Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/YgYKORQeYf1_hIcoAdkqSoCYD2o.cer
File:                     YgYKORQeYf1_hIcoAdkqSoCYD2o.cer (raw, json)
Hash identifier:          uGOSAC029mdG8NZ3rCp5x4Hwwwr67ShuskB2cYBI5BI=
Subject key identifier:   62:06:0A:39:14:1E:61:FD:7F:84:87:28:01:D9:2A:4A:80:98:0F:6A
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1415
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:18:15 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 137.158.0.0/16
                          IP: 192.48.253.0/24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5141 (0x1415)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:18:15 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36C4E2CAR/serialNumber=62060A39141E61FD7F84872801D92A4A80980F6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:02:fc:fd:9e:b7:e8:3f:c9:1a:ef:49:91:8f:
                    43:55:2b:08:c7:df:4b:1f:d0:9c:95:6e:17:55:92:
                    57:45:e7:0c:31:ea:d3:e1:8f:c1:89:8c:50:31:36:
                    b2:09:8d:ca:f4:ab:46:14:b8:25:07:de:47:75:8d:
                    8c:8e:1a:a8:33:29:99:7d:26:ff:a9:28:0a:23:c7:
                    df:05:52:53:7e:f0:02:ff:d1:df:8e:6e:d0:66:39:
                    b8:3f:05:2c:fd:b0:ba:56:54:d8:6f:16:2a:39:fe:
                    fb:18:67:e3:f1:b6:d4:f2:e2:0a:5a:a6:18:f1:c3:
                    25:1b:3d:bf:de:6b:28:7e:55:6c:a0:00:aa:82:c9:
                    3d:a0:db:64:d0:26:40:c4:c8:50:4d:e3:b8:e4:02:
                    28:52:58:db:ea:d1:ab:84:7f:8e:14:cc:72:65:8f:
                    a0:ba:aa:fd:ee:8c:22:02:03:f9:38:81:1e:21:16:
                    1a:85:b5:ea:76:fc:c4:4a:ce:e5:70:04:d8:33:fb:
                    fe:6d:d4:ca:f9:a4:ce:81:15:5b:80:f8:2c:7c:fe:
                    de:a9:b0:89:24:ec:62:f3:92:7f:07:b6:fd:d5:aa:
                    de:34:1f:ab:00:37:88:e6:95:d4:b6:ca:35:37:76:
                    8f:19:d7:35:0a:fc:35:d6:84:ba:c5:ec:74:f1:8b:
                    8a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:06:0A:39:14:1E:61:FD:7F:84:87:28:01:D9:2A:4A:80:98:0F:6A
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.158.0.0/16
                  192.48.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:22:64:65:a3:d9:85:1e:67:bd:87:61:fb:02:f1:2f:e0:fa:
         71:a5:9e:6d:6c:18:6d:b5:c6:e1:e6:a4:f2:a1:59:66:46:a2:
         20:1f:1d:d2:56:52:8a:b6:25:af:cc:ea:bb:43:75:b1:f3:32:
         32:6d:42:6f:a3:6b:f8:d2:6a:5e:9e:f7:4a:ae:19:f6:62:22:
         d9:26:54:a2:5c:4c:e4:d4:3a:63:82:26:06:f7:07:16:d6:ae:
         2a:a3:14:ed:b9:8e:b1:8e:e3:b7:d5:99:30:d2:88:47:be:a6:
         0e:fd:04:54:59:b0:ae:17:1c:5f:d1:17:14:06:b2:63:f9:ab:
         9c:7b:81:e2:cf:ac:b5:21:23:e1:38:e9:b1:68:f5:9c:b7:83:
         53:04:1e:38:02:3a:1c:2e:ab:70:d2:10:a6:4b:c0:10:78:74:
         5a:ec:55:7a:a9:c6:cf:fc:e7:64:f3:2d:a1:cb:c8:51:fb:4f:
         10:99:dd:8a:a4:21:22:e6:43:bd:c8:c8:cd:33:60:de:df:59:
         b4:00:46:fe:63:e2:93:81:bd:2b:c4:89:55:dc:0d:68:5c:26:
         75:f5:7b:22:f4:22:f0:2c:f8:62:49:2d:4c:fb:33:97:a5:d9:
         f9:9a:5d:c6:97:e0:28:93:e9:67:36:11:a0:23:c7:9b:64:ca:
         bc:63:b3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:51 2024 by rpki-client on console-fra.rpki-client.org