Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/epndbb4tFgeKUOWEHlqOilkM3Us.cer
File:                     epndbb4tFgeKUOWEHlqOilkM3Us.cer (raw, json)
Hash identifier:          9yaXw5bwP8v6exjftoxJbQRNupbbsmslSkiYXq2HUAk=
Subject key identifier:   7A:99:DD:6D:BE:2D:16:07:8A:50:E5:84:1E:5A:8E:8A:59:0C:DD:4B
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1576
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 19 Aug 2024 16:52:28 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 169.255.124.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Oct 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5494 (0x1576)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Aug 19 16:52:28 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F365052EAR/serialNumber=7A99DD6DBE2D16078A50E5841E5A8E8A590CDD4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7a:6c:9f:f1:5b:2f:35:22:4d:3a:d1:20:57:
                    9e:93:61:26:13:fc:8c:0c:cc:55:82:f4:73:99:50:
                    a6:f0:ce:e6:97:83:31:bc:d4:a4:43:c2:25:73:3a:
                    9c:95:24:77:4a:8d:c8:0d:72:06:ac:98:cd:b2:74:
                    8b:b5:04:43:e1:8d:0c:d6:77:8d:6d:ab:93:36:56:
                    43:99:91:49:2e:c9:ad:54:a8:e2:fa:bd:36:20:88:
                    89:06:cc:a4:37:79:2b:e2:79:fb:ca:5a:8c:07:fd:
                    cb:05:30:85:b8:32:df:99:3d:4a:cc:f0:0c:86:ca:
                    8b:81:91:38:5a:54:1d:69:58:ea:ba:de:53:53:5b:
                    5f:ec:04:77:06:7a:8d:5d:c4:c2:c9:a0:99:a4:5e:
                    87:94:7c:16:30:2e:85:9d:33:b2:f0:ff:5f:86:55:
                    78:c0:62:d4:74:9b:55:69:8a:c2:99:31:e2:a8:38:
                    c8:fa:97:ad:1c:dd:f0:c8:98:e7:66:89:69:a4:0e:
                    db:e2:db:55:61:fa:46:db:24:a8:5f:1a:16:5d:95:
                    d8:0e:36:9e:02:0a:c1:db:a0:6d:aa:10:32:66:ca:
                    2d:00:9f:fe:0a:1a:ed:21:e9:0f:9e:11:af:cc:69:
                    79:80:f4:de:5b:a1:41:a4:f0:64:d7:76:78:c3:04:
                    dd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:99:DD:6D:BE:2D:16:07:8A:50:E5:84:1E:5A:8E:8A:59:0C:DD:4B
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.255.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:fc:c1:7d:a3:59:a3:cd:c1:59:47:a2:7f:6a:07:a3:7a:b0:
         44:52:93:49:8d:30:21:ba:5b:b4:81:4d:93:73:25:ee:09:b1:
         55:8b:1b:49:7a:13:ea:89:33:b9:83:32:11:60:f3:7e:22:07:
         f6:05:d2:d2:e9:da:de:d4:4a:b7:f1:57:9c:76:79:f0:ed:59:
         cb:85:e5:bf:d1:2d:cd:e0:ba:fc:06:31:2a:67:78:9f:f9:c1:
         8d:f7:5d:ee:40:0c:4c:30:12:86:f2:70:8b:38:a8:c0:46:da:
         6f:17:c4:97:e4:f3:b6:13:06:26:37:fb:91:51:7d:b8:63:7f:
         1a:d8:a0:f6:f8:88:4a:7f:74:f7:05:a9:a1:eb:cf:c5:b1:a8:
         62:63:ca:93:a7:a1:5c:85:79:02:33:a9:84:b5:1c:cc:b9:fb:
         bf:e5:08:a3:0c:0e:d4:f7:bb:b5:c0:c2:7e:66:de:03:8a:50:
         fd:da:12:a7:ae:a7:31:7d:fa:0f:09:6a:57:9e:33:c5:00:76:
         69:b6:68:ec:58:e9:ea:e1:7b:14:f1:9c:c3:23:7c:dc:c0:78:
         16:a7:3a:71:30:fa:78:d1:98:a6:cd:40:02:1c:b8:5a:89:8f:
         75:85:08:b9:b3:18:8f:56:b5:bc:b7:ea:ac:ce:84:72:60:81:
         7d:ac:b5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 01:05:42 2024 by rpki-client on console-fra.rpki-client.org