Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
File:                     pqNDsn-fdirkHPfFvGtRFMKIWnc.cer (raw, json)
Hash identifier:          orPK/fJqBZj/oWBOEcrWHK6CsCwqVCOhwedQPA9sq3k=
Subject key identifier:   A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1539
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 27 Jun 2024 13:29:29 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 45.208.0.0/14

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Sep 2024 00:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5433 (0x1539)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jun 27 13:29:29 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3642CB1AR/serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7e:36:58:ea:87:24:86:a5:67:db:9b:64:4b:
                    12:5a:54:83:ef:10:0e:69:af:51:57:06:2c:f3:14:
                    6e:ad:d8:e5:72:a1:17:74:84:08:3c:ba:44:50:e8:
                    ee:3a:d1:2b:3c:99:b2:06:95:18:56:0b:18:99:17:
                    e2:58:80:f8:96:7b:ca:49:f0:db:8b:1e:dc:9a:69:
                    f2:3b:93:25:60:ce:59:6b:fc:a1:19:df:1b:d5:3e:
                    9a:c5:af:a1:e1:ac:b5:04:8c:e4:57:5f:23:97:a7:
                    2a:51:3a:67:f9:22:c8:25:7f:87:9c:ce:74:3b:9a:
                    e1:5f:cb:cc:73:04:36:b3:8f:3d:d4:06:a0:9c:34:
                    ff:55:54:2c:0c:82:69:5c:cf:d8:77:da:4a:48:e3:
                    5d:a1:e1:c1:04:24:01:c3:59:10:07:6c:be:f9:57:
                    95:9f:b7:dc:f2:d3:83:18:3e:9d:00:af:3a:09:b4:
                    ed:74:f2:0a:03:eb:2f:b8:a6:10:8d:48:11:c8:ac:
                    4a:8d:79:6e:cb:e4:72:2f:da:cc:ff:ba:ff:00:a2:
                    70:61:3d:9d:d3:a6:78:32:d1:1f:ce:28:1a:35:ef:
                    cd:80:7a:c7:0c:ea:5c:86:8b:0d:1d:38:7c:78:e4:
                    a7:f3:4b:fb:29:b6:d4:f9:10:05:3a:72:6d:4a:56:
                    bc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.208.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         21:20:0e:de:a1:f9:15:a8:9e:36:ac:87:99:b1:a0:5b:0d:25:
         dc:4e:10:7b:90:92:b7:6a:50:80:4d:0a:61:3e:2d:1f:93:ee:
         c5:e0:6b:60:f9:19:70:ae:1e:5a:a7:66:41:8e:84:fe:14:71:
         bf:33:54:6d:b1:fb:53:b2:95:93:91:ee:29:9e:ec:ee:45:5f:
         c8:a9:a9:dd:eb:24:f0:5c:8f:19:59:ad:20:61:db:47:84:ac:
         c8:3f:6d:54:dd:74:34:f8:ea:61:e9:1c:0e:a4:df:cc:48:4d:
         83:4b:25:36:f9:78:a0:71:0e:63:05:9a:da:35:80:c5:48:95:
         71:64:97:ae:ed:91:35:e1:7f:8e:7f:b2:9e:5a:b5:32:e5:55:
         72:cd:72:aa:de:93:9f:ce:05:de:38:25:64:05:2b:30:39:50:
         10:ec:c0:5b:b0:81:2d:35:e6:f6:81:9c:b4:63:bc:41:15:03:
         f4:92:e5:9f:9b:47:95:8b:ef:18:ef:b0:3a:c9:3b:32:4f:d9:
         66:1b:e8:77:96:3f:7f:e9:e1:96:70:39:83:cf:e0:10:f9:8a:
         fb:1d:33:f8:2e:ac:53:b5:77:a3:55:fa:53:50:03:b0:3f:3f:
         97:9f:b8:3c:b9:ea:c0:b7:a2:f5:65:1a:03:57:04:33:4b:3a:
         88:c5:2b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 02:13:48 2024 by rpki-client on console-fra.rpki-client.org