Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/XVF78Pc5Gfdta8kSUmnO62DdUyw.cer
File:                     XVF78Pc5Gfdta8kSUmnO62DdUyw.cer (raw, json)
Hash identifier:          PL+8Yk4hN6HFAW68P+X2p9kgsg85Q7IiipQx57dk5ec=
Subject key identifier:   5D:51:7B:F0:F7:39:19:F7:6D:6B:C9:12:52:69:CE:EB:60:DD:53:2C
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       13FE
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/0A48C3D240C311EEBF0E47434AD9E6FC/XVF78Pc5Gfdta8kSUmnO62DdUyw.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/0A48C3D240C311EEBF0E47434AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:12:46 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 192.96.146.0/24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 07 May 2024 00:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5118 (0x13fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:12:46 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36AC63AAR/serialNumber=5D517BF0F73919F76D6BC9125269CEEB60DD532C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:94:e6:ef:35:17:ac:ee:66:a7:dd:f8:4d:8d:
                    85:64:7a:53:91:4a:64:40:42:34:e4:0e:74:6a:23:
                    c1:fe:72:2d:fd:6b:a0:a2:be:b6:9d:b4:93:d4:67:
                    21:f1:91:f4:8f:a4:c7:c9:bc:48:c5:e8:17:85:df:
                    70:00:ea:38:95:c3:a6:c8:ea:8c:33:f4:eb:d3:f0:
                    ad:83:88:82:b7:0c:ce:89:9c:c4:8b:cb:13:69:dc:
                    84:9e:f9:62:53:79:9b:79:2a:5b:dc:54:e9:01:82:
                    8c:10:a4:ff:6b:fa:08:30:85:95:8e:93:67:42:1b:
                    1c:70:19:f6:45:e6:7c:45:1b:66:fc:1f:a8:e7:68:
                    0e:00:66:e3:7c:e8:a2:cc:51:7f:b2:08:90:46:40:
                    ec:cf:d8:21:de:f5:80:26:37:d6:7a:50:92:68:35:
                    68:0d:cd:fd:2a:e1:f2:a2:ff:a1:53:cf:4c:51:5e:
                    28:f5:86:40:b0:08:bb:e8:2f:ba:a8:7c:b7:55:b2:
                    21:42:02:e1:51:63:45:92:0e:e3:e3:16:f9:76:f1:
                    6c:3b:bc:3d:91:e1:05:30:f7:44:a9:48:00:8f:63:
                    50:22:7f:68:b4:19:09:8e:83:c3:99:ad:04:4a:23:
                    e8:6f:73:3d:69:b8:c8:eb:62:55:11:70:44:b5:5d:
                    24:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:51:7B:F0:F7:39:19:F7:6D:6B:C9:12:52:69:CE:EB:60:DD:53:2C
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/0A48C3D240C311EEBF0E47434AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/0A48C3D240C311EEBF0E47434AD9E6FC/XVF78Pc5Gfdta8kSUmnO62DdUyw.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.96.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:ed:dd:68:92:a7:c3:3a:d0:dd:56:d5:58:ef:6d:39:bb:dd:
         49:54:71:32:27:d8:90:e8:da:00:7c:1f:d6:d1:09:84:bc:55:
         8e:80:1f:66:05:8a:5b:ef:69:da:b5:fc:34:57:ae:44:d0:ec:
         d8:8b:c6:a6:b7:c2:6d:c0:66:e3:dc:cb:95:c5:59:a2:ed:be:
         21:20:69:28:e2:09:65:06:04:09:f5:e6:cd:88:47:65:96:50:
         9c:01:8a:8b:10:df:f6:ba:46:3b:2d:44:c1:36:db:a5:c9:72:
         7c:c1:77:43:0c:7f:93:10:ad:22:ef:35:b5:d1:13:1b:c0:41:
         35:ac:65:df:0b:0f:2b:7b:71:42:02:08:23:11:2a:23:17:e3:
         73:a5:62:a5:26:01:4c:0b:65:70:ff:a2:c4:d1:2b:7c:5c:7c:
         5a:cb:2b:e0:e2:8e:9b:b7:9d:5e:e8:b0:26:d3:35:ef:6d:d7:
         b3:f7:93:bf:a9:11:08:04:bd:c9:9e:2d:b9:72:cb:67:a8:8a:
         bf:91:43:57:c2:fd:a9:fa:d8:a9:09:11:a0:65:c4:9b:48:39:
         07:b8:33:20:a7:3d:73:e0:b5:8c:0f:bd:42:88:98:1f:eb:73:
         e6:c9:c7:aa:42:ed:b0:28:8b:d9:24:01:a3:8f:58:21:8f:e8:
         9e:c6:1e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:22:15 2024 by rpki-client on console-fra.rpki-client.org