Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
File:                     lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer (raw, json)
Hash identifier:          COr00sLS1SgNIn7ZTlhj/LcZX1NEE2nxYYadGCvOZ5k=
Subject key identifier:   94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1452
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:32:56 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 45.221.192.0/21

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 00:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5202 (0x1452)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:32:56 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36FA5EAAR/serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:dd:68:22:15:76:0e:87:41:bc:8f:a1:f4:5d:
                    d1:4c:a3:c1:16:1a:90:f1:99:30:1d:5f:78:9a:6e:
                    89:09:45:c4:15:d7:90:e2:86:13:5a:ce:48:39:66:
                    7d:90:08:32:42:c8:f9:d9:00:55:10:5f:62:0f:a1:
                    8c:bf:51:2b:9a:76:5e:b8:a2:29:3e:73:d8:83:a3:
                    dd:ac:3a:d9:7c:25:7e:70:c0:53:95:a1:88:e5:8d:
                    2e:7c:9d:66:0a:57:1f:0f:f0:c6:3c:a3:be:23:bc:
                    56:46:2d:67:d0:d8:cb:94:ad:46:12:4e:d5:fa:97:
                    99:67:0e:ff:c8:48:5b:33:f9:a8:f4:56:84:e5:f9:
                    c7:75:4b:b4:eb:e6:3f:87:5e:09:08:86:a9:61:71:
                    46:f9:4d:5a:b6:0c:f7:85:33:63:10:de:d6:fb:62:
                    76:7a:df:db:85:ac:02:10:06:ed:ee:2d:2e:9b:db:
                    5a:82:fa:ab:e8:3c:e6:eb:6c:08:9c:69:2d:b3:47:
                    66:de:d2:15:a0:e0:a4:78:46:1c:8d:69:37:7d:14:
                    fc:96:34:94:91:26:82:eb:c5:5a:89:2f:72:bf:6f:
                    fc:33:c8:f9:ab:38:02:a9:bd:54:fe:27:c2:02:a6:
                    14:98:1b:18:7c:8a:5c:f8:7c:06:96:a0:ff:32:05:
                    6f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.221.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:4d:09:29:d3:04:ea:2c:c7:d5:8a:6b:44:e4:15:d6:7a:ad:
         3a:4f:58:33:55:0f:f8:d1:bc:3a:a2:0b:a5:56:73:79:d1:d6:
         b9:38:d4:6c:2d:c4:80:08:65:7e:99:4d:05:79:3c:52:90:ef:
         01:e5:3e:ea:4f:10:74:f2:bb:ec:cc:ab:fc:45:f9:43:eb:32:
         52:01:f9:18:aa:8c:b1:67:23:cc:a1:d7:cf:fd:8d:d9:c9:88:
         90:ea:ed:b8:64:c1:7d:9d:eb:a4:57:2d:05:b3:f1:b9:4c:f0:
         c9:e2:b0:f4:59:09:4e:45:a9:a6:4a:cf:ef:af:a8:e2:2c:05:
         24:cc:d7:62:2f:68:58:47:a7:90:ce:09:24:e7:7c:c6:a0:61:
         6e:49:6d:3e:69:58:77:99:58:50:26:55:39:5d:84:e6:34:56:
         ac:71:33:50:c3:d2:98:25:70:d4:a1:71:ad:6d:bb:4b:c0:c4:
         fe:6f:0b:5e:78:01:db:56:e9:e6:cd:76:6f:83:d6:e1:99:70:
         7f:38:99:7c:13:56:4a:9e:e9:f4:18:b8:55:f6:13:22:0e:48:
         d7:a2:0b:c8:a4:25:f0:f7:7a:2a:63:be:80:b4:9a:46:48:2d:
         4b:d7:e1:5e:15:00:8d:35:03:d2:21:ff:df:fa:f1:29:1d:0b:
         44:70:9b:b8
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICFFIwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNDAxMDEwMTMyNTZaFw0yNTAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNkZBNUVBQVIxMTAvBgNVBAUTKDk0NzdGMEU0NzVBNzQ3Rjk2
QzU2MTYyMTY3RjBDMTZGOTlDNDgzQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDb3WgiFXYOh0G8j6H0XdFMo8EWGpDxmTAdX3iabokJRcQV15DihhNa
zkg5Zn2QCDJCyPnZAFUQX2IPoYy/USuadl64oik+c9iDo92sOtl8JX5wwFOVoYjl
jS58nWYKVx8P8MY8o74jvFZGLWfQ2MuUrUYSTtX6l5lnDv/ISFsz+aj0VoTl+cd1
S7Tr5j+HXgkIhqlhcUb5TVq2DPeFM2MQ3tb7YnZ639uFrAIQBu3uLS6b21qC+qvo
PObrbAicaS2zR2be0hWg4KR4RhyNaTd9FPyWNJSRJoLrxVqJL3K/b/wzyPmrOAKp
vVT+J8ICphSYGxh8ilz4fAaWoP8yBW+TAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
lHfw5HWnR/lsVhYhZ/DBb5nEg7swHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkZBNUVBLzIwOTg5
MzBDMzhCMjExRUQ5MERCMkVEQ0YxMjIyNDY4LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZGQTVFQS8yMDk4OTMwQzM4QjIxMUVEOTBEQjJFRENGMTIyMjQ2
OC9sSGZ3NUhXblJfbHNWaFloWl9EQmI1bkVnN3MubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQDLd3AMA0GCSqGSIb3DQEBCwUAA4IBAQBMTQkp0wTqLMfV
imtE5BXWeq06T1gzVQ/40bw6ogulVnN50da5ONRsLcSACGV+mU0FeTxSkO8B5T7q
TxB08rvszKv8RflD6zJSAfkYqoyxZyPModfP/Y3ZyYiQ6u24ZMF9neukVy0Fs/G5
TPDJ4rD0WQlORammSs/vr6jiLAUkzNdiL2hYR6eQzgkk53zGoGFuSW0+aVh3mVhQ
JlU5XYTmNFascTNQw9KYJXDUoXGtbbtLwMT+bwteeAHbVunmzXZvg9bhmXB/OJl8
E1ZKnun0GLhV9hMiDkjXogvIpCXw93oqY76AtJpGSC1L1+FeFQCNNQPSIf/f+vEp
HQtEcJu4
-----END CERTIFICATE-----
Generated at Thu Apr 25 01:20:06 2024 by rpki-client on console-fra.rpki-client.org