Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer
File:                     xPPi6r3p45Aa27wxyfJTXN47HG8.cer (raw, json)
Hash identifier:          L1teXqIWNpAgi3rM1arPCEAU8gqx1QjZgUz60AoG2+c=
Subject key identifier:   C4:F3:E2:EA:BD:E9:E3:90:1A:DB:BC:31:C9:F2:53:5C:DE:3B:1C:6F
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1407
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:15:11 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 156.192.0.0/11

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5127 (0x1407)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:15:11 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36B49FAAR/serialNumber=C4F3E2EABDE9E3901ADBBC31C9F2535CDE3B1C6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e1:e0:cf:2e:6a:dc:91:79:a6:24:24:72:04:
                    8f:7f:e9:3a:99:81:df:20:57:b2:c8:f9:ad:eb:ff:
                    b9:ab:20:aa:08:97:11:ae:0f:bd:bf:27:8f:49:1b:
                    bf:54:99:b9:f4:a3:ab:d3:fc:ef:64:91:fb:c4:0c:
                    e7:59:da:2c:53:ed:c2:b7:16:8e:82:a9:3f:02:ae:
                    27:7e:4e:cc:dc:fb:d5:22:9c:2d:f3:d8:94:ae:2e:
                    d2:36:97:4b:31:ee:c4:7f:32:73:5a:47:37:6e:9a:
                    70:46:c6:06:0f:a9:d0:3b:ae:e5:ba:8e:d1:84:55:
                    d4:8b:e5:33:9b:a4:58:e9:0d:66:a9:8e:df:47:52:
                    1a:f8:ff:44:74:8c:b4:d5:0a:c9:89:f4:3a:f6:bc:
                    eb:7c:17:b4:16:fe:3c:88:a4:cd:66:08:e0:11:70:
                    1b:e8:77:56:19:97:ba:a9:c9:36:f5:7f:5b:12:9d:
                    c6:68:ac:12:40:82:5b:35:7b:36:fa:d8:2d:ab:fe:
                    98:2a:03:f1:2b:85:7f:cd:78:8d:fc:53:d5:de:54:
                    cc:bb:18:89:e5:a3:ec:6a:49:75:17:45:e0:59:e0:
                    0a:0a:1c:35:91:17:fd:01:79:35:7c:4d:0b:d3:8f:
                    16:25:8d:31:c5:5a:8c:5c:ff:23:f7:0e:21:85:8b:
                    71:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F3:E2:EA:BD:E9:E3:90:1A:DB:BC:31:C9:F2:53:5C:DE:3B:1C:6F
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.192.0.0/11

    Signature Algorithm: sha256WithRSAEncryption
         4a:0e:01:9a:e6:91:98:d3:f3:f9:5a:ce:34:ab:96:36:4a:d8:
         73:08:a4:e7:eb:05:87:b7:e7:fb:6b:5e:d3:e5:13:d6:1e:a1:
         82:07:18:8a:10:d6:f3:e2:b6:eb:d0:a1:8d:11:47:6a:d3:5f:
         3a:81:4f:ae:c6:e3:d3:58:d7:dc:94:49:1d:1c:a6:bf:c7:e0:
         df:b8:1a:7b:c5:48:5e:56:13:e4:d9:60:d7:77:af:d6:5f:08:
         a4:c7:5f:ff:2d:76:e2:a4:92:41:d6:f8:2e:dc:7e:5e:8d:8a:
         1a:90:9f:a8:69:9d:cf:9c:a8:e1:1b:30:c4:0d:03:8f:6b:58:
         3f:0a:c5:cf:b3:3d:39:fc:3e:d0:cf:89:d4:4c:cc:b5:30:c3:
         1a:e8:02:86:b4:ce:65:7f:59:a0:c7:6d:99:f7:c6:5a:bc:14:
         cb:90:39:dd:95:fa:ce:0a:1d:32:17:8c:f5:ba:09:2c:3f:17:
         41:da:e9:d7:92:9a:d2:1a:c1:09:4c:94:be:d9:2d:a7:1f:8a:
         c5:c6:6c:6b:79:e6:da:16:28:d2:cd:86:65:c4:72:89:63:9f:
         2d:a7:88:93:34:2c:e2:3d:d9:e4:68:1d:b4:92:93:e7:95:d7:
         ae:e7:34:b3:3d:62:33:25:3d:b1:2e:a0:16:58:46:8c:e8:a1:
         a0:91:fe:e5
-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgICFAcwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNDAxMDEwMTE1MTFaFw0yNTAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNkI0OUZBQVIxMTAvBgNVBAUTKEM0RjNFMkVBQkRFOUUzOTAx
QURCQkMzMUM5RjI1MzVDREUzQjFDNkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQC74eDPLmrckXmmJCRyBI9/6TqZgd8gV7LI+a3r/7mrIKoIlxGuD72/
J49JG79Umbn0o6vT/O9kkfvEDOdZ2ixT7cK3Fo6CqT8Crid+Tszc+9UinC3z2JSu
LtI2l0sx7sR/MnNaRzdumnBGxgYPqdA7ruW6jtGEVdSL5TObpFjpDWapjt9HUhr4
/0R0jLTVCsmJ9Dr2vOt8F7QW/jyIpM1mCOARcBvod1YZl7qpyTb1f1sSncZorBJA
gls1ezb62C2r/pgqA/ErhX/NeI38U9XeVMy7GInlo+xqSXUXReBZ4AoKHDWRF/0B
eTV8TQvTjxYljTHFWoxc/yP3DiGFi3E/AgMBAAGjggLwMIIC7DAdBgNVHQ4EFgQU
xPPi6r3p45Aa27wxyfJTXN47HG8wHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkI0OUZBL0I1NDQ4
NDUyMUMxQzExRTY5RjdDNzUwQ0Y4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZCNDlGQS9CNTQ0ODQ1MjFDMUMxMUU2OUY3Qzc1MENGOEFFQTIy
OC94UFBpNnIzcDQ1QWEyN3d4eWZKVFhONDdIRzgubWZ0MB4GCCsGAQUFBwEHAQH/
BA8wDTALBAIAATAFAwMFnMAwDQYJKoZIhvcNAQELBQADggEBAEoOAZrmkZjT8/la
zjSrljZK2HMIpOfrBYe35/trXtPlE9YeoYIHGIoQ1vPituvQoY0RR2rTXzqBT67G
49NY19yUSR0cpr/H4N+4GnvFSF5WE+TZYNd3r9ZfCKTHX/8tduKkkkHW+C7cfl6N
ihqQn6hpnc+cqOEbMMQNA49rWD8Kxc+zPTn8PtDPidRMzLUwwxroAoa0zmV/WaDH
bZn3xlq8FMuQOd2V+s4KHTIXjPW6CSw/F0Ha6deSmtIawQlMlL7ZLacfisXGbGt5
5toWKNLNhmXEcoljny2niJM0LOI92eRoHbSSk+eV167nNLM9YjMlPbEuoBZYRozo
oaCR/uU=
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:54 2024 by rpki-client on console-ams.rpki-client.org