Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/dF3XcQDluqV1XTuTwPQnTCebbdc.cer
File:                     dF3XcQDluqV1XTuTwPQnTCebbdc.cer (raw, json)
Hash identifier:          3ioYKYnwNNRdHyH76Mj9MCfLm8qlhiuZbrXio/wiCkc=
Subject key identifier:   74:5D:D7:71:00:E5:BA:A5:75:5D:3B:93:C0:F4:27:4C:27:9B:6D:D7
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       13F0
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:09:17 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 169.255.24.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 07 May 2024 00:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5104 (0x13f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:09:17 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36A39CEAR/serialNumber=745DD77100E5BAA5755D3B93C0F4274C279B6DD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4c:ab:09:8b:15:a9:4f:66:84:30:d7:e4:a7:
                    4c:da:48:ae:8b:24:76:2f:43:cd:28:ac:7f:6b:7f:
                    8f:db:d3:65:4b:dc:e7:4a:e2:0f:5c:80:8e:70:50:
                    4b:54:b6:7c:0a:5e:72:d1:a3:db:bc:d5:5e:5c:7f:
                    04:0a:91:a9:16:85:8c:c1:9d:1c:54:0b:29:87:13:
                    23:b8:3d:a2:c4:ad:d3:e4:a7:62:d7:ad:9c:ac:b0:
                    35:64:5b:1d:ec:d9:e4:e2:03:5a:25:b2:81:3f:74:
                    fc:b8:38:55:9a:60:61:8a:8a:e8:e9:b0:2e:f0:83:
                    96:54:b7:5f:1d:33:ca:25:96:7f:13:5d:a3:62:17:
                    07:2f:13:23:6f:96:de:f8:c8:08:be:38:67:4a:a3:
                    d8:61:a6:b3:01:dc:68:d5:c0:e1:9a:a7:12:e0:fb:
                    c9:98:70:f9:7e:7b:1a:58:a1:be:af:ab:70:62:5e:
                    c5:8c:24:c8:5b:f2:96:b6:c6:88:c5:d3:4c:38:ba:
                    ee:d3:66:4b:48:12:9f:9e:1f:59:d7:50:13:bc:43:
                    11:ab:7b:ed:d1:3b:9a:61:dc:42:3b:8c:2d:5d:e6:
                    bb:1a:23:b2:12:f4:01:a9:ab:0a:ec:52:9e:7c:3d:
                    91:f1:bc:0d:de:18:6a:88:86:ce:8b:65:5e:ac:d6:
                    ba:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5D:D7:71:00:E5:BA:A5:75:5D:3B:93:C0:F4:27:4C:27:9B:6D:D7
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.255.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:a8:c2:82:1f:c9:aa:f3:b4:88:00:d2:71:a3:69:67:90:b1:
         43:85:6a:fc:5e:8a:a1:81:99:5f:d4:43:6a:f7:ce:2c:e5:97:
         d4:c9:f8:2e:aa:3c:f3:28:a9:9c:b7:c6:b6:af:95:c9:17:f6:
         0f:9d:fb:39:f9:26:d3:5f:84:2f:3d:87:7c:14:e6:aa:d8:d5:
         01:b6:ff:9d:3c:96:db:93:33:40:35:23:34:35:ab:74:f7:fa:
         15:25:a8:02:a2:03:e4:b2:b1:b6:ba:3d:23:64:6f:b6:e5:58:
         ee:a0:59:0a:c7:ff:40:69:2c:87:6c:b2:fa:a4:a3:7e:35:5f:
         d0:92:e7:ed:08:22:b0:84:fd:1d:71:31:64:ec:9a:0b:c2:ff:
         de:aa:03:cc:b6:02:d8:21:fe:a6:a8:ce:ec:6f:96:01:31:df:
         06:f0:2e:f5:96:a1:14:09:d1:27:08:5c:d7:6e:88:77:3a:a1:
         2b:32:0d:24:65:1a:a6:40:6f:5e:96:f0:ed:be:93:ef:b2:76:
         0f:57:3b:cd:ce:bd:f1:f7:b6:78:79:f9:36:30:ae:f1:4c:ef:
         22:78:64:28:bf:67:cd:06:9a:8a:a6:4b:e4:bd:e9:69:87:5c:
         9f:2e:26:5a:2e:34:7f:fb:65:11:cd:26:98:9a:b4:3f:8b:cc:
         30:10:25:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:13:16 2024 by rpki-client on console-ams.rpki-client.org