Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer
File:                     lya7b0ngx_FVN-L2-fJmCV1OpJE.cer (raw, json)
Hash identifier:          brKCfAt7P3UvuUdULDSx78i13VLZb5gJoEsyvULhm0s=
Subject key identifier:   97:26:BB:6F:49:E0:C7:F1:55:37:E2:F6:F9:F2:66:09:5D:4E:A4:91
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       138E
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:44:10 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 160.226.180.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5006 (0x138e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:44:10 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3666CFFAR/serialNumber=9726BB6F49E0C7F15537E2F6F9F266095D4EA491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1e:d8:6c:11:fc:a5:76:b1:22:0b:3f:98:58:
                    96:db:81:f5:46:d6:fc:53:0b:21:bf:d4:eb:21:8c:
                    7f:27:d9:81:06:18:0e:dd:9a:77:4d:31:82:68:9d:
                    0e:fd:cf:65:90:67:b8:7d:f8:ea:d3:31:77:20:6d:
                    bc:a7:6e:6a:20:20:3b:d7:34:16:6f:58:ff:70:a3:
                    46:33:ac:e9:01:35:52:05:c7:d3:22:a9:bc:e3:53:
                    02:1e:ff:a1:f6:8a:ff:cb:be:47:a7:c9:c8:04:9c:
                    d0:e3:4d:81:b3:91:5e:04:1f:00:fb:8a:11:9f:ea:
                    a2:61:6b:e5:4e:39:38:40:ab:53:f6:f9:d5:7e:8b:
                    56:fd:f4:45:64:15:36:ce:0b:61:bb:ac:79:87:fb:
                    8a:91:09:4f:8a:f2:f8:99:78:08:4a:a3:1d:e4:15:
                    94:53:d6:a6:59:b3:b6:53:de:56:af:5b:5c:0c:01:
                    a4:25:b9:4c:9a:3e:c4:9b:5c:b2:d7:ed:69:98:3a:
                    d3:c5:d6:36:14:94:0f:5c:bd:35:c7:6d:ba:13:65:
                    95:c1:0d:31:a1:75:ba:97:ce:a3:08:18:fd:9b:eb:
                    08:24:a1:22:59:b2:26:da:31:02:37:d5:e0:c7:1d:
                    67:e3:fd:5f:a6:68:19:32:59:8d:6f:26:78:c9:1e:
                    9c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:26:BB:6F:49:E0:C7:F1:55:37:E2:F6:F9:F2:66:09:5D:4E:A4:91
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.226.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:56:94:1f:fb:a3:d2:90:ea:d2:07:16:37:18:7a:ca:b8:fc:
         24:59:bd:ec:76:68:e6:18:0c:23:bb:6d:00:3f:7e:c7:37:78:
         5a:9f:16:36:e4:1f:5a:8e:6e:30:44:51:5c:01:79:c9:f7:20:
         55:27:ca:3e:b1:d5:0b:c2:6b:39:d3:9a:42:d9:a5:51:39:ee:
         5b:ab:0f:9c:9f:15:1b:91:bf:f9:2a:23:c0:7d:99:ca:3b:65:
         f6:95:ba:66:09:a9:fc:4a:1d:be:81:61:a8:ca:ee:7d:d7:d1:
         24:8f:bc:56:07:c9:6b:e2:d9:fe:d0:fe:e5:de:c0:e4:23:64:
         a1:c8:63:9b:8e:f2:98:bf:56:d8:ec:43:9d:88:cc:9d:1f:b1:
         65:55:77:a9:37:79:7c:2f:a9:9c:2d:96:a7:ec:3a:e3:c0:5f:
         d7:db:a3:f7:a6:31:f9:ee:bd:e3:b7:75:35:31:b1:b0:3d:ab:
         41:69:7f:cf:0a:bc:40:36:38:72:a1:56:c2:f9:25:ce:2b:46:
         08:35:87:8a:bc:b5:93:ac:8f:d2:ab:71:9c:1d:1b:71:40:98:
         e3:04:6a:85:49:cc:c6:ea:19:7f:cd:62:bb:92:d6:5d:04:69:
         e1:19:7c:96:d7:4d:a7:6e:97:b8:b8:26:12:c7:72:0c:1c:a3:
         46:01:bf:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:54 2024 by rpki-client on console-ams.rpki-client.org