Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.cer
File:                     WY2gHeTpzVR0rQpoJmJb5rgI8Ks.cer (raw, json)
Hash identifier:          o3RsX8UP7g0kgnoYOcigkUGCMVk1buOgiHZdOZFIPF0=
Subject key identifier:   59:8D:A0:1D:E4:E9:CD:54:74:AD:0A:68:26:62:5B:E6:B8:08:F0:AB
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       13B5
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:53:34 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 169.255.112.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Apr 2024 07:21:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5045 (0x13b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:53:34 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F367D68CAR/serialNumber=598DA01DE4E9CD5474AD0A6826625BE6B808F0AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:24:f8:db:1c:be:02:9e:a4:6e:c8:42:f1:b3:
                    a0:3c:b7:4a:7b:ba:aa:65:8f:dd:4b:f4:ff:80:83:
                    d2:f0:08:5c:72:65:e1:0f:68:21:62:8e:c9:70:fa:
                    a5:cc:99:7e:51:f2:b2:1e:2b:f6:df:ec:b0:05:31:
                    52:27:ee:55:b2:de:5e:67:8b:bb:86:b0:a8:42:f8:
                    8b:26:f8:20:5f:22:8d:1c:da:72:06:32:ec:4c:15:
                    38:de:29:e0:af:50:a9:60:1d:14:26:08:e6:3e:d2:
                    21:c4:98:36:35:2d:bb:5b:c4:e5:d2:d3:2a:9f:34:
                    4a:f4:21:ce:b4:d0:4e:26:94:1f:93:8a:ac:ea:ec:
                    49:4f:83:4c:8e:f9:b0:01:d4:4a:6c:11:4c:17:8f:
                    ef:3e:70:d3:0a:63:c4:55:a1:26:e5:50:d5:9b:7f:
                    72:fb:70:41:87:75:eb:97:cf:41:d7:16:26:b9:2c:
                    84:13:b9:1d:7a:c1:ab:bd:a5:74:41:b0:fa:0d:99:
                    13:e1:c3:72:f0:35:82:6f:18:54:ee:77:78:87:5d:
                    21:d5:ec:87:e6:4b:ae:3c:a8:fe:bc:cf:b7:b5:2f:
                    62:47:25:a9:19:35:54:e5:a4:4d:09:f4:bf:2b:0b:
                    f8:e2:10:65:5c:cb:f5:d0:b4:2b:47:67:a7:75:7f:
                    97:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8D:A0:1D:E4:E9:CD:54:74:AD:0A:68:26:62:5B:E6:B8:08:F0:AB
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.255.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:01:51:b1:a6:ed:0f:03:08:6e:ea:33:3e:7b:97:f3:df:d8:
         85:dd:44:7e:6e:ca:5a:17:05:3f:3b:0d:12:bc:42:d1:04:b9:
         48:44:c7:7d:0b:e7:4d:6d:05:80:86:b2:28:85:ff:1a:36:b7:
         58:54:97:f2:6a:98:c7:e3:fd:90:98:48:a5:3f:4f:94:c9:2c:
         8d:24:5c:33:b2:66:c8:1d:5a:87:a1:b7:f8:46:64:4f:db:0d:
         66:ef:6e:f6:dc:88:96:25:20:a1:44:a8:4b:47:46:b6:03:43:
         34:bf:12:92:8f:f4:0c:6e:31:27:88:e5:7f:15:7f:6d:26:2c:
         d3:a1:c7:d5:be:47:93:4c:4a:88:d5:34:94:03:ad:84:16:d3:
         2b:da:80:c6:0d:a1:19:df:b3:21:b7:ac:4c:04:b4:59:64:c2:
         7c:5b:41:6e:f2:54:13:ee:54:80:b7:8e:87:d8:cd:c9:f7:9e:
         b6:99:aa:eb:57:ff:3d:52:96:aa:af:fb:60:90:38:b7:63:91:
         4b:37:31:3e:58:8d:8b:ae:61:b5:81:a3:8d:95:1f:96:07:6d:
         26:f2:d2:9f:d1:d8:88:ed:58:9e:10:1c:1e:0e:cd:21:1a:4a:
         3d:df:8f:b9:a9:09:6a:c5:d8:c4:1c:a4:42:6e:ac:39:cb:46:
         6e:4d:94:81
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICE7UwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNDAxMDEwMDUzMzRaFw0yNTAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNjdENjhDQVIxMTAvBgNVBAUTKDU5OERBMDFERTRFOUNENTQ3
NEFEMEE2ODI2NjI1QkU2QjgwOEYwQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQCsJPjbHL4CnqRuyELxs6A8t0p7uqplj91L9P+Ag9LwCFxyZeEPaCFi
jslw+qXMmX5R8rIeK/bf7LAFMVIn7lWy3l5ni7uGsKhC+Ism+CBfIo0c2nIGMuxM
FTjeKeCvUKlgHRQmCOY+0iHEmDY1LbtbxOXS0yqfNEr0Ic600E4mlB+Tiqzq7ElP
g0yO+bAB1EpsEUwXj+8+cNMKY8RVoSblUNWbf3L7cEGHdeuXz0HXFia5LIQTuR16
wau9pXRBsPoNmRPhw3LwNYJvGFTud3iHXSHV7IfmS648qP68z7e1L2JHJakZNVTl
pE0J9L8rC/jiEGVcy/XQtCtHZ6d1f5enAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
WY2gHeTpzVR0rQpoJmJb5rgI8KswHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjdENjhDL0MzRjky
QTQyOTIwNjExRUI5NUQ2RTU3Q0Y4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzY3RDY4Qy9DM0Y5MkE0MjkyMDYxMUVCOTVENkU1N0NGOEFFQTIy
OC9XWTJnSGVUcHpWUjByUXBvSm1KYjVyZ0k4S3MubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCqf9wMA0GCSqGSIb3DQEBCwUAA4IBAQCmAVGxpu0PAwhu
6jM+e5fz39iF3UR+bspaFwU/Ow0SvELRBLlIRMd9C+dNbQWAhrIohf8aNrdYVJfy
apjH4/2QmEilP0+UySyNJFwzsmbIHVqHobf4RmRP2w1m72723IiWJSChRKhLR0a2
A0M0vxKSj/QMbjEniOV/FX9tJizTocfVvkeTTEqI1TSUA62EFtMr2oDGDaEZ37Mh
t6xMBLRZZMJ8W0Fu8lQT7lSAt46H2M3J9562marrV/89Upaqr/tgkDi3Y5FLNzE+
WI2LrmG1gaONlR+WB20m8tKf0diI7VieEBweDs0hGko934+5qQlqxdjEHKRCbqw5
y0ZuTZSB
-----END CERTIFICATE-----
Generated at Sat Apr 20 08:00:32 2024 by rpki-client on console-ams.rpki-client.org