Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/vy5RyFo6gX_2x_zGkwZPizx6mcY.cer
File:                     vy5RyFo6gX_2x_zGkwZPizx6mcY.cer (raw, json)
Hash identifier:          VvxxBD89xtDj5tMGwSAZuGl1MyUfAuDbLdMJqqrMOQw=
Subject key identifier:   BF:2E:51:C8:5A:3A:81:7F:F6:C7:FC:C6:93:06:4F:8B:3C:7A:99:C6
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1382
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3660137/341D643E5C1C11ECBD6FEB6D5A40D577/vy5RyFo6gX_2x_zGkwZPizx6mcY.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3660137/341D643E5C1C11ECBD6FEB6D5A40D577/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:41:19 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 169.239.0.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4994 (0x1382)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:41:19 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3660137AR/serialNumber=BF2E51C85A3A817FF6C7FCC693064F8B3C7A99C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ff:62:eb:79:d0:13:4b:df:a7:0c:ad:4a:b0:
                    f2:63:2f:14:6c:0f:95:fa:35:84:32:1a:92:d6:9b:
                    cd:2e:2b:d5:ad:fa:ac:97:f2:5a:6b:87:e6:e7:58:
                    5e:7c:f9:e1:0c:4b:04:13:13:29:c8:59:58:3b:4f:
                    08:32:56:cb:d5:9d:d0:4e:c7:ff:2c:43:82:69:86:
                    2f:09:0e:4b:f0:8b:1f:67:d5:d2:b1:9b:f9:6e:6b:
                    91:4a:aa:bd:e4:8c:5b:70:20:69:d5:31:1a:e6:92:
                    86:1b:99:45:c3:ca:35:df:a2:dc:02:ff:3f:2d:32:
                    18:bb:24:07:53:92:a9:a3:86:5d:54:cd:61:b3:0a:
                    ef:70:19:0d:2b:ed:fe:5f:52:6f:85:7a:f0:14:24:
                    02:39:cc:c6:66:40:bd:f9:84:8d:df:a2:ad:b1:83:
                    be:98:01:5c:3a:11:60:ac:69:4e:2f:5a:21:16:3c:
                    0e:7f:d6:af:b6:c8:0d:5b:4e:2c:96:61:5a:d9:fc:
                    6f:46:3f:7b:ce:83:80:dd:e7:ad:d7:62:e1:be:b7:
                    ef:85:47:1c:b0:f9:72:c0:c3:51:6c:f9:90:b2:0e:
                    0e:75:54:95:90:a9:63:e1:4c:48:9e:46:a2:2f:40:
                    57:d4:b5:21:21:ba:c2:d5:76:9f:41:92:6d:fd:46:
                    8e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:2E:51:C8:5A:3A:81:7F:F6:C7:FC:C6:93:06:4F:8B:3C:7A:99:C6
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660137/341D643E5C1C11ECBD6FEB6D5A40D577/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660137/341D643E5C1C11ECBD6FEB6D5A40D577/vy5RyFo6gX_2x_zGkwZPizx6mcY.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.239.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:9e:5b:b3:3f:c8:32:d3:ee:7a:fa:cf:1a:21:d8:2f:57:e1:
         0b:fa:0b:c7:6a:ca:a4:46:8b:af:04:19:94:0c:60:dc:96:b8:
         83:49:8d:98:2b:c2:79:05:2a:f8:af:16:c1:c8:05:7f:e3:2b:
         dc:a4:36:37:7b:07:bf:26:ec:5e:f9:f9:3c:f1:4f:c8:22:ba:
         a6:58:e8:c5:c9:46:90:bc:e6:58:86:3d:e0:0b:a2:dd:28:93:
         e3:6d:f6:ca:1e:f2:bb:a0:9c:3c:19:a7:1c:70:dc:cf:4b:fe:
         1e:f4:cd:a5:19:96:08:f6:36:1b:4f:e1:38:1a:da:c2:0b:ff:
         8b:ca:9a:e0:79:ca:26:9e:dc:58:e3:b5:18:8a:12:e2:20:4f:
         fb:09:4e:68:2d:09:99:d9:1f:9f:79:76:0a:dc:4d:a3:56:22:
         9d:e3:79:3d:9e:c4:26:5b:cc:6a:55:8f:26:ea:44:a0:ec:37:
         25:55:04:7c:c9:2d:14:9d:29:68:8e:42:90:9a:a9:76:08:08:
         14:18:a7:a3:fb:16:54:d4:7d:b2:d8:8b:8e:96:99:b1:5a:3b:
         c3:cd:f5:3b:30:60:d7:6f:b6:3e:1e:ea:b4:3a:39:12:e4:31:
         73:e5:ce:d6:49:2b:e6:ff:13:be:26:99:75:31:4e:06:5f:50:
         c4:db:4e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:54 2024 by rpki-client on console-ams.rpki-client.org