Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer
File:                     mpAdFskLYBlnVD3tV83q800LJz4.cer (raw, json)
Hash identifier:          enrVOWYD9BHNEzNZjrziQJZpJSAh+Fx1BzffTeSA35k=
Subject key identifier:   9A:90:1D:16:C9:0B:60:19:67:54:3D:ED:57:CD:EA:F3:4D:0B:27:3E
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       13A9
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:50:56 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 155.239.0.0/16
                          IP: 165.143.0.0 -- 165.149.255.255
                          IP: 165.165.0.0/16
                          IP: 198.54.202.0 -- 198.54.209.255
                          IP: 198.54.247.0 -- 198.54.248.255

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 00:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5033 (0x13a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:50:56 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36ED442AR/serialNumber=9A901D16C90B601967543DED57CDEAF34D0B273E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:92:95:44:7f:b0:68:1c:9a:06:ba:77:33:f4:
                    16:9c:41:4d:a0:72:c5:00:fb:a3:c2:cf:ed:da:83:
                    0b:1b:c2:eb:ed:23:8f:47:3d:bd:a7:25:38:40:ee:
                    f8:05:8e:60:5c:52:4a:e6:14:7c:9b:f3:71:82:37:
                    43:a8:91:0e:7b:27:ae:52:42:52:81:c0:68:90:c6:
                    dd:0f:69:ff:d7:fe:f7:4a:ab:e9:fe:f9:73:ab:ac:
                    63:fe:5c:96:63:2b:be:57:34:a9:9c:77:83:a3:1a:
                    4d:4a:0e:2e:27:ab:10:09:fa:fa:3f:48:f6:3b:ce:
                    27:66:f7:1c:04:bd:75:fb:59:e3:c9:22:bf:7d:a1:
                    5a:b9:ad:19:2f:2b:7b:af:94:6a:5e:16:9b:d5:d3:
                    e6:4c:ab:d6:d8:b1:ed:4d:49:ac:33:a6:29:81:2b:
                    67:fd:b3:a1:88:79:46:98:d3:85:50:a2:cc:48:c1:
                    8b:2b:2b:de:3a:66:ac:ce:4e:24:71:e2:37:65:f1:
                    da:38:cf:4f:5e:8e:a3:2a:0f:2b:02:c1:1f:f7:9a:
                    1b:2e:fb:7e:19:ee:0d:af:e6:80:fb:b7:6a:d4:f2:
                    b3:7e:29:82:c2:5e:5f:c4:1f:90:09:7e:37:94:0b:
                    8c:47:be:30:ec:19:46:fa:b5:d3:7b:75:3e:ca:53:
                    a7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:90:1D:16:C9:0B:60:19:67:54:3D:ED:57:CD:EA:F3:4D:0B:27:3E
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.239.0.0/16
                  165.143.0.0-165.149.255.255
                  165.165.0.0/16
                  198.54.202.0-198.54.209.255
                  198.54.247.0-198.54.248.255

    Signature Algorithm: sha256WithRSAEncryption
         2c:17:da:d0:e9:07:a4:ba:86:ab:68:c9:8d:4e:ca:7d:33:1b:
         00:50:81:54:c7:c0:a3:f6:84:36:e9:0e:61:68:16:45:28:73:
         b9:04:d1:c7:cf:71:82:e9:d8:ce:23:bc:e5:cd:67:03:68:d8:
         07:3a:bd:e6:44:76:c8:cd:b6:c1:69:21:ab:8a:f7:8d:95:b7:
         b2:ad:3f:de:af:41:08:ec:9e:8c:b8:ed:3f:6b:33:27:76:8d:
         31:05:98:4e:72:b1:ca:49:ce:bc:74:cc:d9:94:35:47:84:1f:
         74:d2:27:f0:cd:0a:b7:1a:65:ce:f4:96:16:f8:cc:b9:18:4a:
         59:8d:3f:4b:7d:ad:82:0c:06:82:4a:42:63:4f:68:04:24:61:
         5b:0e:b3:1f:dc:19:8d:8b:93:0f:70:b7:cf:aa:25:be:b7:b4:
         5d:3c:ff:11:4f:fc:5b:51:2f:c6:59:88:18:0f:88:f5:46:09:
         b1:3a:dc:51:ae:a2:f0:08:5e:aa:1a:08:d3:9a:8b:fd:f2:05:
         3a:52:b1:50:aa:fa:64:95:b9:01:1d:a7:17:ac:17:8b:4a:66:
         18:68:c9:70:b8:ee:23:7c:a9:c5:ad:df:fa:da:17:5e:f1:fd:
         56:0b:82:b4:0a:97:39:79:70:4b:45:af:39:b7:aa:46:c9:4f:
         9d:9e:58:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:00:21 2024 by rpki-client on console-ams.rpki-client.org