Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/mDG4OL4rkAR85SvUJaCCldQ2HvI.cer
File:                     mDG4OL4rkAR85SvUJaCCldQ2HvI.cer (raw, json)
Hash identifier:          hRpAJOrBiN7aFapWwaAJmGPYAM+ns5IgWYT7LQ2TTCM=
Subject key identifier:   98:31:B8:38:BE:2B:90:04:7C:E5:2B:D4:25:A0:82:95:D4:36:1E:F2
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1775
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:33:26 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 164.160.88.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Apr 2025 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6005 (0x1775)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC
        Validity
            Not Before: Jan  1 01:33:26 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36F56CAAR
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d6:85:80:03:0a:57:02:29:3a:e4:18:62:ef:
                    aa:b2:03:72:f3:2d:d5:a4:22:ae:67:c1:fe:d5:1a:
                    d2:eb:d7:ee:99:0d:d3:86:81:7a:b3:e0:5d:1c:34:
                    98:03:5e:3e:ef:b0:d2:55:9f:fa:f2:8f:0f:a2:b4:
                    ae:db:8a:ae:2e:21:dc:dc:40:ad:bf:1c:73:e1:6b:
                    79:26:49:45:22:e1:99:47:cd:7d:1e:7a:72:13:de:
                    0e:f7:39:3b:95:38:21:ef:27:f0:3c:2b:10:be:c2:
                    6d:93:3b:3b:b4:6a:ff:a9:e6:bd:39:4f:5c:c4:a1:
                    62:38:fe:fa:90:0b:1c:e1:4d:0c:bd:92:98:81:f0:
                    cb:fc:56:28:b0:02:a2:6c:aa:8a:a9:90:61:42:e0:
                    29:76:44:c0:0b:ce:67:76:59:3e:6f:26:b9:95:9b:
                    13:c1:94:0c:5c:c9:a2:dd:93:4d:d4:a0:97:d5:43:
                    11:d8:03:b3:e6:7a:7f:53:9f:60:9c:07:d5:73:d8:
                    5a:07:2a:01:6f:e9:78:dc:b2:f2:0b:d6:c6:21:0e:
                    ed:ea:05:49:0e:20:82:5f:93:27:88:a6:2a:e7:8c:
                    71:51:69:5e:03:59:69:f0:18:b8:d2:b3:1c:c2:d5:
                    8e:09:56:95:5f:6e:95:17:14:2c:6f:f2:75:51:9f:
                    cc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:31:B8:38:BE:2B:90:04:7C:E5:2B:D4:25:A0:82:95:D4:36:1E:F2
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.160.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:58:b9:25:50:86:5c:4c:a0:78:af:b1:ba:49:08:e2:2e:d1:
         56:5a:07:27:8c:c6:2f:1d:36:ed:88:7b:79:ef:ac:51:b7:61:
         38:7d:c7:e4:62:4d:69:67:e2:b3:c1:60:6f:75:4a:bc:57:9a:
         4f:35:a2:37:ff:b2:0c:22:69:fd:d8:6f:2f:83:91:a8:c8:57:
         96:ba:04:97:de:9c:ce:3d:81:41:db:d1:ef:b4:75:b9:1e:5f:
         44:75:99:c8:a3:66:8a:45:ee:c1:cb:a0:1a:36:c1:8b:cf:51:
         37:a3:e1:bc:2e:ca:a5:f0:11:0b:d5:cf:6b:96:59:24:42:72:
         ac:9e:5c:b4:17:c8:d2:ad:6b:68:a8:1e:0a:ad:03:a5:6f:92:
         db:64:04:bc:a4:3f:18:a2:c7:5e:f2:33:11:e9:67:de:a5:60:
         f0:4f:84:8e:69:de:ea:86:32:c1:a5:fa:c1:02:36:e7:d6:1d:
         cc:a3:93:b3:87:f5:2e:88:f5:f8:21:c2:5e:9d:d4:6c:31:f4:
         8a:27:f9:e7:72:a8:8d:ed:d6:25:cf:bf:4e:95:91:fe:58:e4:
         d9:cf:74:00:49:38:77:10:b4:ac:49:f9:e1:95:d5:e7:70:35:
         f1:33:0a:8f:ec:6f:e5:0d:41:3b:28:25:1b:a3:e1:e5:11:0b:
         97:2a:53:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:43:57 2025 by rpki-client