:FC:BA:69:1F:03:68:DD:34:F0:A1
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/346B2F2278E711EE9F4E993C4AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/346B2F2278E711EE9F4E993C4AD9E6FC/W2-LDYYuYSEE0fy6aR8DaN008KE.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.119.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:e5:a5:2c:ab:ab:17:98:3c:fa:06:0a:1e:50:40:4b:50:f4:
         cf:7b:cc:2d:5b:2c:c5:d4:6f:07:37:ff:db:1c:be:86:71:b2:
         1f:3c:01:1d:cd:9e:86:ba:fa:90:83:12:4c:58:b1:98:3d:04:
         fb:f1:9c:52:5a:e2:11:af:f0:9b:12:5e:02:ae:14:61:f9:15:
         da:6c:3d:eb:a4:86:de:16:4d:4c:4e:2a:61:93:ea:b8:cb:1c:
         51:38:31:90:64:13:5d:46:4c:2f:08:e2:04:10:ff:9e:f0:25:
         9c:bc:5a:d2:ba:8e:f0:40:a2:d2:c9:4a:77:7e:64:34:fc:dd:
         35:b5:a0:4c:05:95:d9:96:32:1b:90:d2:85:eb:4b:0b:e2:0d:
         b2:4f:f1:8d:f7:81:df:eb:83:70:d4:6e:ba:e5:dd:be:b0:84:
         39:84:6d:d4:c0:4b:56:17:a5:90:b5:60:06:c0:43:ba:3a:dd:
         ef:e6:bc:7b:e2:31:60:c0:45:21:9f:fd:1b:49:e8:11:b7:02:
         c9:ef:8e:4f:09:0b:57:40:60:e5:b3:a1:34:89:64:f3:10:82:
         b4:32:70:56:96:ee:f0:47:1a:42:7d:1e:71:9e:cb:37:a2:6c:
         e5:a3:1c:37:d5:1e:29:27:4f:06:ac:34:80:91:15:b6:cc:de:
         32:c7:fa:47
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICF0AwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNTAxMDEwMTIyNTJaFw0yNjAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNkMxRTg4QVIxMTAvBgNVBAUTKDVCNkY4QjBEODYyRTYxMjEw
NEQxRkNCQTY5MUYwMzY4REQzNEYwQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQC/cwNSfjZ9psXz7ubztwGs8f6tx7RaQ6QUyxbqFRs+DdnMJmGxDy1V
+rkuEkQtVu3arXSlnkUVSGEZ/P81Ai4EBDuOZEvEENA5ipWx/WI6IIig56cntTNc
OoigtfdfluZTjeajgAJXqQcVyPE6qBZndbPKxrl/uGYxl1tReWw/G64usG2edjNK
txUr4RPpluUHyc35RMwv6bbTkUswZSj6F+v3l+zW653hiRMl6/ELRDh/h9kaXO0o
Ttmx8VGP8PRIlZ2uL031qMag+hHv8xaZ7wCmuv/QCxv6V2ro2WGx9VpE/gjK2byq
GPGtpC0SeVMiBfEOra3p9CD5bydoHXvlAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
W2+LDYYuYSEE0fy6aR8DaN008KEwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkMxRTg4LzM0NkIy
RjIyNzhFNzExRUU5RjRFOTkzQzRBRDlFNkZDLzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZDMUU4OC8zNDZCMkYyMjc4RTcxMUVFOUY0RTk5M0M0QUQ5RTZG
Qy9XMi1MRFlZdVlTRUUwZnk2YVI4RGFOMDA4S0UubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCoHfYMA0GCSqGSIb3DQEBCwUAA4IBAQBZ5aUsq6sXmDz6
BgoeUEBLUPTPe8wtWyzF1G8HN//bHL6GcbIfPAEdzZ6GuvqQgxJMWLGYPQT78ZxS
WuIRr/CbEl4CrhRh+RXabD3rpIbeFk1MTiphk+q4yxxRODGQZBNdRkwvCOIEEP+e
8CWcvFrSuo7wQKLSyUp3fmQ0/N01taBMBZXZljIbkNKF60sL4g2yT/GN94Hf64Nw
1G665d2+sIQ5hG3UwEtWF6WQtWAGwEO6Ot3v5rx74jFgwEUhn/0bSegRtwLJ745P
CQtXQGDls6E0iWTzEIK0MnBWlu7wRxpCfR5xnss3omzloxw31R4pJ08GrDSAkRW2
zN4yx/pH
-----END CERTIFICATE-----
Generated at Sat Apr 12 07:57:23 2025 by rpki-client