Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
File:                     ZoAHqf6WL0fU33c33hdQYKxavOw.cer (raw, json)
Hash identifier:          PcfZEIxO0Xd//Ed6t5Mpq7xOQSo4MfL3RIwXRrlgwhU=
Subject key identifier:   66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       14E6
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 22 Apr 2024 10:27:36 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 168.253.32.0/19

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 07 May 2024 00:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5350 (0x14e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Apr 22 10:27:36 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3687682AR/serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:25:44:32:13:2f:bb:3a:93:c0:ba:66:fe:d2:
                    b7:7e:ec:a1:11:8b:64:98:f1:f9:59:85:04:ac:21:
                    c2:4d:8b:31:b9:67:db:cb:7d:9f:ac:f2:be:77:0f:
                    b4:42:a2:18:13:06:6f:fe:0a:79:ee:27:f1:a4:06:
                    fb:1b:6e:70:db:11:50:ae:4f:73:df:44:55:53:fc:
                    e6:73:55:6c:55:ed:2b:c0:c7:4e:6f:8a:d2:b4:c9:
                    af:a3:28:89:63:97:4d:a9:23:e9:28:2f:05:2c:f9:
                    53:ad:f6:58:cb:4e:ba:53:ec:d2:8d:9b:c2:26:e4:
                    ae:5e:56:a1:23:3b:b9:dc:99:93:7c:c5:c9:90:18:
                    7d:24:cb:0a:c0:34:3d:72:dc:d0:a4:c6:00:43:02:
                    b8:a0:58:d6:8a:e0:43:aa:d9:ab:2c:22:39:2c:37:
                    f1:6b:1a:2c:9a:4a:ea:95:37:89:f8:28:b9:3b:74:
                    7f:17:9d:40:47:d4:78:d8:af:e2:0a:0d:b0:2e:e5:
                    44:ca:8d:fc:f0:4e:8b:63:0f:c5:ca:59:05:dc:7c:
                    a4:0b:6d:5b:38:41:10:c1:ec:13:87:a9:a8:51:c3:
                    2e:1e:67:d5:69:b4:9d:7b:6b:cf:6c:9f:b2:9d:55:
                    2f:c6:4e:02:03:e5:d1:36:8a:ac:11:2d:e5:cc:84:
                    8f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.253.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         92:35:f7:72:55:2c:5b:12:5d:37:aa:a2:a2:bd:63:c2:1a:97:
         58:09:c3:b5:28:fb:23:dc:c5:6b:6f:17:77:25:ae:86:b1:be:
         c3:3f:ba:6e:74:da:35:35:aa:b3:7e:73:4f:d3:41:18:a4:12:
         7d:c9:f7:a6:7d:a3:33:37:03:d1:2a:16:e3:dc:56:0f:e4:4e:
         e1:5c:1a:8a:d8:7a:ff:28:5e:6f:3e:12:ca:89:f4:41:86:25:
         a2:67:f2:8b:3f:e3:b3:56:ec:de:2f:d8:e1:bb:a6:1f:17:ea:
         39:d3:18:e3:d7:01:c7:dc:b4:38:b9:c5:c0:12:1e:30:04:81:
         20:bf:9a:1f:0c:3b:ff:9e:64:64:f0:4a:9f:8f:74:39:14:d6:
         b8:c4:f1:26:fb:aa:0d:d4:5a:c9:57:e3:dc:d2:bc:b2:3e:12:
         f5:9b:86:60:80:e2:97:b4:0a:28:b2:99:e7:59:3d:56:1a:16:
         a8:0b:fd:41:a6:e1:bc:3c:60:40:67:f5:51:8c:2b:b5:0a:ce:
         2c:a1:f3:43:49:29:c7:51:f4:7a:f7:72:c4:a4:eb:7f:d1:66:
         9a:3f:8f:db:d6:4e:5a:cd:d7:d2:61:43:a3:f0:ed:0a:42:4a:
         07:ab:11:33:5c:72:ad:f5:6e:19:15:f6:8e:e8:09:a4:e1:d5:
         1e:03:78:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:22:15 2024 by rpki-client on console-fra.rpki-client.org