Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/otd9qqMurfowwn_FTDYvrBwxtaM.cer
File:                     otd9qqMurfowwn_FTDYvrBwxtaM.cer (raw, json)
Hash identifier:          RpBHFcopkAEha9BjeODmf6lPFTIygmWU6FLV8Kp5W1M=
Subject key identifier:   A2:D7:7D:AA:A3:2E:AD:FA:30:C2:7F:C5:4C:36:2F:AC:1C:31:B5:A3
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       13E8
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:07:04 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 169.255.160.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 00:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5096 (0x13e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:07:04 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36A15D5AR/serialNumber=A2D77DAAA32EADFA30C27FC54C362FAC1C31B5A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a3:06:3b:ef:7d:8f:11:70:a2:f7:33:d6:24:
                    ec:d3:b3:6a:bb:c8:5e:2a:ba:76:5b:83:70:61:18:
                    ca:81:2c:d5:df:ec:b6:ea:b2:9f:49:7d:f6:b2:11:
                    78:ec:73:a9:cd:8f:e4:cb:00:cb:2c:86:38:b4:4d:
                    c2:5c:8c:da:c8:97:ef:85:d7:49:0d:6f:ba:38:bc:
                    91:12:e4:d5:6c:c7:bf:be:e5:eb:d5:04:cb:e4:e0:
                    94:19:5b:af:9c:b5:d6:63:66:1f:46:d2:5d:5d:f8:
                    54:fd:f3:a7:8d:f3:7a:d0:1c:1c:eb:39:7e:92:7d:
                    d5:09:8a:8b:ca:44:51:80:77:a2:54:32:9a:44:78:
                    3b:7a:14:01:7c:56:e8:a2:96:b3:52:26:f5:f0:5c:
                    1b:1d:3a:c0:f4:29:a3:f7:6b:83:e1:e4:1b:ea:f5:
                    31:60:b6:5d:b5:e3:32:1c:da:7e:af:05:00:27:83:
                    ef:bd:ed:d5:76:9c:ce:e4:4f:e0:00:36:49:82:fc:
                    5e:b5:83:1a:92:fa:c0:80:75:5e:48:c7:32:41:69:
                    d3:74:38:57:d1:07:ce:9d:66:0e:8f:c8:2f:99:b7:
                    f7:d4:de:40:48:3d:db:0c:4a:19:96:41:2a:d5:c8:
                    e4:a9:e8:65:7c:d0:40:81:84:81:d5:4a:97:6e:f8:
                    1b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D7:7D:AA:A3:2E:AD:FA:30:C2:7F:C5:4C:36:2F:AC:1C:31:B5:A3
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.255.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:d2:7e:dd:1d:21:2c:92:ee:24:11:55:89:12:8e:75:41:91:
         d5:02:5c:45:3a:fb:c1:39:00:f6:af:3c:13:46:48:89:8b:a8:
         6f:dc:a8:ae:0a:94:94:ca:68:f8:4a:33:20:cb:90:a1:0a:49:
         55:a6:11:fb:d5:0b:d6:2d:71:65:1e:86:25:15:96:25:e6:fc:
         1b:91:d8:8c:9f:00:cc:d4:8a:05:bb:09:f7:bf:2f:31:99:b5:
         87:6b:3c:15:bd:c5:63:3b:a4:c0:07:2b:8c:17:fa:f6:39:80:
         08:6a:83:6e:36:71:99:c2:7f:a5:2b:8b:97:84:64:9a:2f:20:
         0f:6a:3f:e2:51:53:66:35:a4:13:38:5a:ce:32:9b:d3:cc:65:
         87:f1:14:32:c2:8b:74:a8:f1:6d:63:37:c8:09:3e:c8:94:94:
         99:b9:a2:40:88:7e:b2:87:05:3e:43:a8:0a:8f:98:97:04:14:
         48:1f:c2:49:9e:47:2f:d5:37:7d:6f:49:28:78:41:1d:13:df:
         01:c2:38:41:fc:80:6a:fb:9b:d7:34:fd:85:e8:ef:80:d5:67:
         f2:a4:74:68:81:de:63:af:88:2f:3e:6c:23:0f:2d:94:75:77:
         50:46:1d:af:d7:75:e3:be:1c:b5:d1:cf:94:52:bc:ee:a6:91:
         e4:8d:cd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:00:21 2024 by rpki-client on console-ams.rpki-client.org