Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/qjkCIoK-Ps773Fjln5ljk4Jku0I.cer
File:                     qjkCIoK-Ps773Fjln5ljk4Jku0I.cer (raw, json)
Hash identifier:          xEjRfbj5/kdDJMKyFuRjqPH/WhA509x1Tx/s6RTpgjQ=
Subject key identifier:   AA:39:02:22:82:BE:3E:CE:FB:DC:58:E5:9F:99:63:93:82:64:BB:42
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       13E4
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/qjkCIoK-Ps773Fjln5ljk4Jku0I.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:05:58 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 45.221.26.0/24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 00:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5092 (0x13e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:05:58 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F369F058AR/serialNumber=AA39022282BE3ECEFBDC58E59F9963938264BB42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:35:41:d9:72:58:a2:46:bd:06:8c:ad:41:24:
                    46:fd:eb:59:a5:79:ec:f4:c8:bd:05:f2:ab:ee:6a:
                    7a:44:df:32:94:f9:16:0c:92:04:4d:c8:c3:6c:58:
                    79:89:e7:b5:24:25:a7:26:21:4f:a3:26:78:95:fc:
                    77:d4:e3:51:5e:d0:01:cf:e8:0f:f4:83:ee:a9:a4:
                    e0:87:99:d6:94:38:57:71:c2:17:7c:cd:9d:dc:61:
                    37:51:6e:ef:a1:2c:33:5b:26:49:19:b1:89:7d:b8:
                    a1:bf:fd:6f:ef:aa:da:e1:12:fc:b2:89:4d:cc:12:
                    47:47:2a:2c:39:1d:3f:d0:ac:dd:11:f4:d7:bf:ee:
                    75:34:ac:1d:4c:e4:3b:e1:9f:04:70:a8:ed:5f:3a:
                    00:0b:73:ca:07:d4:94:ef:de:2c:df:57:1f:31:ad:
                    6f:0d:4d:00:a4:af:ae:f5:47:92:f9:4d:da:d3:9a:
                    fe:72:58:7e:2d:b7:e2:2e:a5:78:97:7a:a0:a0:dd:
                    89:33:ff:f6:1e:c7:a7:aa:38:8d:06:8e:fb:fc:7a:
                    35:d4:b8:68:84:d6:a4:83:20:20:7e:3d:61:2d:b7:
                    ed:50:8e:48:62:52:2b:08:c4:bc:0c:bb:11:dd:73:
                    b7:cb:6b:43:4e:59:f4:12:3c:99:7d:61:c7:e5:1f:
                    69:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:39:02:22:82:BE:3E:CE:FB:DC:58:E5:9F:99:63:93:82:64:BB:42
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/qjkCIoK-Ps773Fjln5ljk4Jku0I.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.221.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:ef:e2:ef:66:6b:d2:be:2f:21:35:87:62:7e:ae:9f:58:5f:
         d9:b5:3e:7d:7b:63:41:ef:f5:2c:f9:90:ed:70:53:e3:e9:dc:
         3b:6b:f9:8e:42:86:b9:6a:d1:5f:ba:db:de:d1:cb:c1:7f:1a:
         74:02:68:6b:6a:cf:6a:7e:bb:b1:3a:e6:74:32:26:fd:2e:3b:
         1f:a0:ea:43:cb:61:48:2d:27:0d:c4:32:85:82:b7:f5:1e:94:
         1f:51:c8:f6:ac:3f:04:10:15:ca:88:dd:d4:85:f2:a8:2d:71:
         c9:57:6a:e9:1c:04:b0:20:ef:cb:bb:0b:b7:2b:19:40:9c:00:
         7a:0d:c0:a1:ed:21:ea:77:05:1b:e4:74:79:da:73:c5:eb:c7:
         04:00:61:36:ac:f1:cd:5e:80:73:2c:ea:8b:b3:92:b0:f7:8b:
         81:a3:25:aa:20:0f:bd:72:03:78:0f:54:c6:a9:9d:68:6e:80:
         34:43:4a:ae:2f:c2:dd:69:89:b9:da:44:75:b7:e4:e0:ad:a7:
         4f:92:70:a8:fe:36:07:3d:04:00:21:bd:04:e2:56:4c:79:99:
         82:85:86:6e:03:a6:9f:64:c2:4f:ee:87:23:49:64:2a:57:7d:
         c1:fb:5b:7d:52:80:cd:8b:8b:59:af:30:48:08:dc:e9:c0:f2:
         40:66:c2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:00:21 2024 by rpki-client on console-ams.rpki-client.org