Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/gw8nolWHc_MWi4g8BLAjjqV1I7U.cer
File:                     gw8nolWHc_MWi4g8BLAjjqV1I7U.cer (raw, json)
Hash identifier:          rBWWWPK7C30DpGOdV1/FHnjQwnk1UHF3ptdhuGCHYnY=
Subject key identifier:   83:0F:27:A2:55:87:73:F3:16:8B:88:3C:04:B0:23:8E:A5:75:23:B5
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       142C
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:23:52 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 45.220.128.0/17

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5164 (0x142c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:23:52 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36D9B5BAR/serialNumber=830F27A2558773F3168B883C04B0238EA57523B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f3:45:0a:f9:14:70:60:2d:c1:66:ab:1b:f0:
                    f0:2f:dc:de:13:95:ab:95:1c:8f:1e:87:8e:e2:f5:
                    54:a9:8a:69:21:89:06:f4:17:65:b8:27:fd:73:97:
                    f1:92:bb:75:c0:17:b6:e3:f8:cc:ba:7d:5a:6d:47:
                    2b:76:e8:34:93:2c:2d:6b:37:dc:e9:6e:b9:8a:6d:
                    8c:13:e1:ae:1b:aa:d2:d7:9b:e9:8a:2a:3c:28:9d:
                    2d:f6:cf:ef:d0:09:6b:d6:d8:99:b4:c2:09:36:30:
                    e6:01:8e:b1:2d:0a:e0:eb:05:d3:05:f1:dc:b4:f1:
                    90:76:7d:08:63:e7:bc:0b:5a:9b:2a:56:1b:91:2b:
                    69:ee:3d:5f:33:e3:18:90:bb:f7:c0:d0:2b:3d:6d:
                    6b:70:45:36:1b:1a:88:a6:03:7d:23:d6:1e:71:a6:
                    78:56:3e:ad:77:2f:ce:7a:37:84:0b:b1:32:35:93:
                    dd:45:3e:58:e2:fd:24:73:cb:6b:a7:fd:99:05:88:
                    be:27:41:f0:83:2d:ca:1c:bf:e0:fe:e1:5a:8d:a0:
                    ba:6a:71:28:30:06:3f:3f:d4:28:85:ca:a2:06:37:
                    82:22:5f:2c:69:eb:d6:b4:32:f7:6e:97:77:b7:0b:
                    a6:26:a3:ba:6e:40:cb:58:89:b7:bf:59:09:93:d0:
                    bd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0F:27:A2:55:87:73:F3:16:8B:88:3C:04:B0:23:8E:A5:75:23:B5
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.220.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a4:59:ce:6d:1d:30:56:36:19:0e:d3:bb:61:6f:5e:09:75:bf:
         48:56:2d:de:38:7a:8f:ca:3a:33:7b:36:fd:87:13:31:92:f2:
         c1:06:f0:5f:07:3a:78:32:ec:fc:b7:72:0e:fb:af:5f:fe:a2:
         8f:f8:8e:75:fa:2a:0a:aa:8b:c6:45:f7:06:17:2e:60:6e:47:
         53:a4:28:bd:72:b0:cb:3b:8f:03:b1:95:ca:9b:b2:4b:63:76:
         6d:4b:cc:98:71:00:97:b1:08:3b:a0:4c:1a:86:b6:71:56:89:
         ea:91:2a:6d:aa:0b:9c:1d:59:80:7c:1f:84:a3:62:fc:7e:14:
         cf:2a:67:02:d5:8e:07:85:83:b1:8d:1f:c7:76:38:cd:a7:2e:
         50:72:6c:eb:b2:97:cd:85:ea:11:fb:c2:57:3e:06:b0:e1:63:
         ef:a7:94:7e:43:f8:c7:df:59:d8:8c:10:6a:59:b1:3c:e8:0d:
         2e:3a:20:78:26:b9:e0:1e:3d:e8:4c:e6:b5:31:a1:77:4a:f7:
         33:ca:48:82:fe:07:51:77:ae:62:3d:73:34:4c:63:57:6e:73:
         c9:a1:f2:e8:8f:55:ac:03:25:d2:69:20:2b:ed:fe:f6:98:99:
         28:9a:63:52:b0:79:06:a4:ff:f9:32:e0:5d:c2:fc:9e:78:55:
         4c:1f:1b:ba
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICFCwwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNDAxMDEwMTIzNTJaFw0yNTAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNkQ5QjVCQVIxMTAvBgNVBAUTKDgzMEYyN0EyNTU4NzczRjMx
NjhCODgzQzA0QjAyMzhFQTU3NTIzQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDC80UK+RRwYC3BZqsb8PAv3N4TlauVHI8eh47i9VSpimkhiQb0F2W4
J/1zl/GSu3XAF7bj+My6fVptRyt26DSTLC1rN9zpbrmKbYwT4a4bqtLXm+mKKjwo
nS32z+/QCWvW2Jm0wgk2MOYBjrEtCuDrBdMF8dy08ZB2fQhj57wLWpsqVhuRK2nu
PV8z4xiQu/fA0Cs9bWtwRTYbGoimA30j1h5xpnhWPq13L856N4QLsTI1k91FPlji
/SRzy2un/ZkFiL4nQfCDLcocv+D+4VqNoLpqcSgwBj8/1CiFyqIGN4IiXyxp69a0
Mvdul3e3C6Ymo7puQMtYibe/WQmT0L3LAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
gw8nolWHc/MWi4g8BLAjjqV1I7UwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkQ5QjVCL0VDRUFF
Mjc2Qzg2NDExRTY5OTRGNUI3NUY4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZEOUI1Qi9FQ0VBRTI3NkM4NjQxMUU2OTk0RjVCNzVGOEFFQTIy
OC9ndzhub2xXSGNfTVdpNGc4QkxBampxVjFJN1UubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQHLdyAMA0GCSqGSIb3DQEBCwUAA4IBAQCkWc5tHTBWNhkO
07thb14Jdb9IVi3eOHqPyjozezb9hxMxkvLBBvBfBzp4Muz8t3IO+69f/qKP+I51
+ioKqovGRfcGFy5gbkdTpCi9crDLO48DsZXKm7JLY3ZtS8yYcQCXsQg7oEwahrZx
VonqkSptqgucHVmAfB+Eo2L8fhTPKmcC1Y4HhYOxjR/HdjjNpy5QcmzrspfNheoR
+8JXPgaw4WPvp5R+Q/jH31nYjBBqWbE86A0uOiB4JrngHj3oTOa1MaF3SvczykiC
/gdRd65iPXM0TGNXbnPJofLoj1WsAyXSaSAr7f72mJkommNSsHkGpP/5MuBdwvye
eFVMHxu6
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:54 2024 by rpki-client on console-ams.rpki-client.org