Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/mDG4OL4rkAR85SvUJaCCldQ2HvI.cer
File:                     mDG4OL4rkAR85SvUJaCCldQ2HvI.cer (raw, json)
Hash identifier:          J9s/dmAw2BN/BVU92VPq1PSsPmRwDwW7fii/U3mKhJI=
Subject key identifier:   98:31:B8:38:BE:2B:90:04:7C:E5:2B:D4:25:A0:82:95:D4:36:1E:F2
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1442
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:28:57 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 164.160.88.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 30 Mar 2024 00:16:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5186 (0x1442)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:28:57 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36F56CAAR/serialNumber=9831B838BE2B90047CE52BD425A08295D4361EF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d6:85:80:03:0a:57:02:29:3a:e4:18:62:ef:
                    aa:b2:03:72:f3:2d:d5:a4:22:ae:67:c1:fe:d5:1a:
                    d2:eb:d7:ee:99:0d:d3:86:81:7a:b3:e0:5d:1c:34:
                    98:03:5e:3e:ef:b0:d2:55:9f:fa:f2:8f:0f:a2:b4:
                    ae:db:8a:ae:2e:21:dc:dc:40:ad:bf:1c:73:e1:6b:
                    79:26:49:45:22:e1:99:47:cd:7d:1e:7a:72:13:de:
                    0e:f7:39:3b:95:38:21:ef:27:f0:3c:2b:10:be:c2:
                    6d:93:3b:3b:b4:6a:ff:a9:e6:bd:39:4f:5c:c4:a1:
                    62:38:fe:fa:90:0b:1c:e1:4d:0c:bd:92:98:81:f0:
                    cb:fc:56:28:b0:02:a2:6c:aa:8a:a9:90:61:42:e0:
                    29:76:44:c0:0b:ce:67:76:59:3e:6f:26:b9:95:9b:
                    13:c1:94:0c:5c:c9:a2:dd:93:4d:d4:a0:97:d5:43:
                    11:d8:03:b3:e6:7a:7f:53:9f:60:9c:07:d5:73:d8:
                    5a:07:2a:01:6f:e9:78:dc:b2:f2:0b:d6:c6:21:0e:
                    ed:ea:05:49:0e:20:82:5f:93:27:88:a6:2a:e7:8c:
                    71:51:69:5e:03:59:69:f0:18:b8:d2:b3:1c:c2:d5:
                    8e:09:56:95:5f:6e:95:17:14:2c:6f:f2:75:51:9f:
                    cc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:31:B8:38:BE:2B:90:04:7C:E5:2B:D4:25:A0:82:95:D4:36:1E:F2
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.160.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:49:8b:73:2b:cc:d4:32:69:1d:dc:ea:8d:06:d8:d2:f1:2e:
         8e:7d:40:05:ef:b8:0e:5b:47:64:11:69:eb:f1:1e:82:ba:ae:
         f4:35:9d:c3:c6:33:12:2c:3c:80:6d:49:2e:5e:40:41:2f:fb:
         6e:cb:9f:64:63:0a:99:81:50:95:42:0d:5e:1d:d8:42:3b:73:
         da:4a:bc:05:ef:03:a5:d5:e9:be:c1:cb:ea:14:cb:4c:b8:bc:
         9c:91:c2:6b:4d:f7:15:68:fd:74:9b:42:14:b1:3f:8a:7b:79:
         35:7a:c6:e4:9d:6d:11:b3:88:38:6b:26:2d:a1:13:53:e8:42:
         4f:70:98:60:4f:39:57:ee:3c:45:3a:15:b5:aa:07:14:fe:7c:
         b8:4c:d9:d2:78:24:4a:94:b1:20:50:14:69:cd:61:9e:06:bb:
         ed:d8:64:d6:81:2e:82:3d:22:e0:04:2b:11:e6:1e:81:48:a3:
         2a:a3:e0:9b:a1:91:03:68:17:2f:30:63:7f:db:4f:4a:bf:6d:
         fb:6a:52:bb:99:95:2c:84:2a:45:93:2c:de:1c:06:22:7e:b4:
         a9:32:1f:94:cb:c5:29:8a:ee:39:3e:94:1b:a7:86:cf:08:18:
         d3:0e:9a:46:2a:36:35:e2:dd:76:12:7a:94:22:bf:7a:3d:67:
         f6:84:c7:51
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICFEIwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNDAxMDEwMTI4NTdaFw0yNTAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNkY1NkNBQVIxMTAvBgNVBAUTKDk4MzFCODM4QkUyQjkwMDQ3
Q0U1MkJENDI1QTA4Mjk1RDQzNjFFRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQCp1oWAAwpXAik65Bhi76qyA3LzLdWkIq5nwf7VGtLr1+6ZDdOGgXqz
4F0cNJgDXj7vsNJVn/ryjw+itK7biq4uIdzcQK2/HHPha3kmSUUi4ZlHzX0eenIT
3g73OTuVOCHvJ/A8KxC+wm2TOzu0av+p5r05T1zEoWI4/vqQCxzhTQy9kpiB8Mv8
ViiwAqJsqoqpkGFC4Cl2RMALzmd2WT5vJrmVmxPBlAxcyaLdk03UoJfVQxHYA7Pm
en9Tn2CcB9Vz2FoHKgFv6XjcsvIL1sYhDu3qBUkOIIJfkyeIpirnjHFRaV4DWWnw
GLjSsxzC1Y4JVpVfbpUXFCxv8nVRn8yXAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
mDG4OL4rkAR85SvUJaCCldQ2HvIwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkY1NkNBLzBEMDU2
Q0Q0OEUwMTExRTk4NTE5NjQ0QUY4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZGNTZDQS8wRDA1NkNENDhFMDExMUU5ODUxOTY0NEFGOEFFQTIy
OC9tREc0T0w0cmtBUjg1U3ZVSmFDQ2xkUTJIdkkubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCpKBYMA0GCSqGSIb3DQEBCwUAA4IBAQB7SYtzK8zUMmkd
3OqNBtjS8S6OfUAF77gOW0dkEWnr8R6Cuq70NZ3DxjMSLDyAbUkuXkBBL/tuy59k
YwqZgVCVQg1eHdhCO3PaSrwF7wOl1em+wcvqFMtMuLyckcJrTfcVaP10m0IUsT+K
e3k1esbknW0Rs4g4ayYtoRNT6EJPcJhgTzlX7jxFOhW1qgcU/ny4TNnSeCRKlLEg
UBRpzWGeBrvt2GTWgS6CPSLgBCsR5h6BSKMqo+CboZEDaBcvMGN/209Kv237alK7
mZUshCpFkyzeHAYifrSpMh+Uy8Upiu45PpQbp4bPCBjTDppGKjY14t12EnqUIr96
PWf2hMdR
-----END CERTIFICATE-----
Generated at Thu Mar 28 01:01:40 2024 by rpki-client on console-fra.rpki-client.org