Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/mxi9dO1YDbl9W9qdlXDKFpcMy8w.cer
File:                     mxi9dO1YDbl9W9qdlXDKFpcMy8w.cer (raw, json)
Hash identifier:          vsjOv2RyeXRoX2/38eTJnGRuvJycg7J4vFJEu4xwsBQ=
Subject key identifier:   9B:18:BD:74:ED:58:0D:B9:7D:5B:DA:9D:95:70:CA:16:97:0C:CB:CC
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       13CB
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/mxi9dO1YDbl9W9qdlXDKFpcMy8w.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:59:26 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 160.242.0.0/17

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 00:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5067 (0x13cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:59:26 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36886B3AR/serialNumber=9B18BD74ED580DB97D5BDA9D9570CA16970CCBCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ed:03:44:0c:9f:fb:70:60:cc:8f:67:77:ea:
                    68:32:53:09:a8:25:3b:d2:ef:7f:67:93:70:25:0d:
                    39:60:a1:00:c2:1e:5a:8d:34:68:6b:f5:16:87:2a:
                    61:28:55:1d:75:3d:3a:7a:26:9f:38:e0:75:3e:4a:
                    ef:d7:c4:78:a1:fb:a7:82:2a:be:06:6b:0e:5c:79:
                    4a:6b:f4:ba:4e:fa:2f:5f:0b:d4:9d:61:b1:b1:3f:
                    77:20:3e:50:25:36:ba:61:af:24:82:a5:23:57:f5:
                    c2:36:09:67:45:ac:f6:77:09:db:f2:42:a6:7a:4e:
                    e5:60:8d:d9:93:a4:62:6b:92:d9:18:2c:6e:ce:09:
                    dc:9c:ae:55:aa:b5:70:a5:27:f0:e3:78:5f:41:85:
                    b5:8c:58:96:21:cf:0e:8b:e0:08:2e:7e:ad:0e:2f:
                    1d:69:93:4a:d7:c5:39:94:47:72:98:e9:06:94:00:
                    ba:ba:fc:92:5e:84:1d:12:21:fc:7d:e3:85:02:fa:
                    c9:6f:a8:8c:13:d7:50:45:e1:c5:1e:80:3a:86:5a:
                    91:43:9e:17:07:32:e9:5a:09:26:7b:68:45:71:e6:
                    f1:14:8c:42:82:4a:e3:b1:9b:86:b7:28:8a:eb:06:
                    5d:12:bf:16:1a:cf:a2:08:d2:1c:ba:df:22:00:c7:
                    ff:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:18:BD:74:ED:58:0D:B9:7D:5B:DA:9D:95:70:CA:16:97:0C:CB:CC
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/mxi9dO1YDbl9W9qdlXDKFpcMy8w.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.242.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         85:f0:85:28:06:91:87:ae:23:78:00:7b:61:a4:ed:6c:cd:92:
         90:b5:d9:96:27:52:c7:ab:c2:42:25:08:16:c1:b1:fe:14:c8:
         54:99:44:2c:15:06:ae:b6:33:66:15:d0:07:13:b4:bd:7e:de:
         86:7e:40:df:73:cb:e6:db:5b:76:05:57:77:87:41:4b:39:10:
         ab:cd:1e:49:ba:b4:51:8c:8f:78:2c:dd:37:ef:b3:4c:35:6d:
         27:0f:c3:88:af:41:8e:23:0b:87:35:2e:d8:cd:22:10:12:b2:
         36:42:ed:f6:e4:a7:7e:68:c3:db:5d:e7:15:fa:f0:ab:97:09:
         05:ee:3c:4f:39:fa:f7:6c:11:75:95:9a:fb:0e:a5:e0:6a:0f:
         8b:1f:a6:43:f0:d2:45:9d:9b:bb:85:b8:ed:10:70:27:48:84:
         65:62:2a:d1:55:5a:a9:12:4a:0c:5b:84:12:82:aa:bc:fe:55:
         fb:23:75:94:dd:0e:aa:07:a7:e8:85:36:74:91:28:f2:9f:71:
         12:71:22:60:6b:64:49:40:cd:09:5d:3e:5f:e2:b3:cd:70:29:
         c4:01:39:e5:ed:2a:c0:6a:ef:d6:94:b7:bd:df:aa:81:4c:7a:
         d7:3f:9e:e7:35:ab:8b:b1:e4:67:f9:4c:13:fd:50:09:4f:90:
         3c:3f:61:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 01:20:06 2024 by rpki-client on console-fra.rpki-client.org