Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/rSMXDJgzsl2HE6A3DEhgcko8h-o.cer
File:                     rSMXDJgzsl2HE6A3DEhgcko8h-o.cer (raw, json)
Hash identifier:          aVk9Ggo5JK6SzJ95Z0Op/gz8YtsWD96rKDFHCPr+esY=
Subject key identifier:   AD:23:17:0C:98:33:B2:5D:87:13:A0:37:0C:48:60:72:4A:3C:87:EA
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1337
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/C44538C89C2511EBA8D42654F8AEA228/rSMXDJgzsl2HE6A3DEhgcko8h-o.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/C44538C89C2511EBA8D42654F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:23:24 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 165.0.0.0/16

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4919 (0x1337)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:23:24 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F362B8A8AR/serialNumber=AD23170C9833B25D8713A0370C4860724A3C87EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d3:54:42:4f:0f:b2:e3:1a:bf:86:db:f1:3e:
                    4d:1d:e6:69:59:e9:f4:1c:e3:89:c6:88:17:b8:ba:
                    a8:5f:9f:49:47:e4:5d:43:8b:1e:c0:9b:2b:6d:51:
                    f5:f8:46:3c:79:68:30:54:fd:0f:bc:74:b3:eb:01:
                    bf:78:64:1c:9e:f7:69:03:f7:7d:51:af:95:bf:02:
                    de:9b:f5:95:48:bc:c1:50:df:a8:1f:5d:4c:48:c1:
                    78:b5:21:cd:8e:95:c7:44:f0:19:ce:8a:93:7b:44:
                    21:3d:2f:4f:20:2c:13:f0:65:83:49:a4:bf:16:30:
                    86:3a:43:1e:03:1c:4a:3d:85:d6:41:42:cb:bf:c3:
                    0e:a5:0d:49:1d:a3:2b:4d:76:f9:c7:f1:d1:d4:f5:
                    e2:a4:2a:fe:86:d8:aa:66:86:51:91:91:05:71:10:
                    10:4f:67:01:51:ce:b6:6d:96:32:cd:19:3f:46:30:
                    7e:00:52:7d:f3:8a:34:82:f8:d6:f5:c6:c6:2d:04:
                    79:4a:67:bd:7c:e8:58:5b:bd:ee:18:00:4d:09:9d:
                    35:76:46:f6:aa:b4:e3:1d:1b:6c:f2:df:ec:c9:20:
                    23:2f:da:5b:16:fe:89:bb:7e:4a:75:92:80:76:67:
                    f3:3f:fb:98:d7:a9:ec:85:f1:53:9b:b1:96:9f:ea:
                    c1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:23:17:0C:98:33:B2:5D:87:13:A0:37:0C:48:60:72:4A:3C:87:EA
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/C44538C89C2511EBA8D42654F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/C44538C89C2511EBA8D42654F8AEA228/rSMXDJgzsl2HE6A3DEhgcko8h-o.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.0.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         95:b5:ed:61:2a:25:77:6d:09:53:c8:6a:55:16:bf:4f:73:01:
         7a:c8:ab:dd:43:ca:b6:01:3e:98:0a:34:98:76:9d:98:44:57:
         d5:16:31:19:d8:dc:c5:a0:5b:85:ab:84:b2:83:46:69:c9:63:
         15:22:1d:95:0b:af:6c:76:61:b7:0f:38:de:e9:87:f8:6a:96:
         4a:cf:ed:da:8c:dc:80:67:80:7d:22:fd:02:b7:36:56:4f:f6:
         a2:14:6e:4f:42:a7:f1:5b:46:16:65:ce:93:e9:3a:7c:5e:f2:
         da:a4:b6:fc:7b:f8:82:f3:a5:cc:5b:fd:64:1a:6c:2a:cd:63:
         de:5c:af:67:29:9f:20:0c:82:87:94:70:a7:54:17:1a:a1:92:
         4c:d9:ef:8a:53:18:e1:37:62:c6:6c:41:f3:cd:a7:75:f5:53:
         de:cc:9c:a5:e8:87:c1:66:d0:29:66:d3:c0:7d:d8:8a:ca:7b:
         71:f7:ae:63:3f:6d:e7:8d:2b:f5:46:03:f5:f2:34:54:26:1e:
         54:1f:a7:9c:df:30:3a:9c:0f:19:ff:b2:a9:bd:e4:72:20:c9:
         1d:51:62:68:e5:0a:a9:4d:25:39:47:b9:07:f5:18:b1:15:e2:
         0a:18:c5:9b:ac:31:bc:48:3d:3d:9a:9a:c4:12:71:7a:0c:e6:
         60:23:ce:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:54 2024 by rpki-client on console-ams.rpki-client.org