Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/W6zoN39KxIJPmq_HsThFyWtgsko.cer
File:                     W6zoN39KxIJPmq_HsThFyWtgsko.cer (raw, json)
Hash identifier:          ntZUVSsB4fwAjfJFIVuZaNSdFGaf79WibsEjFxHNG1U=
Subject key identifier:   5B:AC:E8:37:7F:4A:C4:82:4F:9A:AF:C7:B1:38:45:C9:6B:60:B2:4A
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       134B
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F363E214/98A6F1C67D4A11E9860EED6FF8AEA228/W6zoN39KxIJPmq_HsThFyWtgsko.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F363E214/98A6F1C67D4A11E9860EED6FF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:28:24 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 165.16.224.0/20

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4939 (0x134b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:28:24 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F363E214AR/serialNumber=5BACE8377F4AC4824F9AAFC7B13845C96B60B24A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8e:3e:39:eb:0e:ee:1f:a3:3f:c3:ee:62:56:
                    e9:94:83:5d:fc:44:91:2a:0a:7a:7c:b5:89:48:7b:
                    60:b7:b7:1d:fe:1c:9f:81:fc:90:c5:d1:fb:c6:a7:
                    5f:b8:d4:46:23:e9:4e:10:e6:f9:d9:0a:dc:01:ef:
                    a4:e7:ac:68:0d:62:ec:13:09:bd:aa:d6:92:ea:87:
                    3a:6f:ef:26:72:6d:96:92:de:f4:1b:25:58:39:11:
                    40:21:cd:00:b6:c4:52:45:bd:e7:9c:45:36:b8:84:
                    68:67:1a:e1:22:db:c2:22:72:ef:c5:be:88:50:95:
                    cd:b8:56:5d:52:be:0c:75:95:cd:b8:2a:95:20:fe:
                    f8:60:db:3c:0f:19:7a:b6:ab:80:79:0b:68:5a:98:
                    a0:67:0d:b7:b3:84:04:a0:db:0d:7f:d3:17:b1:ce:
                    80:2a:46:cd:ea:05:28:b5:b7:4d:aa:b1:5d:f8:1b:
                    f3:31:ac:48:41:2e:04:59:dd:dc:c8:f9:bf:3a:ff:
                    e5:74:d7:89:8e:2c:42:83:2a:bf:ef:64:2f:38:77:
                    96:0c:1d:17:6b:86:e0:b0:d2:c8:e3:da:d7:f6:ea:
                    b6:98:5e:81:c9:af:45:40:6e:8e:71:07:46:cc:3d:
                    ff:26:d8:16:aa:b3:37:11:94:49:ae:0b:b7:ae:d2:
                    ad:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AC:E8:37:7F:4A:C4:82:4F:9A:AF:C7:B1:38:45:C9:6B:60:B2:4A
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363E214/98A6F1C67D4A11E9860EED6FF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363E214/98A6F1C67D4A11E9860EED6FF8AEA228/W6zoN39KxIJPmq_HsThFyWtgsko.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.16.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         38:c2:2e:d5:b5:6c:47:70:3e:f9:bf:38:9d:0f:98:90:dc:ae:
         b1:70:74:ab:fe:ee:0f:ba:8b:0d:3e:0c:bc:77:4f:1f:6e:cf:
         47:33:ee:1a:b4:84:c0:48:e0:27:c0:fe:38:61:b0:03:76:d9:
         e0:10:e3:fd:41:cb:e9:c6:84:35:5c:39:5d:cd:e9:62:87:2c:
         23:a6:68:d1:fb:bc:8c:e6:46:0c:be:69:21:e1:7e:5d:fa:94:
         aa:d2:70:f5:cb:d7:74:cf:dd:3c:e4:62:3c:ff:d5:8d:a0:35:
         79:2a:ed:dd:0b:9f:0d:a3:08:85:36:1d:75:06:98:ee:11:11:
         73:44:f0:7c:75:3d:37:8f:92:38:d4:49:e4:08:ac:53:4a:dc:
         17:36:03:99:4c:a4:2d:b9:70:65:0b:84:16:f4:3f:17:35:45:
         0e:67:49:3c:f6:1a:d4:a4:91:f0:15:32:ac:3b:71:c8:3e:bb:
         c2:cd:d0:9f:b7:a4:03:ce:bd:95:d9:23:1a:40:29:ab:1a:6d:
         4f:3d:52:bc:55:be:51:98:35:50:b9:f2:fe:fa:8a:48:7a:33:
         96:0f:65:71:ec:a1:48:e7:fa:5b:57:9a:bf:4d:bb:19:df:f6:
         ab:d0:90:23:4d:94:34:9e:75:38:3a:6e:2f:4e:d4:c5:89:d6:
         fd:de:69:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:54 2024 by rpki-client on console-ams.rpki-client.org