Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/e9fVVRg6gfgLprfZNoeRJF7Y0z4.cer
File:                     e9fVVRg6gfgLprfZNoeRJF7Y0z4.cer (raw, json)
Hash identifier:          KqGVPZxV8ob7X/96Il0h7rQDVryDsA0FKIPqhbSWKzA=
Subject key identifier:   7B:D7:D5:55:18:3A:81:F8:0B:A6:B7:D9:36:87:91:24:5E:D8:D3:3E
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1353
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/e9fVVRg6gfgLprfZNoeRJF7Y0z4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:30:01 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 156.160.0.0/11

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 28 Apr 2024 00:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4947 (0x1353)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:30:01 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36432B6AR/serialNumber=7BD7D555183A81F80BA6B7D9368791245ED8D33E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:43:5e:58:39:50:7a:da:7f:4b:f7:d4:50:6b:
                    a2:c7:0d:84:58:46:4b:34:c9:4e:8a:43:ac:38:d8:
                    ba:de:90:d1:d7:f3:0d:ed:5d:c8:0f:91:48:b1:b0:
                    4b:00:fb:70:ac:4a:15:dc:81:50:a3:2c:60:66:d2:
                    a0:96:32:62:fb:14:aa:bf:fd:b6:4d:ec:8c:f2:43:
                    95:aa:70:f9:f6:c8:1c:c6:09:e1:d3:b5:62:14:59:
                    27:93:a6:90:9f:e1:33:71:28:68:5b:f5:87:1a:8a:
                    c5:83:3d:2e:14:4f:29:cb:80:5b:89:90:38:44:e3:
                    9e:2b:6f:eb:cf:1c:7d:d1:52:9e:63:39:07:1b:c5:
                    24:f5:74:39:1d:34:4c:8d:5c:fd:74:6e:73:d7:19:
                    8b:a4:08:3a:93:ae:3b:d3:8d:d0:2b:33:c3:d9:4a:
                    82:6f:93:b3:4f:3a:76:e0:5f:46:18:10:1b:41:6c:
                    d3:c7:f5:db:ff:44:c2:68:a3:ef:ae:43:3b:38:09:
                    2c:78:bf:09:30:a0:cf:9c:7a:2b:df:ec:67:4a:d1:
                    3c:b1:ce:91:92:59:d7:34:fa:11:e2:47:25:bd:06:
                    50:59:15:df:16:d1:1d:f7:83:90:d8:31:da:db:8a:
                    0e:38:62:66:a6:b5:66:20:f2:c2:95:59:f9:e8:f1:
                    60:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D7:D5:55:18:3A:81:F8:0B:A6:B7:D9:36:87:91:24:5E:D8:D3:3E
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/e9fVVRg6gfgLprfZNoeRJF7Y0z4.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.160.0.0/11

    Signature Algorithm: sha256WithRSAEncryption
         9c:c5:0a:d3:03:0c:a0:29:c0:d3:9b:50:39:3e:79:cd:23:af:
         4f:bf:d9:34:0a:68:65:9e:10:a1:4e:f8:cd:81:89:7b:c8:f0:
         73:55:a0:ae:7e:86:26:78:65:af:a4:10:24:42:13:56:f1:fb:
         e9:46:fc:db:13:8d:f9:fd:57:ce:28:35:86:12:1b:be:8a:2e:
         69:c6:03:f5:3e:be:73:d1:2c:29:dc:2a:a2:56:d9:05:68:a9:
         74:52:4f:73:86:78:8e:91:0d:a1:12:02:3d:d5:5d:dd:4d:95:
         9a:4a:73:d5:4a:86:88:96:39:71:0d:14:0f:c4:1c:cf:be:46:
         01:f2:67:ff:ae:60:c9:05:11:c1:58:7d:9e:05:90:b5:c9:c4:
         f8:98:93:79:24:26:47:30:d5:3d:33:ea:16:cc:9c:c4:2d:31:
         35:b7:fa:dd:53:f2:73:41:f3:9b:3c:2a:0b:1c:21:15:73:8b:
         2a:e8:06:e2:3d:62:85:58:26:1f:2b:63:fe:7c:fc:e9:f0:bb:
         40:37:a5:c1:88:f8:89:b1:83:78:24:3d:7e:c6:33:f9:e1:03:
         4c:09:d7:55:ba:01:7c:aa:44:3c:9c:56:9b:60:ce:e8:56:a3:
         0f:c5:a2:1a:12:dd:02:ba:1b:c7:1a:21:96:a1:25:a0:d1:43:
         c6:14:6e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 03:50:24 2024 by rpki-client on console-ams.rpki-client.org