Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
File:                     itr_GHci3uuw3c4Fe_PCmNAsfM4.cer (raw, json)
Hash identifier:          YONedh5AMLqzRSEkBCGIw7iSxrMXOZ9aZaAJROqfdVM=
Subject key identifier:   8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       13D5
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:01:58 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 156.0.232.0/23

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 00:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5077 (0x13d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:01:58 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36939A6AR/serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b6:3e:55:74:f3:9e:70:f4:2a:9c:43:bb:1b:
                    2a:61:7f:cb:6f:fc:cb:9d:0f:24:2e:f8:a9:ec:2a:
                    3b:91:29:55:f4:b2:00:1d:c3:0d:09:85:92:4c:aa:
                    ba:57:96:3d:86:20:a6:93:e1:be:0c:a9:50:45:dd:
                    62:e7:5f:27:89:cb:4a:af:84:2e:97:10:49:e2:20:
                    6f:b6:8c:d9:7b:4b:8e:8a:c4:79:de:79:36:64:50:
                    d1:71:a6:fa:81:60:e3:11:84:16:32:bf:d0:da:76:
                    6f:38:a3:f2:9f:aa:9f:ce:60:e9:a5:b0:8b:8e:63:
                    27:91:8a:36:50:33:4b:74:8d:c6:64:39:da:75:1a:
                    35:b3:59:d2:6d:58:07:c8:8b:22:20:8a:9e:4d:b7:
                    98:c1:36:6a:27:ee:b3:03:32:a1:7f:e0:65:95:f3:
                    fe:05:dc:c4:dd:01:c6:8d:93:c8:72:f9:3d:4c:82:
                    23:fb:4e:da:ff:89:61:64:83:08:5c:f1:a4:bc:f9:
                    0c:3b:4d:47:19:87:32:53:71:cd:d1:2c:aa:03:7a:
                    6e:e8:32:60:19:59:83:73:be:50:4f:15:3d:c3:00:
                    a3:c4:54:64:7c:77:cc:26:29:8c:01:87:59:33:da:
                    61:53:5c:8d:bd:f4:ff:74:a0:b7:4a:a0:fa:f1:25:
                    c3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.0.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:3f:55:fe:ef:c7:96:ea:45:c1:4b:58:54:2a:23:d6:ac:e6:
         1c:c5:83:3b:b6:31:54:dc:2b:86:1b:69:5a:98:59:25:4c:58:
         dd:7f:86:68:4d:aa:b0:42:fd:12:04:29:9c:4b:e4:2c:72:53:
         3d:c8:71:38:91:0a:20:9a:be:ac:dc:1d:12:09:d9:e2:c3:69:
         89:71:b8:61:d8:79:a4:13:b5:dc:30:51:bb:59:32:10:fe:3b:
         f2:14:17:7d:61:a9:f9:df:33:b9:a0:3a:b2:d7:1f:12:6d:09:
         df:0e:11:7a:b2:a6:fb:78:66:6c:ea:8b:23:1c:e0:81:8b:fb:
         d2:a3:23:af:44:24:ca:11:32:57:ad:67:6b:6f:ef:13:f8:5c:
         20:34:48:f2:fb:3b:b9:d1:30:bb:fa:c5:d0:4f:48:e4:5e:09:
         c0:0e:72:95:c1:58:b0:fe:0a:27:c2:c0:4c:2d:47:d7:d2:15:
         1f:ea:ed:c2:fc:ef:f5:a7:94:c1:8d:b2:21:69:96:67:2a:71:
         b8:43:d0:c5:b3:47:97:a2:79:34:92:27:60:6b:87:8c:0d:46:
         2e:03:78:ea:67:8d:ce:d4:a3:30:5a:2a:d5:17:41:a1:ca:94:
         e3:6a:8f:e1:58:f6:8b:4b:5e:f9:15:06:e8:5f:64:94:d2:78:
         4f:cb:a8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 01:20:06 2024 by rpki-client on console-fra.rpki-client.org