Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/W2-LDYYuYSEE0fy6aR8DaN008KE.cer
File:                     W2-LDYYuYSEE0fy6aR8DaN008KE.cer (raw, json)
Hash identifier:          h1QX3YNXNCBHI35DIiNiLEjj+5ITUc2e07Ako3p2KQk=
Subject key identifier:   5B:6F:8B:0D:86:2E:61:21:04:D1:FC:BA:69:1F:03:68:DD:34:F0:A1
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       145F
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/346B2F2278E711EE9F4E993C4AD9E6FC/W2-LDYYuYSEE0fy6aR8DaN008KE.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/346B2F2278E711EE9F4E993C4AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 05:30:04 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 160.119.216.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5215 (0x145f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 05:30:04 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36C1E88AR/serialNumber=5B6F8B0D862E612104D1FCBA691F0368DD34F0A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:73:03:52:7e:36:7d:a6:c5:f3:ee:e6:f3:b7:
                    01:ac:f1:fe:ad:c7:b4:5a:43:a4:14:cb:16:ea:15:
                    1b:3e:0d:d9:cc:26:61:b1:0f:2d:55:fa:b9:2e:12:
                    44:2d:56:ed:da:ad:74:a5:9e:45:15:48:61:19:fc:
                    ff:35:02:2e:04:04:3b:8e:64:4b:c4:10:d0:39:8a:
                    95:b1:fd:62:3a:20:88:a0:e7:a7:27:b5:33:5c:3a:
                    88:a0:b5:f7:5f:96:e6:53:8d:e6:a3:80:02:57:a9:
                    07:15:c8:f1:3a:a8:16:67:75:b3:ca:c6:b9:7f:b8:
                    66:31:97:5b:51:79:6c:3f:1b:ae:2e:b0:6d:9e:76:
                    33:4a:b7:15:2b:e1:13:e9:96:e5:07:c9:cd:f9:44:
                    cc:2f:e9:b6:d3:91:4b:30:65:28:fa:17:eb:f7:97:
                    ec:d6:eb:9d:e1:89:13:25:eb:f1:0b:44:38:7f:87:
                    d9:1a:5c:ed:28:4e:d9:b1:f1:51:8f:f0:f4:48:95:
                    9d:ae:2f:4d:f5:a8:c6:a0:fa:11:ef:f3:16:99:ef:
                    00:a6:ba:ff:d0:0b:1b:fa:57:6a:e8:d9:61:b1:f5:
                    5a:44:fe:08:ca:d9:bc:aa:18:f1:ad:a4:2d:12:79:
                    53:22:05:f1:0e:ad:ad:e9:f4:20:f9:6f:27:68:1d:
                    7b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:6F:8B:0D:86:2E:61:21:04:D1:FC:BA:69:1F:03:68:DD:34:F0:A1
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/346B2F2278E711EE9F4E993C4AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/346B2F2278E711EE9F4E993C4AD9E6FC/W2-LDYYuYSEE0fy6aR8DaN008KE.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.119.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:1b:58:2d:bf:b9:65:64:5c:b9:57:d5:6b:8e:31:cf:8a:e6:
         35:6a:32:7a:80:81:41:77:43:c2:59:0b:5a:af:45:2e:a1:9d:
         94:8e:00:82:a6:a6:f3:45:58:fd:f4:82:a0:f9:18:1c:fa:7d:
         d3:be:e5:c7:9d:18:bd:43:aa:c3:04:c2:3c:a7:4f:77:1d:aa:
         1f:b1:db:f8:a3:27:69:51:ff:e3:e9:8e:01:26:61:83:6e:ed:
         40:b8:a7:df:79:45:c8:d2:48:70:fb:28:40:21:5d:9d:c4:ea:
         46:f7:dd:78:33:27:0a:24:ba:26:09:e9:ed:1c:55:4e:36:1d:
         99:88:62:17:ef:1a:49:bc:f7:55:e1:cf:0c:1d:00:2b:37:cb:
         cd:30:d4:ff:33:02:d4:f6:38:eb:d2:b9:9e:4c:98:ec:3d:0d:
         ef:4e:7c:50:f0:dc:8a:c3:3e:4f:57:d5:0b:8c:26:7c:55:50:
         14:1f:7b:f2:f9:17:6c:cc:c9:93:a1:a1:23:f8:7d:4e:d8:c8:
         ee:33:23:ba:a9:11:85:f3:c9:78:21:50:de:df:e3:5a:f3:96:
         a6:0a:87:3c:44:6d:9e:4d:9e:6e:64:cf:b7:ba:eb:e6:83:6d:
         00:a5:51:22:5e:ea:0b:11:1a:80:fc:70:1a:1d:02:ff:40:9a:
         b0:23:4f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:51 2024 by rpki-client on console-fra.rpki-client.org