Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.cer
File:                     _zNjsSKdG9mpRJR9Tbvdnn6CSaw.cer (raw, json)
Hash identifier:          ltIkp21y2x4knGfFJZ6PP05+pbWF30jLdz4MsjprDvM=
Subject key identifier:   FF:33:63:B1:22:9D:1B:D9:A9:44:94:7D:4D:BB:DD:9E:7E:82:49:AC
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1347
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:27:15 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 45.221.12.0/22
                          IP: 169.255.216.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4935 (0x1347)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:27:15 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F363C3E1AR/serialNumber=FF3363B1229D1BD9A944947D4DBBDD9E7E8249AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6d:ad:2c:4f:86:a5:91:8e:b5:2a:d7:e3:4c:
                    e2:35:c8:57:b8:80:bc:7d:af:30:c7:2f:1e:72:24:
                    4d:8e:0a:29:6a:cc:02:f3:39:f2:a2:8b:28:27:ba:
                    9b:4f:34:ff:e8:27:46:34:76:8d:e1:38:aa:9b:84:
                    fb:cc:56:95:e8:65:b7:8e:8c:2e:94:62:5a:34:41:
                    14:5c:09:32:60:7b:b0:6a:a1:c2:3c:39:b4:84:a3:
                    a0:68:ec:05:37:27:f0:46:d4:d2:5f:6d:9f:5f:56:
                    62:f1:3d:a2:21:d8:e1:b3:7a:72:9b:64:67:75:cf:
                    cf:8f:84:e1:4c:43:f2:2e:4c:eb:15:1e:10:99:80:
                    ea:53:3a:4d:0f:44:d8:85:c4:35:80:2e:c1:e3:9b:
                    6b:c8:18:97:c6:89:4a:88:99:46:12:cd:b6:c7:d1:
                    2b:55:31:a5:e1:b5:3a:2a:0f:cf:08:b2:2b:06:8f:
                    4a:3c:ed:d7:6a:74:c7:7e:80:71:c3:e1:cd:69:32:
                    24:2e:47:d7:4e:99:1a:4f:bb:da:b7:69:20:a2:15:
                    ac:db:ca:63:c8:f2:94:05:e6:a8:34:19:f0:98:cf:
                    a8:aa:81:8f:59:45:cc:db:8d:ea:c2:bf:61:3f:76:
                    29:11:df:47:1c:c2:4c:bc:80:1b:a9:1d:90:40:9f:
                    7c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:33:63:B1:22:9D:1B:D9:A9:44:94:7D:4D:BB:DD:9E:7E:82:49:AC
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.221.12.0/22
                  169.255.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:5d:f7:ff:ae:61:be:8c:50:cc:07:eb:79:42:ac:0a:e2:76:
         92:a2:64:5d:ac:ea:24:cd:62:d2:e0:21:0b:ff:72:93:22:e6:
         f1:73:d5:ac:6d:1e:1c:c0:88:c1:c5:08:1b:9b:71:6c:72:c8:
         fc:b7:6a:e8:93:4e:37:88:17:2b:eb:5c:0a:e1:ad:84:b9:6b:
         33:11:20:fd:8e:b7:a1:a8:ad:19:f2:29:96:85:43:19:b2:93:
         88:ec:8d:f7:39:04:24:74:e7:4a:b1:53:c1:3a:1f:c6:76:21:
         8a:3a:28:65:82:ae:db:cb:a1:b1:1e:e5:1c:4d:d5:25:81:71:
         98:5b:0b:2b:f0:2e:e8:a4:62:d0:96:0e:96:37:06:0a:f8:4c:
         ca:fd:99:c9:b8:cb:2e:7c:c8:53:25:6d:65:59:1e:4c:98:13:
         33:bd:95:0c:99:c1:3f:a2:aa:49:a6:4f:fd:e3:8a:94:46:37:
         41:5f:d6:76:a3:cd:07:ab:f6:a7:ed:e6:2e:da:4f:bf:9d:6c:
         17:05:25:c9:ea:24:8f:0c:37:50:e5:e8:cb:59:3b:93:42:b2:
         9d:2b:d1:50:9e:0a:3c:67:57:02:a7:fb:dc:5e:0f:17:c1:e3:
         37:00:98:f3:27:f1:a5:38:be:fc:a7:47:16:d2:9e:33:36:26:
         e1:1b:61:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:54 2024 by rpki-client on console-ams.rpki-client.org