Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/iyncQT61Ar1t3qMGRh4aehCExfY.cer
File:                     iyncQT61Ar1t3qMGRh4aehCExfY.cer (raw, json)
Hash identifier:          0fYpoRuQsIBUZSG9lU2HY8VybTCeEsqxr/mrqlW4uLU=
Subject key identifier:   8B:29:DC:41:3E:B5:02:BD:6D:DE:A3:06:46:1E:1A:7A:10:84:C5:F6
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       13D9
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:03:11 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 69.67.32.0/20

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5081 (0x13d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:03:11 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3696E5FAR/serialNumber=8B29DC413EB502BD6DDEA306461E1A7A1084C5F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a9:1d:b5:af:8a:52:3a:38:bf:46:88:35:27:
                    98:e3:02:0f:7d:d1:68:fb:19:7d:b9:5b:21:6f:1b:
                    60:6d:ce:83:31:ee:ba:db:90:9c:8f:7e:12:32:01:
                    22:6f:61:60:1f:df:80:b0:b7:94:63:1d:11:68:e0:
                    64:23:e9:ad:ab:ea:5c:58:73:11:0b:19:ca:60:0b:
                    eb:e1:5e:ec:67:78:3e:d3:ba:5a:3f:3c:8b:c1:6c:
                    bd:da:d7:1b:ea:3b:97:f3:ec:3c:13:0b:0c:ba:88:
                    24:a1:d7:ba:ef:d6:4c:4b:79:80:68:ea:e0:d5:d6:
                    28:c8:f9:99:07:84:ad:8f:f1:43:9b:6b:0b:d2:d5:
                    b4:bb:65:bf:15:f2:4d:eb:92:3d:27:1e:29:9c:b4:
                    f9:81:5d:5f:a2:ec:82:c5:e6:ab:7a:7a:6e:bc:73:
                    5a:97:ca:4d:67:15:f8:03:d0:77:fa:5c:56:0f:d1:
                    63:5f:89:dc:b9:98:5a:a1:8f:41:15:51:65:ad:15:
                    aa:2c:aa:ac:31:5d:50:d1:85:c0:cb:d5:10:14:b1:
                    a0:9c:f2:a3:e9:38:c7:b9:43:20:ad:62:df:21:21:
                    30:61:73:a8:fb:8c:a0:8f:bc:a0:db:40:61:95:04:
                    f7:cb:0a:46:f4:e9:c9:39:dc:2c:8f:34:23:88:01:
                    a8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:29:DC:41:3E:B5:02:BD:6D:DE:A3:06:46:1E:1A:7A:10:84:C5:F6
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.67.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a0:9b:3e:57:57:3c:56:64:e4:63:52:3e:43:e2:f1:3a:2a:85:
         a1:f7:46:ff:4a:e2:74:a4:15:02:c7:d6:e0:bc:a8:ce:3a:64:
         29:c2:dd:2c:8f:43:f4:a3:bb:56:4b:d4:58:d4:0b:80:95:85:
         60:99:44:20:f0:4f:02:4c:22:5d:66:f1:2a:46:1c:3c:bd:a3:
         73:83:ac:9f:8a:4d:af:06:e6:5f:63:95:58:b6:2d:83:d3:61:
         32:3e:b3:23:8a:d7:df:28:22:a2:68:35:60:90:0e:e2:3e:94:
         8c:57:82:c7:1d:fa:14:b7:f6:c3:03:dc:5f:0d:6a:c8:50:0b:
         39:df:88:b2:67:df:a1:12:8f:3b:c5:e0:b4:cf:79:1f:fd:7e:
         9d:de:ef:95:0d:c1:da:34:90:d2:f7:fe:69:a5:c5:3d:f4:64:
         0d:6e:d9:c6:a1:e8:cd:76:08:08:6e:22:1a:dd:ca:02:26:e4:
         8e:19:bf:eb:8c:3e:06:33:ac:21:04:e6:b1:c1:ea:ca:5a:95:
         b6:7e:7a:b3:81:65:0d:f2:25:65:e0:da:b0:29:5f:68:cb:2e:
         ff:e5:d1:13:4f:e5:31:87:a5:f1:ef:34:96:ff:89:f8:fe:5e:
         a8:47:6a:d9:36:01:cb:73:27:1b:24:96:71:16:f9:3f:13:f9:
         86:0e:36:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:54 2024 by rpki-client on console-ams.rpki-client.org