Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/jINMiRsip8xdph6P5KcT-Iaqv80.cer
File:                     jINMiRsip8xdph6P5KcT-Iaqv80.cer (raw, json)
Hash identifier:          Zm6h12zP9NL+biGF9wpwU0QX8I6fFGV2B4PYwKe0avA=
Subject key identifier:   8C:83:4C:89:1B:22:A7:CC:5D:A6:1E:8F:E4:A7:13:F8:86:AA:BF:CD
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       135E
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F364AE44/2F20B0E2AF4411EB9DE0BD07F8AEA228/jINMiRsip8xdph6P5KcT-Iaqv80.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F364AE44/2F20B0E2AF4411EB9DE0BD07F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:32:42 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 45.216.0.0/14

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 31 Mar 2024 00:16:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4958 (0x135e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:32:42 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F364AE44AR/serialNumber=8C834C891B22A7CC5DA61E8FE4A713F886AABFCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:be:24:67:72:90:74:88:4e:44:c2:cf:4d:c6:
                    69:91:f8:c3:3e:89:95:2d:e9:d2:b4:8a:44:3f:f7:
                    ce:bf:bc:f3:7a:ec:07:9f:a9:fe:7d:48:6e:e1:d9:
                    e0:99:11:3e:3c:76:37:6b:42:e8:e6:d2:f8:65:7e:
                    ac:97:45:d1:75:39:40:a9:99:c8:74:f2:5e:03:7c:
                    ed:18:45:9d:a3:b7:ea:3f:83:27:fe:b1:53:4c:ef:
                    cd:64:d8:58:c7:68:ee:41:f8:4e:9a:63:1f:f9:18:
                    64:2d:71:fd:7a:10:3b:0d:c7:9c:05:ab:1b:ee:39:
                    29:68:a4:45:f8:7e:2e:7c:75:82:3c:59:9a:29:12:
                    c8:6c:17:5a:8b:4d:83:eb:cb:87:ea:18:00:b1:ce:
                    1f:d5:1f:20:6c:11:18:d1:35:37:2e:ab:7b:30:27:
                    d9:07:50:fa:4f:af:82:28:7e:d0:54:82:42:3d:c9:
                    9e:0e:b5:3d:47:dd:a4:0a:c9:4e:11:cd:0d:7c:ce:
                    39:d1:05:77:ce:a9:fe:01:b3:2b:18:8c:13:4d:97:
                    77:22:c4:31:28:f4:75:66:a2:b4:27:a5:4e:28:9c:
                    ac:e6:f8:81:48:22:15:cb:86:2c:89:2b:b5:82:db:
                    a1:0c:e5:8d:ca:86:3c:37:08:21:08:f1:24:47:ca:
                    9a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:83:4C:89:1B:22:A7:CC:5D:A6:1E:8F:E4:A7:13:F8:86:AA:BF:CD
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/2F20B0E2AF4411EB9DE0BD07F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/2F20B0E2AF4411EB9DE0BD07F8AEA228/jINMiRsip8xdph6P5KcT-Iaqv80.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.216.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         5a:de:d1:27:a4:94:91:ab:8c:a5:56:fb:0a:02:38:7c:be:de:
         36:00:e2:e7:28:3c:47:6b:f9:d2:5c:28:3f:fe:b5:14:74:15:
         b9:71:5a:4f:37:1a:3b:9f:16:9f:36:00:fe:f6:87:03:7c:12:
         2f:63:2f:2b:f1:b8:ad:0a:e0:8c:06:2f:29:bd:8d:e5:a9:77:
         c5:1d:80:41:55:f3:3d:1b:18:0a:9d:1c:33:6b:ec:31:d8:ea:
         94:17:c3:3c:38:3b:96:08:74:52:77:32:7c:90:04:91:78:f7:
         8a:70:04:cc:44:af:c2:a8:8a:ee:fe:4b:8a:8e:f8:d3:f0:48:
         f3:51:3f:12:58:f5:3d:70:41:82:a2:76:8b:97:0c:7f:b9:18:
         f3:c0:4f:ee:3d:45:07:7f:ce:31:4a:95:40:ec:e8:eb:86:6b:
         6a:ae:e0:2e:c7:3d:5e:82:ec:93:0b:95:b8:0d:58:c3:a4:34:
         6b:2e:c2:a9:35:ac:9f:fb:b9:af:68:c7:55:2f:a7:38:c6:89:
         04:37:ae:5b:7b:6d:8a:a0:e3:32:b8:3a:34:62:96:e7:ab:44:
         0a:d4:4b:33:50:fa:8a:c8:bd:bf:7e:65:d3:f3:d5:8c:8f:99:
         a3:b4:d9:54:fb:e8:b6:23:19:84:e9:d3:2e:e4:7a:b6:46:ca:
         98:eb:32:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:18:42 2024 by rpki-client on console-ams.rpki-client.org