Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer
File:                     kkLGCS_iI5rNMMSPNawbxN313L4.cer (raw, json)
Hash identifier:          BF1igzq03d9+Ddxps66Dr7fwC0sdnRjrdQz7yi0Zypk=
Subject key identifier:   92:42:C6:09:2F:E2:23:9A:CD:30:C4:8F:35:AC:1B:C4:DD:F5:DC:BE
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       143A
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:27:19 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 129.205.96.0/19

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Apr 2024 00:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5178 (0x143a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:27:19 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36ECAA2AR/serialNumber=9242C6092FE2239ACD30C48F35AC1BC4DDF5DCBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f6:f7:d7:84:37:41:15:30:e8:8d:8c:c1:ac:
                    62:ed:4e:69:d5:2c:f4:57:61:3d:a8:7a:d2:71:c2:
                    b5:2e:59:d5:a7:e6:27:f9:4c:61:0f:e2:88:41:6d:
                    d6:b3:a2:2b:b3:78:8a:7e:06:19:db:b6:0c:9e:50:
                    de:41:f1:12:4e:16:60:3a:ff:4f:46:57:2c:c5:73:
                    20:22:ad:e8:d3:63:e1:6a:04:ce:26:b6:70:8e:69:
                    f8:88:9f:16:b8:cf:e2:4f:e6:89:85:8a:82:67:2f:
                    95:45:c9:05:cf:e9:be:86:de:2f:a6:cc:61:a0:39:
                    f3:10:8f:37:b8:34:99:8e:05:36:ec:e7:a7:5b:66:
                    69:72:5f:f3:e3:14:fb:cd:30:2c:3a:25:6c:0c:64:
                    56:bf:68:4e:b0:fc:06:7e:48:19:3a:d9:80:4f:e6:
                    7f:4b:f8:b2:5c:cb:50:1c:54:02:46:3e:f2:90:70:
                    c6:f2:a4:0b:a2:53:aa:19:9e:38:ad:99:47:9f:64:
                    cd:71:78:88:a0:2d:c3:94:eb:83:19:0e:65:f6:11:
                    63:38:c8:0b:e5:eb:e5:8e:97:6f:c9:d0:ec:42:a2:
                    21:66:07:dc:06:84:ea:84:b5:ca:d7:50:fd:6b:01:
                    13:5b:b8:0b:80:3f:e7:ed:0b:75:25:00:c9:ff:60:
                    09:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:42:C6:09:2F:E2:23:9A:CD:30:C4:8F:35:AC:1B:C4:DD:F5:DC:BE
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.205.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         48:d2:65:b8:5c:eb:1c:d8:78:61:bd:a8:2e:44:22:83:96:c5:
         2c:d2:3a:b3:87:d8:a8:17:bc:5d:d7:0e:bd:96:a5:ea:50:d4:
         2c:da:46:eb:5e:ad:b3:52:ca:92:74:38:8a:52:f2:a7:b5:c4:
         b4:84:5f:a7:ef:c9:1b:89:d6:e7:2e:1b:3c:db:b7:60:91:87:
         d9:9d:22:0b:52:d9:a9:8e:56:93:0a:73:82:72:bb:6f:fb:47:
         12:87:e1:be:e0:ce:26:a8:6e:6b:37:cb:3a:a9:60:3c:33:9c:
         b4:10:a8:ca:52:b3:0e:70:85:15:f5:af:fd:82:53:9e:ae:01:
         16:1b:88:3e:7d:1d:27:96:32:5e:3a:c1:14:dc:3b:ef:a7:b8:
         16:c7:03:b9:d4:00:35:85:f7:44:b6:b0:38:a9:7a:40:55:ea:
         2b:46:09:36:bc:9f:c9:61:5b:f0:fd:fe:13:3e:19:bc:a2:ff:
         63:0a:e6:87:0f:3d:e4:81:34:81:0f:7e:ca:f4:18:78:f8:5a:
         32:dd:03:9b:b3:e3:76:3d:d5:e6:6a:ee:e0:59:8a:ad:b3:29:
         98:a7:b0:6f:d8:f8:46:46:71:02:e0:ac:ae:73:70:2a:e0:2a:
         0e:71:da:6c:48:f0:e0:7a:86:f2:11:b7:99:b8:69:11:6d:3e:
         a1:95:53:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:52:28 2024 by rpki-client on console-ams.rpki-client.org