Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/jho3RHX7X1BwyGbGDdVeiurPcXM.cer
File:                     jho3RHX7X1BwyGbGDdVeiurPcXM.cer (raw, json)
Hash identifier:          ORStewnv/WUoZ2RYT4S3lZ9axKk6txkUE0LSz8HA7Iw=
Subject key identifier:   8E:1A:37:44:75:FB:5F:50:70:C8:66:C6:0D:D5:5E:8A:EA:CF:71:73
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       15EE
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 28 Nov 2024 11:53:24 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 129.205.0.0/19

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Dec 2024 00:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5614 (0x15ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Nov 28 11:53:24 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36A31C5AR/serialNumber=8E1A374475FB5F5070C866C60DD55E8AEACF7173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6b:1f:05:1e:ba:f8:97:44:a1:89:eb:0a:38:
                    02:be:23:0e:b8:90:35:a6:33:f3:b3:63:d8:34:4d:
                    72:bd:5c:11:c6:82:4a:8e:32:1b:8e:30:61:66:50:
                    60:d6:19:97:c9:dc:c4:74:4e:f0:c7:e4:ae:33:ef:
                    52:5c:ee:4e:de:a3:22:1b:50:40:37:2b:b7:6c:03:
                    c2:40:f2:de:5e:e0:fa:a6:36:af:51:2b:ea:dd:c1:
                    1e:06:01:0b:bd:d5:13:e2:3e:3b:68:18:87:29:50:
                    e0:c2:e4:19:34:94:3d:36:d5:de:e5:bd:1d:7a:e0:
                    d2:9b:10:c6:18:5f:fb:10:93:ed:20:51:81:0c:9d:
                    11:89:b3:f1:b2:42:8a:05:01:bc:16:32:74:9a:87:
                    91:14:56:63:af:ad:94:43:51:c6:2f:8f:d2:f4:a4:
                    fe:a5:b8:55:86:f9:28:04:12:ab:f8:4e:f6:e4:24:
                    17:c5:a8:cc:b3:2a:d0:91:87:0e:08:26:42:fc:d4:
                    92:6e:94:4f:d5:43:3d:fd:f7:3c:6c:7a:2b:03:46:
                    08:2f:e9:13:89:e1:18:3a:94:f3:1a:82:29:22:27:
                    e2:1f:c9:58:12:a2:73:51:0d:f5:32:7c:1c:ec:08:
                    b6:f1:61:b2:3c:c7:8d:25:cc:04:cd:85:d9:55:8e:
                    0a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1A:37:44:75:FB:5F:50:70:C8:66:C6:0D:D5:5E:8A:EA:CF:71:73
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.205.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2a:0a:55:ca:83:d0:d6:0a:a9:b3:c5:30:4d:8d:a8:b6:cd:d9:
         c3:ca:06:a8:8b:78:48:bb:39:f2:1a:06:3f:a2:4e:a0:ea:d1:
         25:55:24:98:38:47:ee:25:36:58:85:b9:0d:fb:f2:ea:19:ed:
         62:c3:e3:18:68:54:b9:ff:48:17:d7:67:aa:d6:cf:78:b9:d4:
         e9:3c:56:1f:11:6d:d5:63:1e:16:b3:b9:30:03:93:89:f6:2b:
         db:db:b6:b6:64:67:5b:9e:a3:97:5a:28:2a:c2:a8:8a:60:67:
         cc:50:9b:be:bc:56:e9:7d:b5:db:09:f0:20:31:5b:b0:e5:aa:
         f5:7e:0f:42:3c:82:f9:d8:54:55:25:4e:9f:28:e1:3d:c2:c4:
         08:76:1c:b5:0c:0a:49:b3:fd:bb:77:ed:71:b2:11:52:df:d5:
         6b:a9:77:8e:34:e5:c6:d5:71:62:4f:23:d5:45:8e:ff:6a:58:
         00:65:90:b0:a4:21:81:b5:7f:31:d6:34:4a:25:e5:34:4c:b0:
         c8:1e:49:a1:14:e0:aa:f3:75:16:bd:b7:6f:ae:14:c4:e6:17:
         2d:86:a5:f9:07:60:be:3b:7a:3c:0c:85:91:a4:8d:5c:06:df:
         7f:f5:77:26:7c:ec:00:18:e4:74:84:c5:6b:f8:6d:28:aa:4f:
         b8:6a:57:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 01:24:19 2024 by rpki-client on console-fra.rpki-client.org