Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer
File:                     bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer (raw, json)
Hash identifier:          qA8Wb1NLvCqCErI3Fc198yUe+iNkn8XWRcqdrR4r3FY=
Subject key identifier:   6C:73:50:75:B2:86:EE:4A:EC:BC:C1:81:03:B6:06:C4:0B:76:B4:E4
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       141E
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:20:20 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 160.119.240.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 31 Mar 2024 00:16:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5150 (0x141e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:20:20 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36C95F1AR/serialNumber=6C735075B286EE4AECBCC18103B606C40B76B4E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:61:4c:43:40:cb:f7:cd:de:14:4b:b7:ab:f1:
                    4c:e2:68:26:dc:8b:55:b8:50:8e:5f:7f:00:5a:87:
                    f8:af:15:75:3f:94:e8:30:78:af:1e:9b:26:18:7a:
                    4f:36:4b:2b:2e:4b:a4:f7:38:83:2c:9e:f4:2a:a8:
                    5c:ea:c9:4d:36:0d:90:89:e9:7b:98:b7:0c:04:7a:
                    88:dc:23:b6:99:c5:f1:e5:4e:25:20:09:63:8c:f0:
                    bb:0d:05:5a:fa:87:bf:69:1d:9c:bc:10:79:22:9b:
                    38:c7:69:db:d3:c2:f9:31:ae:41:dd:fa:f6:00:40:
                    b4:71:d1:6c:11:90:2b:bd:b4:f5:ad:8a:4b:86:36:
                    a4:56:ea:cb:94:3b:74:d8:73:67:a7:20:7a:a8:ab:
                    db:f5:b9:02:b0:fb:f2:48:22:09:a4:6c:5d:02:0b:
                    90:c3:27:1c:f7:f0:a0:46:d2:92:0e:f2:0e:42:d3:
                    1d:b2:a5:03:b3:7a:31:3c:3e:8b:04:9f:0b:04:0a:
                    5a:d5:13:c9:3b:5b:17:2f:1a:d9:b1:d8:89:e0:72:
                    38:27:fd:fc:00:90:5a:62:09:4d:49:ee:cf:e6:ee:
                    c2:53:68:12:0a:ab:d2:af:ac:26:17:a1:98:ab:30:
                    2b:20:57:b6:34:8d:28:94:1e:8c:dd:ff:0e:1d:99:
                    f0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:73:50:75:B2:86:EE:4A:EC:BC:C1:81:03:B6:06:C4:0B:76:B4:E4
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.119.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:f2:d9:0d:a8:fc:84:9e:c7:51:e0:5d:d6:a7:52:88:c6:f9:
         40:14:5a:ba:d4:49:94:08:6f:12:5f:e7:55:9d:4c:6e:90:e4:
         d4:10:a9:20:91:47:4b:33:23:ff:57:21:f5:95:6e:2b:b5:a0:
         28:13:d6:d7:a0:44:a2:8c:07:93:3d:15:e5:34:56:09:af:aa:
         d6:9b:df:ea:ae:ac:fa:e4:52:df:49:f9:1b:05:f1:54:21:07:
         ad:1e:15:6f:39:66:83:8a:68:86:93:b6:16:53:92:8c:2f:d6:
         21:b6:52:c6:c6:77:2c:12:7d:39:ad:65:50:e6:4f:13:27:94:
         9f:d6:b0:5b:da:cb:ef:a2:ca:75:a3:11:7e:65:a8:25:9d:9d:
         e7:0b:5e:03:ca:ea:50:63:b7:fd:c9:84:f8:7f:b2:5a:d7:f0:
         a5:63:75:7b:d9:0a:d0:61:f0:ba:b2:71:ad:6c:90:5f:84:c0:
         45:e8:5f:8c:8c:d2:10:40:be:95:10:71:4e:6b:da:c2:52:17:
         45:3e:fb:1d:c7:9c:6b:9f:41:9a:f9:6f:bc:2e:c3:0d:4c:b2:
         28:b0:c5:28:eb:24:ef:e4:38:56:fe:4b:4a:c4:9b:88:f8:aa:
         19:28:9e:56:28:5e:b3:9b:13:ea:ff:d3:68:d3:60:c2:ea:16:
         81:73:a3:90
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICFB4wDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNDAxMDEwMTIwMjBaFw0yNTAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNkM5NUYxQVIxMTAvBgNVBAUTKDZDNzM1MDc1QjI4NkVFNEFF
Q0JDQzE4MTAzQjYwNkM0MEI3NkI0RTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQCvYUxDQMv3zd4US7er8UziaCbci1W4UI5ffwBah/ivFXU/lOgweK8e
myYYek82SysuS6T3OIMsnvQqqFzqyU02DZCJ6XuYtwwEeojcI7aZxfHlTiUgCWOM
8LsNBVr6h79pHZy8EHkimzjHadvTwvkxrkHd+vYAQLRx0WwRkCu9tPWtikuGNqRW
6suUO3TYc2enIHqoq9v1uQKw+/JIIgmkbF0CC5DDJxz38KBG0pIO8g5C0x2ypQOz
ejE8PosEnwsEClrVE8k7WxcvGtmx2Ingcjgn/fwAkFpiCU1J7s/m7sJTaBIKq9Kv
rCYXoZirMCsgV7Y0jSiUHozd/w4dmfB1AgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
bHNQdbKG7krsvMGBA7YGxAt2tOQwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkM5NUYxLzNBRjBC
Njc0RjM5NjExRUJCMDRDREE0N0Q4QTAxNENFLzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZDOTVGMS8zQUYwQjY3NEYzOTYxMUVCQjA0Q0RBNDdEOEEwMTRD
RS9iSE5RZGJLRzdrcnN2TUdCQTdZR3hBdDJ0T1EubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCoHfwMA0GCSqGSIb3DQEBCwUAA4IBAQCZ8tkNqPyEnsdR
4F3Wp1KIxvlAFFq61EmUCG8SX+dVnUxukOTUEKkgkUdLMyP/VyH1lW4rtaAoE9bX
oESijAeTPRXlNFYJr6rWm9/qrqz65FLfSfkbBfFUIQetHhVvOWaDimiGk7YWU5KM
L9YhtlLGxncsEn05rWVQ5k8TJ5Sf1rBb2svvosp1oxF+ZaglnZ3nC14DyupQY7f9
yYT4f7Ja1/ClY3V72QrQYfC6snGtbJBfhMBF6F+MjNIQQL6VEHFOa9rCUhdFPvsd
x5xrn0Ga+W+8LsMNTLIosMUo6yTv5DhW/ktKxJuI+KoZKJ5WKF6zmxPq/9No02DC
6haBc6OQ
-----END CERTIFICATE-----
Generated at Fri Mar 29 02:38:44 2024 by rpki-client on console-fra.rpki-client.org