Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
File:                     pqNDsn-fdirkHPfFvGtRFMKIWnc.cer (raw, json)
Hash identifier:          vZzWPC5jJRXi+ifu16+MYqsWB2PG1aGgI8PMkF1uF2o=
Subject key identifier:   A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       165A
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 00:38:27 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 45.208.0.0/14
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 14 Apr 2025 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5722 (0x165a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC
        Validity
            Not Before: Jan  1 00:38:27 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F3642CB1AR
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7e:36:58:ea:87:24:86:a5:67:db:9b:64:4b:
                    12:5a:54:83:ef:10:0e:69:af:51:57:06:2c:f3:14:
                    6e:ad:d8:e5:72:a1:17:74:84:08:3c:ba:44:50:e8:
                    ee:3a:d1:2b:3c:99:b2:06:95:18:56:0b:18:99:17:
                    e2:58:80:f8:96:7b:ca:49:f0:db:8b:1e:dc:9a:69:
                    f2:3b:93:25:60:ce:59:6b:fc:a1:19:df:1b:d5:3e:
                    9a:c5:af:a1:e1:ac:b5:04:8c:e4:57:5f:23:97:a7:
                    2a:51:3a:67:f9:22:c8:25:7f:87:9c:ce:74:3b:9a:
                    e1:5f:cb:cc:73:04:36:b3:8f:3d:d4:06:a0:9c:34:
                    ff:55:54:2c:0c:82:69:5c:cf:d8:77:da:4a:48:e3:
                    5d:a1:e1:c1:04:24:01:c3:59:10:07:6c:be:f9:57:
                    95:9f:b7:dc:f2:d3:83:18:3e:9d:00:af:3a:09:b4:
                    ed:74:f2:0a:03:eb:2f:b8:a6:10:8d:48:11:c8:ac:
                    4a:8d:79:6e:cb:e4:72:2f:da:cc:ff:ba:ff:00:a2:
                    70:61:3d:9d:d3:a6:78:32:d1:1f:ce:28:1a:35:ef:
                    cd:80:7a:c7:0c:ea:5c:86:8b:0d:1d:38:7c:78:e4:
                    a7:f3:4b:fb:29:b6:d4:f9:10:05:3a:72:6d:4a:56:
                    bc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.208.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         45:ae:32:bc:45:b7:0e:77:de:e2:5a:e0:5c:98:8e:23:1d:35:
         36:d2:f0:8e:04:58:ca:37:c6:9d:d1:03:6e:49:69:66:25:4c:
         46:10:98:41:95:84:84:ba:d6:64:65:4f:73:6b:f2:49:74:68:
         a4:50:22:33:12:be:e1:a6:dd:6b:c1:4c:ac:1e:8a:88:56:0b:
         b1:e4:5c:c6:f9:12:05:ae:90:56:50:8c:fd:f2:6e:50:22:ca:
         1e:2c:03:75:fa:94:d6:69:62:d4:ad:30:7a:11:72:0c:ea:5a:
         25:24:fd:ad:11:11:f7:71:18:0a:af:2f:2f:5e:3d:31:8d:25:
         4c:ed:8e:51:12:fa:55:ee:d5:27:ee:f5:59:91:b4:ec:60:99:
         41:85:c3:08:17:9b:97:f7:29:d7:47:fa:94:be:10:fa:3f:5a:
         e6:3c:fe:9d:5a:c9:5f:19:16:b2:6d:41:fd:67:d9:1c:b7:1a:
         18:72:1e:1b:d8:9f:45:27:dd:98:43:73:ac:c4:74:2f:52:6d:
         fb:0f:87:41:d7:7b:91:71:80:15:bc:5f:d6:3b:92:0c:77:13:
         76:e4:b3:ed:4c:be:59:ce:53:24:94:dd:cd:f3:b2:93:6a:33:
         17:82:ee:47:2a:5b:a7:fc:50:6b:8e:d6:41:ca:23:a8:e8:9e:
         d2:c4:ad:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:24:56 2025 by rpki-client