Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/qct2r2vCtIbVga8poZ5ZXZwEzQQ.cer
File:                     qct2r2vCtIbVga8poZ5ZXZwEzQQ.cer (raw, json)
Hash identifier:          i6WoLEkj4Tyy41GQEypq0TP5XygrXxfCKRRmaqQDxqg=
Subject key identifier:   A9:CB:76:AF:6B:C2:B4:86:D5:81:AF:29:A1:9E:59:5D:9C:04:CD:04
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1349
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F363CC24/056BF3E26CD011ED8D69ACA2F1222468/qct2r2vCtIbVga8poZ5ZXZwEzQQ.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F363CC24/056BF3E26CD011ED8D69ACA2F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:27:40 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 160.119.0.0/19
                          IP: 164.160.52.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 00:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4937 (0x1349)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:27:40 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F363CC24AR/serialNumber=A9CB76AF6BC2B486D581AF29A19E595D9C04CD04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f0:c2:f3:a6:dc:e9:14:e4:18:0d:ba:0f:5e:
                    70:d6:5b:0a:5d:8a:c4:5b:d5:fc:ea:e6:e4:03:91:
                    92:1e:b4:2a:fc:21:06:1b:fb:06:27:4f:1d:dd:a6:
                    7f:34:9f:69:9e:8a:68:60:33:a7:f6:42:2a:19:3d:
                    22:2c:1f:d2:55:7c:89:25:07:e3:7b:0a:82:7b:f1:
                    49:3b:7e:42:66:31:54:4d:bf:96:b0:fa:06:d0:14:
                    86:09:1f:5e:fd:57:10:b1:0c:c7:f0:0e:e9:f6:13:
                    22:7b:12:a1:50:26:94:5e:50:c7:6f:2f:9f:ef:83:
                    a3:04:6b:a6:88:2a:43:3e:58:30:2f:56:87:4d:d8:
                    a5:2b:f4:0d:60:66:8f:71:c8:47:54:1d:54:c7:22:
                    09:1b:18:c8:d0:59:6c:0c:7a:35:4d:44:93:1f:ea:
                    79:2e:0f:72:c3:80:d9:a6:08:2e:7c:18:4d:79:c4:
                    ca:4f:1d:31:fe:91:68:54:0c:5b:90:83:ec:4f:d9:
                    8c:5b:7e:3a:31:7a:e4:37:aa:c8:c4:56:2c:40:02:
                    a1:2a:0e:eb:4f:a0:39:89:bc:bc:5a:4b:ee:96:cf:
                    07:5e:6a:83:6f:a4:ad:e7:9d:23:21:5d:cd:be:df:
                    8a:ff:8b:d0:6a:05:12:6c:1f:08:e7:7a:ca:c3:22:
                    8d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CB:76:AF:6B:C2:B4:86:D5:81:AF:29:A1:9E:59:5D:9C:04:CD:04
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/056BF3E26CD011ED8D69ACA2F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/056BF3E26CD011ED8D69ACA2F1222468/qct2r2vCtIbVga8poZ5ZXZwEzQQ.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.119.0.0/19
                  164.160.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:a2:a7:78:f4:b0:bd:fb:92:57:64:2e:1b:9a:14:ff:0d:7c:
         7d:63:3e:2d:77:2e:d7:62:48:54:48:69:aa:9b:f3:e0:c2:20:
         f9:01:17:9e:65:d3:45:9a:b9:71:ae:87:3a:5e:95:54:04:e9:
         6b:90:7d:8a:7b:9c:9e:05:c7:ae:f2:4f:5d:00:68:bf:21:e2:
         bd:3e:19:e8:99:2d:6b:d2:58:c9:1e:db:16:86:eb:c1:91:58:
         69:15:06:a2:b7:17:06:dc:70:0a:13:94:94:a4:7f:53:50:91:
         10:ef:5b:d1:85:77:37:53:77:00:cc:7d:48:31:e0:6e:f5:46:
         c5:c1:75:4d:db:69:09:11:21:11:b6:9d:09:4d:17:ff:ae:77:
         6e:a3:55:db:92:ca:dc:ce:77:6c:bb:db:14:49:17:f9:00:98:
         26:b6:11:b5:97:28:19:e9:02:69:32:ab:2b:2a:15:0a:81:5d:
         7d:4e:a6:21:84:2b:c7:2d:71:85:f1:a9:2e:44:f4:a0:4e:06:
         c8:69:6f:6f:c4:a9:ef:5c:64:f6:fa:d0:10:93:12:a6:a4:d3:
         58:99:99:d5:29:ad:bf:31:b5:b4:c5:25:68:54:d8:62:3d:8d:
         c4:b4:02:dd:11:22:b6:0c:3a:af:08:1d:bb:d7:38:10:68:ef:
         c7:e7:34:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:00:21 2024 by rpki-client on console-ams.rpki-client.org