Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
File:                     hursQpTfunBFqIZC6d_EVRs0wlU.cer (raw, json)
Hash identifier:          L0MZbMg8GAOwqgGDjcCl0TyOnei7FvBkHEnmV/Uwf80=
Subject key identifier:   86:EA:EC:42:94:DF:BA:70:45:A8:86:42:E9:DF:C4:55:1B:34:C2:55
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       13C5
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:58:08 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 45.221.0.0/22
                          IP: 45.221.16.0/22
                          IP: 160.0.0.0/17

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 00:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5061 (0x13c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:58:08 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F368588EAR/serialNumber=86EAEC4294DFBA7045A88642E9DFC4551B34C255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a7:67:cd:94:a5:29:5b:f4:eb:d3:5c:b4:df:
                    bc:9e:62:fb:7a:ed:08:e0:6b:c6:a9:63:9a:d9:20:
                    8f:62:d3:53:27:58:24:72:28:e5:aa:b0:42:f0:4d:
                    71:e0:20:eb:98:34:06:6f:d5:31:dc:62:8c:3e:be:
                    85:af:40:04:49:f9:37:8d:31:8e:78:d0:d9:ae:72:
                    ed:9b:75:f8:b8:2c:f2:ca:9a:4b:28:11:d3:94:df:
                    b2:bd:d2:9d:9a:f9:b4:22:73:6f:05:02:a3:d8:eb:
                    95:19:41:77:1f:b3:7d:a9:f4:ad:69:48:74:56:f8:
                    60:1d:ce:50:02:b1:f0:b6:37:86:e9:76:a5:73:12:
                    22:58:02:cb:e9:b6:bf:c6:2d:de:44:f8:d0:50:7e:
                    af:99:68:d1:be:16:52:26:9c:af:a0:44:c7:48:1d:
                    19:c0:1e:fb:f2:be:b6:e9:e5:4d:09:ba:f8:92:26:
                    90:a6:65:75:b1:64:ae:a8:1d:35:de:dd:28:b1:72:
                    76:92:fc:eb:85:6a:17:81:d7:b3:77:64:05:96:b2:
                    49:6f:99:ab:ff:2c:59:e0:f6:81:fd:d8:db:b1:3e:
                    00:37:ba:0f:4e:53:54:f9:e7:64:47:89:17:ac:df:
                    ba:14:2b:d3:a9:90:f0:8f:8a:7d:ec:dd:0f:4b:01:
                    5a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:EA:EC:42:94:DF:BA:70:45:A8:86:42:E9:DF:C4:55:1B:34:C2:55
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.221.0.0/22
                  45.221.16.0/22
                  160.0.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         51:c7:fe:12:de:e7:25:f8:42:23:c2:ca:88:38:85:bb:be:d7:
         92:15:44:ee:da:de:91:27:86:76:9a:11:fe:f1:4c:a7:f2:17:
         22:28:41:3c:ff:84:52:f9:f7:36:c2:58:3e:b2:63:41:59:59:
         b9:d3:34:30:f8:08:79:ea:29:e0:35:10:a5:e0:b6:16:4a:bc:
         f7:7a:1a:a4:26:19:7a:f2:7b:7c:48:a9:eb:2d:e2:ae:75:62:
         15:09:a7:26:a9:11:bc:a9:0b:24:5e:a9:e8:4c:a7:64:b1:c0:
         de:60:55:8b:5e:45:8a:7f:bf:10:c4:0b:db:b0:5d:a3:34:75:
         c1:bd:f8:33:91:c1:a8:7c:cf:3c:c0:37:55:0c:9f:25:92:7d:
         a6:fe:ab:27:3c:1d:b4:b0:32:08:45:f1:88:97:6d:19:8e:08:
         0b:8f:88:50:d2:88:5f:96:b6:6b:e1:1f:d8:29:28:50:17:7b:
         35:9d:28:8d:09:fc:bf:f2:3a:1e:85:f5:1c:d3:d6:74:f9:3c:
         0c:7b:c2:af:5b:bd:87:0f:fc:45:ae:71:84:b0:c6:9b:b3:a8:
         b6:cb:1d:a1:ba:03:9d:44:26:8f:6f:72:93:92:35:78:36:73:
         3e:65:89:a1:7f:41:8e:ad:61:c0:36:ac:b3:b5:85:6a:aa:54:
         cf:ac:59:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 01:20:06 2024 by rpki-client on console-fra.rpki-client.org