Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/tgB5bcJQyHSsVx0yPQFLiHYkPF4.cer
File:                     tgB5bcJQyHSsVx0yPQFLiHYkPF4.cer (raw, json)
Hash identifier:          ATLbJW01Cnjo7CiODtE2VNlvIkki4o0UJi6jS+RdONI=
Subject key identifier:   B6:00:79:6D:C2:50:C8:74:AC:57:1D:32:3D:01:4B:88:76:24:3C:5E
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1321
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/tgB5bcJQyHSsVx0yPQFLiHYkPF4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:17:25 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 164.160.20.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 07 May 2024 00:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4897 (0x1321)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:17:25 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F361A501AR/serialNumber=B600796DC250C874AC571D323D014B8876243C5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:66:1e:a6:06:ca:dc:a8:6a:16:a2:4a:36:d9:
                    bd:48:1f:bb:a3:80:d1:06:94:39:2a:fb:5f:04:22:
                    09:d2:d1:ff:bc:f0:b6:c2:70:77:65:72:df:bb:b2:
                    e7:32:87:cd:da:c6:05:35:a4:af:da:26:25:b8:72:
                    c7:a9:32:92:ee:7c:c6:02:cf:de:81:83:85:48:d9:
                    45:27:16:13:c9:cb:b5:6e:a7:95:3a:f9:a4:98:8d:
                    62:db:1c:c8:b8:0b:89:72:6d:91:fc:14:ca:32:97:
                    3a:05:bf:8d:0d:4f:4e:05:8e:c7:43:39:98:a6:3c:
                    8a:aa:06:d7:8e:dd:4d:f5:2b:8e:4c:50:62:4a:2e:
                    c2:78:91:fb:2f:fa:a4:55:f7:0e:d9:0e:c8:1f:9c:
                    c2:16:63:92:eb:f9:f9:f4:af:74:8d:72:ef:52:6d:
                    71:6c:f5:67:77:f5:9e:84:0d:59:0f:58:57:c1:b8:
                    82:31:12:17:52:e2:4f:4c:89:fa:e3:23:20:a3:c3:
                    23:ae:15:9c:d6:97:28:44:97:32:d8:cd:83:3d:58:
                    b4:2d:dc:27:a7:8f:6e:1b:dd:65:d2:11:17:f2:36:
                    28:55:28:f9:73:5d:bf:b8:fd:7d:b0:79:76:b7:33:
                    41:2d:8b:92:e3:95:59:2a:a7:95:4c:8a:63:5b:ff:
                    a6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:00:79:6D:C2:50:C8:74:AC:57:1D:32:3D:01:4B:88:76:24:3C:5E
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/tgB5bcJQyHSsVx0yPQFLiHYkPF4.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.160.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:87:f0:f3:a7:83:4a:42:d4:1f:fd:47:92:b3:33:75:f3:c2:
         3f:e8:0f:d8:59:72:6a:9b:77:3f:f5:ea:0a:3e:f8:58:09:67:
         f9:92:68:c5:d6:97:37:df:74:32:81:c6:86:12:ec:ec:30:2e:
         64:5f:d7:5b:34:08:fc:d7:4b:f8:38:37:47:ef:50:44:96:9a:
         55:62:4a:bf:b4:1c:6b:1e:25:eb:82:c2:d4:da:af:14:ac:b3:
         cb:e4:75:38:bf:0f:28:4f:9b:68:27:ae:00:31:90:78:85:f7:
         3b:2b:15:99:0f:0e:b9:22:19:84:ef:c4:bd:e4:27:82:66:5a:
         a4:6c:62:21:b3:e2:f2:70:e5:0f:dd:6f:ae:82:2b:62:5c:78:
         da:d6:e3:69:1f:86:02:b9:7d:6d:51:bc:19:22:cf:5f:4d:ae:
         ff:9f:ca:81:87:08:d6:a5:ee:58:24:75:9e:58:5b:e0:e7:04:
         74:51:2f:4b:60:bd:82:04:d0:be:a4:1b:10:b8:ed:e1:df:3d:
         75:33:85:21:ac:e9:bf:78:be:fc:97:fa:d3:e6:82:13:05:81:
         e8:68:5b:73:88:f5:11:47:7e:fd:f8:38:37:c0:84:cb:43:2c:
         95:79:b3:3b:32:99:60:0f:f9:5e:f9:91:4a:94:b7:32:de:45:
         f3:03:1c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:13:16 2024 by rpki-client on console-ams.rpki-client.org