Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
File:                     YAxslYLhTzef1aWysY2CLjZRry4.cer (raw, json)
Hash identifier:          ixKdgrLZcX6FhpRbgAxTohmRd42Nh79KIXxS4uJESwI=
Subject key identifier:   60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1345
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:26:49 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 45.221.64.0/21

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4933 (0x1345)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:26:49 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:af:b2:2b:e7:77:6c:50:a2:30:1b:43:b5:6d:
                    55:db:bb:96:30:f2:60:1f:05:25:62:f9:5f:6d:0f:
                    72:3f:5e:13:0c:1b:b6:e6:26:57:e3:39:57:22:0d:
                    e7:f5:d5:55:30:0d:d6:86:9a:bf:dd:d1:dd:16:7f:
                    74:ae:0a:78:5d:b1:0d:b3:e6:74:c1:59:f8:47:8b:
                    a7:60:73:15:76:09:11:2d:8b:1a:c4:20:79:2d:be:
                    c3:10:c4:99:3f:97:28:16:e3:b1:97:b2:7e:a9:c9:
                    64:d4:40:46:7d:ff:ee:2d:d9:84:8f:87:f9:9f:6d:
                    2b:d0:75:4e:ac:b2:8f:bc:6e:82:e8:9f:a7:9d:8f:
                    68:ce:b0:65:4d:84:dc:f2:2f:69:86:72:96:24:57:
                    70:eb:5a:cf:03:85:4c:28:4d:c7:29:fe:3b:b0:cc:
                    26:d6:67:c4:82:a0:4d:9e:d9:a0:06:bf:5a:27:4a:
                    8b:5f:b0:72:80:b2:42:ac:00:14:43:1d:76:e2:53:
                    ca:95:f0:81:0a:90:e6:3d:65:ff:c9:29:d5:30:70:
                    01:6d:f9:8e:32:a8:7d:34:ae:22:fb:ce:32:24:88:
                    b9:df:e9:aa:ca:bb:5c:73:16:c7:ea:7a:07:69:dd:
                    56:ab:4e:3f:ab:b5:4e:ed:00:a6:f6:68:eb:af:f7:
                    f7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.221.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7a:ac:7d:7a:0e:0c:ec:bb:bb:f7:06:5c:17:57:73:c3:ce:48:
         88:e8:8b:1f:5e:00:aa:47:14:05:32:24:6a:7e:42:a9:72:bf:
         84:8c:f2:f8:77:ec:d2:5c:b6:34:47:1a:4d:e3:06:04:dc:8e:
         e5:5f:e1:3e:c8:0a:1b:18:22:09:8a:9f:d4:e2:35:1c:92:b6:
         01:31:01:81:88:03:53:26:26:72:c9:9d:24:45:29:7c:c4:60:
         10:30:b5:66:30:0d:47:38:e8:51:d8:e2:31:ec:63:0f:a9:7a:
         e4:3c:96:10:48:e2:42:b7:ce:b2:67:38:e3:b5:9a:c1:be:4c:
         bb:51:d5:82:2a:21:d1:6d:c5:29:31:07:18:c7:75:ee:cc:31:
         c7:75:50:12:76:57:97:85:e7:32:87:d4:75:cb:75:50:8b:d6:
         d0:ac:d2:0a:6a:b0:be:5c:22:6e:c7:04:9d:02:9e:65:5b:22:
         a8:e5:16:d9:62:0e:ab:ac:46:fc:4a:e0:c1:36:f1:13:ba:59:
         2c:36:01:83:8d:34:e3:71:2d:f3:84:d9:5a:47:c5:33:d0:a8:
         69:82:bd:82:a7:0a:4b:86:ed:12:83:42:67:29:78:fe:7f:47:
         b0:29:1f:11:4c:6c:86:67:b2:e9:dc:e7:95:03:6d:19:bc:bf:
         7e:cc:c3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:51 2024 by rpki-client on console-fra.rpki-client.org