Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/WsYHxJzTMEH1jO7lTHZg4EWb9yc.cer
File:                     WsYHxJzTMEH1jO7lTHZg4EWb9yc.cer (raw, json)
Hash identifier:          Ni281yudM0+M6HMewt1P2TtSB832XnNhjNES//k6O4A=
Subject key identifier:   5A:C6:07:C4:9C:D3:30:41:F5:8C:EE:E5:4C:76:60:E0:45:9B:F7:27
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1458
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/788C9C7272B111EE89C1B56D4AD9E6FC/WsYHxJzTMEH1jO7lTHZg4EWb9yc.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/788C9C7272B111EE89C1B56D4AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:34:42 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 169.255.176.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 07 May 2024 00:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5208 (0x1458)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:34:42 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36FCA07AR/serialNumber=5AC607C49CD33041F58CEEE54C7660E0459BF727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bb:d7:bf:71:7a:e2:11:ec:e7:79:8c:bf:b9:
                    52:f6:25:cb:99:1d:15:8a:47:85:ce:59:e2:a9:ed:
                    1b:ac:c5:fa:41:15:5d:d3:41:75:0d:fd:52:92:cf:
                    c6:2b:e3:8b:b1:49:63:b8:ee:c3:25:2d:e1:7e:2f:
                    8f:ff:8a:4b:3d:f9:6a:21:17:ad:ce:ed:bf:99:6e:
                    b1:f2:12:ca:75:2a:30:6f:c7:05:f7:5a:88:3f:3b:
                    d9:8e:d5:39:da:26:44:04:a1:f8:a0:cb:b0:ad:07:
                    88:d0:f3:4d:bc:7a:8d:d1:41:1a:a9:d4:f6:c5:3b:
                    0d:0d:ea:7d:7d:92:fe:f8:26:02:71:5b:74:8f:ef:
                    37:1f:a1:27:f1:fa:f3:2d:16:50:50:f9:aa:d3:69:
                    b1:be:aa:a8:0c:fe:ee:60:d1:c4:6b:78:d6:36:27:
                    f4:3d:13:e2:f2:61:c6:b0:e0:d7:1e:65:d3:d8:a6:
                    28:73:03:32:d2:f7:26:bc:75:0d:b1:87:30:c2:c7:
                    e0:f3:c1:3a:cb:99:ba:3f:46:a3:04:06:96:8e:ce:
                    0a:c9:1c:be:04:01:0e:45:0e:67:8f:e5:73:be:78:
                    f1:e8:b6:63:b1:af:11:c9:0b:a2:e9:51:61:40:88:
                    b4:ce:ce:44:b0:84:12:51:95:aa:96:f5:94:ae:67:
                    50:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C6:07:C4:9C:D3:30:41:F5:8C:EE:E5:4C:76:60:E0:45:9B:F7:27
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/788C9C7272B111EE89C1B56D4AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/788C9C7272B111EE89C1B56D4AD9E6FC/WsYHxJzTMEH1jO7lTHZg4EWb9yc.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.255.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:d1:ff:ea:0a:39:45:d6:3f:dc:b2:f3:10:1f:26:69:db:8f:
         9c:83:6f:d6:f6:ae:ef:c6:be:09:e9:7d:6d:5e:7c:27:43:70:
         87:9c:01:dd:7c:83:da:1a:24:4a:85:7e:60:db:a2:b9:ee:e9:
         ae:7d:8d:6c:a3:ab:99:69:fb:a8:8c:d8:1b:9b:79:c1:59:19:
         ce:fa:bf:ae:39:4a:29:4d:ed:48:2e:83:15:8e:02:a7:ed:90:
         fc:cd:ef:5e:aa:47:6c:a4:69:5a:f7:1d:0e:ef:7a:0f:5d:26:
         6b:82:50:37:60:85:24:c9:2b:ca:8b:1f:7d:9f:e7:3b:11:9e:
         04:8b:7f:1b:0b:ee:8e:23:47:25:53:f8:74:8c:b5:19:e2:28:
         7e:31:84:36:40:7d:aa:1f:ce:5c:27:60:48:6f:cd:98:79:8c:
         39:6e:5a:dd:f8:1a:14:92:63:5f:a5:56:60:d5:dd:5c:ad:9a:
         06:9e:2b:da:4f:0c:4d:2d:58:0b:9f:d3:62:aa:57:78:c6:91:
         ae:5d:7d:dc:12:68:88:e1:20:07:c8:ac:ee:a0:5a:0b:75:b3:
         6a:1a:85:1d:3d:94:cc:5d:a3:b7:bf:ff:05:c7:68:8b:8f:ca:
         3d:32:b9:52:ee:ed:ef:df:e0:82:3a:0f:6a:5e:c1:66:be:0b:
         08:79:8d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:22:15 2024 by rpki-client on console-fra.rpki-client.org