Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
File:                     ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer (raw, json)
Hash identifier:          PZPfN+ugyq5RW7TRyE63z6BrVo6pliXnAilFnUfo2TU=
Subject key identifier:   67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       133F
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:25:12 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 160.19.128.0/20

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Apr 2024 00:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4927 (0x133f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:25:12 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3632159AR/serialNumber=6721A192FCFD261A77C1CDDC47891C7814FAC777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3a:87:48:3a:2c:f2:6e:59:c5:a4:4a:fa:c8:
                    85:bd:6b:c5:02:86:d1:04:37:f1:67:d5:82:d4:c8:
                    97:25:e8:51:f1:78:3a:26:00:c8:93:93:d0:c8:0e:
                    45:39:c1:19:ac:4f:08:d8:1c:04:a5:25:65:e1:b4:
                    72:3d:cc:89:46:9d:0a:41:e4:fb:3b:d5:72:7b:76:
                    16:e2:5d:96:80:e9:6c:b7:31:a2:f0:78:5f:4e:c4:
                    11:f6:7c:c8:c3:83:c6:d1:60:6e:42:83:91:58:ce:
                    6b:af:7d:63:11:db:8e:d4:01:7b:e3:ad:b8:ea:50:
                    ff:8e:6b:40:0c:40:c7:a3:0f:b9:c2:1a:23:31:10:
                    3d:df:a6:a1:1f:2f:17:00:a4:81:d0:7d:92:4c:b8:
                    46:be:14:47:e1:86:6f:86:eb:e7:6d:dd:eb:80:eb:
                    b9:ab:76:5a:e4:50:50:d5:62:82:87:9e:d6:dc:24:
                    2f:ff:2f:5b:f0:a6:2f:ff:fc:ec:2a:1c:66:9d:eb:
                    73:16:79:60:22:d1:18:4b:30:5d:ea:18:c4:c6:dc:
                    75:f9:23:43:7d:c7:aa:fd:ab:4c:7c:e2:c4:2a:f3:
                    c1:70:5c:03:16:d5:3d:93:bb:33:be:ac:b2:32:5e:
                    26:da:99:d9:b2:2a:f9:2f:d7:e0:09:81:4d:29:b8:
                    b6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5b:a4:51:4a:26:5d:ed:78:34:19:58:d9:cc:0d:83:80:70:fb:
         96:73:d7:25:ec:bf:63:fb:3d:7b:1e:c2:e5:24:56:56:19:90:
         e7:90:3c:c5:15:c1:e0:51:5e:c1:ab:59:02:8a:af:85:12:18:
         69:c6:28:a6:23:f3:05:18:5b:49:45:c4:4d:0b:72:2e:c8:07:
         85:a9:6e:c1:75:08:f9:65:87:bb:d1:4f:26:38:da:c3:a5:a3:
         57:d2:7e:c9:f2:77:63:f3:a6:d3:f8:ca:30:ac:1f:42:e4:b4:
         8b:9c:f6:f2:67:3a:29:09:c4:fb:21:77:27:d3:20:21:a5:9b:
         af:3f:38:ed:d2:b6:17:71:7b:e5:57:9a:5f:dd:c2:a1:b9:f2:
         b8:4a:e3:6c:d9:be:f4:2c:94:32:9c:c3:73:83:e3:38:47:8f:
         ed:61:e6:21:ce:85:d9:e7:a6:92:de:74:3f:72:ec:b4:db:04:
         38:bf:5c:1f:2a:20:c3:45:9a:0c:79:23:79:f2:70:ac:9d:21:
         f1:0f:fe:2e:0f:43:6d:65:05:25:49:d0:a3:3f:f2:14:a3:b7:
         72:81:a0:9c:e8:58:4d:91:ce:55:10:0a:07:01:af:74:41:ab:
         21:34:06:c4:79:83:d9:77:c3:ca:c5:48:93:21:13:16:99:8d:
         a9:96:2d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:09:46 2024 by rpki-client on console-ams.rpki-client.org