Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.cer
File:                     bqmAE-4Qv7U6MCc7bEz7Xs50YYs.cer (raw, json)
Hash identifier:          UDJARpoj21/1dy4QIif0Py2UBFvgYtxCkJ64svhTzGw=
Subject key identifier:   6E:A9:80:13:EE:10:BF:B5:3A:30:27:3B:6C:4C:FB:5E:CE:74:61:8B
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1354
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:30:15 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 156.160.0.0/11

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4948 (0x1354)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:30:15 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36432B6AR/serialNumber=6EA98013EE10BFB53A30273B6C4CFB5ECE74618B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:62:d1:ba:c4:55:ea:b5:c0:b1:80:6c:be:a5:
                    77:98:75:86:9a:9f:da:d6:0e:ce:2e:ad:f7:c3:d6:
                    c3:c3:57:ca:23:8c:6f:ed:55:2f:70:d8:9f:c0:3d:
                    f8:21:9d:f1:8c:17:33:d9:0d:7c:82:08:7c:bc:08:
                    51:5a:ca:f6:58:b9:05:b9:52:f6:a8:67:31:ed:71:
                    f7:98:10:ea:03:df:dc:9c:7e:0e:85:c4:a3:df:a4:
                    4f:49:91:98:41:90:a7:c1:a5:ee:51:ee:7b:e7:29:
                    55:68:72:88:b7:b3:cc:c5:bf:66:60:94:2a:85:9b:
                    11:88:35:1a:e2:f6:7c:42:0d:cc:12:bf:93:96:c8:
                    47:f5:41:6c:f6:26:3c:61:90:ea:c5:50:90:8d:0a:
                    9d:fd:90:93:b7:ac:04:a4:a8:0b:ea:db:10:71:02:
                    3d:47:dd:7e:79:19:36:98:a2:a7:4b:ff:74:e2:76:
                    16:e4:0c:6e:9d:1b:67:1a:bc:46:67:b8:94:ac:f8:
                    09:d0:ba:96:1b:08:4f:e7:35:71:69:74:f0:57:53:
                    07:83:c1:f2:4c:ee:5d:15:f8:15:22:89:2f:cd:d2:
                    d2:fc:26:19:13:d3:43:bb:a2:c6:88:14:43:a2:d4:
                    5d:fc:89:bb:4b:ac:d3:86:88:23:d0:90:0e:fa:d9:
                    48:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A9:80:13:EE:10:BF:B5:3A:30:27:3B:6C:4C:FB:5E:CE:74:61:8B
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.160.0.0/11

    Signature Algorithm: sha256WithRSAEncryption
         a4:a9:70:fd:a5:13:f6:fe:bc:78:6b:fb:5f:00:38:3c:63:5d:
         05:55:d7:e9:76:a7:fa:86:f4:fe:67:c3:ec:8d:d1:fa:74:25:
         34:a8:b7:25:23:f0:ba:b1:b5:c0:5b:c3:ca:b4:b2:4f:67:32:
         5d:e8:22:c6:98:be:4f:49:d8:38:c5:a0:16:5b:b5:5f:7a:bf:
         d4:3f:31:4d:5f:25:aa:21:f2:45:2a:50:60:ec:b7:d3:1b:5b:
         47:b8:f7:83:a5:fd:ba:d8:82:17:31:fd:13:3b:be:3f:60:46:
         3b:1c:10:5d:02:2f:49:bd:e6:65:13:39:31:ad:7e:68:2e:37:
         25:32:19:54:e8:d5:dd:6a:12:83:9a:e7:8b:d9:7f:40:91:44:
         ec:d9:5b:b7:e2:90:f8:50:61:54:48:8f:d9:17:59:d1:b5:94:
         b1:1f:e3:92:50:6a:72:b6:90:42:75:b1:f3:1b:ea:d5:f1:c1:
         56:48:f2:64:86:1b:de:0a:50:52:73:85:aa:62:e6:2d:f1:bc:
         d0:6d:0d:8f:a0:ca:3a:04:e5:33:5a:86:36:a8:93:5b:36:37:
         85:26:6d:9d:3c:1b:a8:66:20:55:8e:9a:e2:38:f2:d1:26:ef:
         b3:76:c4:01:44:1a:5d:19:bd:4c:bc:d0:18:e8:24:99:fc:bd:
         38:d3:5c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:51 2024 by rpki-client on console-fra.rpki-client.org