Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
File:                     cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer (raw, json)
Hash identifier:          gR4VPXLFK3SSwW2jz+OwAI9vQeucu1gI1p2SDckOJz4=
Subject key identifier:   71:2E:E4:6C:CF:13:28:08:7F:2E:3F:28:65:76:11:8C:10:69:B9:7D
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1364
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:34:09 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 165.169.0.0/16

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4964 (0x1364)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:34:09 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F364E67CAR/serialNumber=712EE46CCF1328087F2E3F286576118C1069B97D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:60:4b:ea:03:03:2c:d7:0c:8e:63:bd:32:95:
                    46:57:44:16:ff:d0:a7:b7:f9:91:12:f4:88:12:2f:
                    17:b1:cb:89:dd:79:8a:e8:55:92:d6:07:f8:da:31:
                    c3:81:64:08:e8:f3:77:41:f2:fe:49:a7:ce:0e:20:
                    1e:b0:95:7b:2f:96:15:e6:4f:9b:9f:f7:35:75:b9:
                    0d:71:9a:e9:85:8f:b7:60:76:75:c2:ca:45:5c:de:
                    25:c3:85:5e:53:68:91:51:8c:95:d4:9c:6d:6b:9e:
                    9f:43:4f:04:c7:ef:fd:c2:f8:c7:09:78:da:7b:9f:
                    71:4e:1b:af:22:19:a2:9d:36:ff:9c:8b:79:53:fa:
                    17:68:1d:25:a7:5e:a6:8d:3b:35:78:47:35:58:b6:
                    a6:81:db:f2:79:0f:9a:bb:ee:28:1c:53:75:27:e7:
                    b3:f0:44:00:8d:cb:67:03:8c:c9:8a:4d:11:5d:1d:
                    0a:70:cc:ee:2c:14:55:28:51:1d:fa:5d:e7:a5:7f:
                    aa:f2:fb:c2:a9:3b:dc:2e:bb:29:ee:a0:28:a5:4c:
                    79:47:06:6f:6b:09:2e:2e:72:e4:0d:16:a7:df:bb:
                    8f:61:73:ee:74:74:de:39:80:ad:d6:e6:fa:83:22:
                    c9:58:15:ad:1c:24:9f:fa:8e:81:d5:26:1b:4f:aa:
                    0a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:2E:E4:6C:CF:13:28:08:7F:2E:3F:28:65:76:11:8C:10:69:B9:7D
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.169.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         02:2a:82:2f:c4:87:1b:6a:df:9e:60:36:ca:ce:3e:d7:05:3d:
         fb:b5:1f:93:b1:ee:f4:10:0a:5f:bf:35:ce:a8:ba:fc:49:b0:
         75:44:b5:ff:8f:48:c3:ff:52:f6:34:9e:9f:82:43:ca:1c:25:
         85:75:58:db:b7:e1:e0:93:d3:da:b3:0a:bc:eb:09:2e:7d:b2:
         3c:5e:b5:78:d7:bc:43:52:74:5c:e8:49:a8:1a:40:9a:04:a5:
         fe:6a:dd:fb:f1:db:af:3e:5a:cb:35:1b:01:0b:48:e4:5a:2f:
         d8:bf:78:22:0f:d2:a7:c9:f8:91:87:b7:b4:90:39:20:8a:e1:
         c6:1e:41:c5:28:c5:73:36:33:ee:e8:37:8b:ac:b1:8b:3d:c3:
         b9:0b:90:25:61:9c:69:cd:b9:a1:2d:98:a7:23:36:2b:f6:8c:
         c9:52:bb:5b:ee:f1:b8:8c:91:aa:ca:73:63:b0:7b:7c:fe:de:
         1c:6d:dd:d2:5d:af:04:5b:3d:22:45:b3:24:6d:0a:cc:b9:53:
         3e:4c:3f:73:8d:71:8e:79:56:16:fb:a2:b1:c5:42:89:28:ae:
         ca:b3:13:65:32:f4:91:7a:66:d5:71:f3:2b:ae:49:45:3e:20:
         55:12:d8:c0:1e:fd:d2:ce:09:89:a6:77:f3:35:9e:b5:b8:28:
         00:1d:47:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:51 2024 by rpki-client on console-fra.rpki-client.org