Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer
File:                     xSvyehTUxJuqAvCZWQ287LDgS5c.cer (raw, json)
Hash identifier:          Oc/3J6R0Bn0okDRrd4Va1VUHuJGk7TJ8KfWBpQEgXwA=
Subject key identifier:   C5:2B:F2:7A:14:D4:C4:9B:AA:02:F0:99:59:0D:BC:EC:B0:E0:4B:97
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1434
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:25:43 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 156.0.192.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5172 (0x1434)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:25:43 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36E8936AR/serialNumber=C52BF27A14D4C49BAA02F099590DBCECB0E04B97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:44:02:90:1a:4e:d4:90:f3:78:e4:70:ab:62:
                    7d:67:39:a9:a3:fd:87:83:49:a3:ba:1e:0c:67:bc:
                    be:b5:d6:ef:06:8a:0f:6e:d7:b9:03:dd:46:98:a9:
                    8a:77:cb:49:13:53:5c:41:c0:cd:a9:94:2e:ac:a5:
                    6a:03:e1:0b:59:e2:93:e4:50:59:5e:3d:6c:76:c2:
                    3e:9a:cb:c0:e0:66:ef:04:ab:ca:cf:9e:66:4b:df:
                    a3:ae:d9:60:89:db:a7:25:ad:87:31:36:2d:e5:81:
                    6f:ca:c3:1b:48:a4:46:dd:bb:83:62:9e:56:98:e7:
                    58:f4:74:fb:28:11:83:ee:0b:35:cf:97:7b:bb:bb:
                    f0:1f:2b:5f:36:b2:2d:07:ba:a2:f1:b4:37:47:d2:
                    29:19:f8:fd:d7:17:32:4c:69:89:e7:c8:5c:5b:85:
                    99:51:8a:fa:fe:1c:b4:18:36:9f:46:52:7d:06:57:
                    5c:3c:01:71:b0:47:2e:5f:30:a5:a3:d6:c5:95:3a:
                    af:c4:2c:be:9e:df:63:1c:05:b9:62:ce:27:1c:23:
                    78:eb:54:38:79:48:ea:f7:e8:0f:8a:58:c1:72:33:
                    b0:b2:59:a5:5e:40:91:72:f5:13:bc:19:a3:35:f8:
                    37:70:81:44:3d:eb:cb:c7:2a:4f:79:2f:e0:8e:83:
                    6d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2B:F2:7A:14:D4:C4:9B:AA:02:F0:99:59:0D:BC:EC:B0:E0:4B:97
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.0.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:ef:9e:29:d3:62:1d:e5:ee:c0:08:99:44:43:88:34:97:f4:
         5a:a5:dd:cb:e9:0b:07:75:9d:40:33:87:3e:ed:06:cc:e3:28:
         21:d7:bd:72:8f:82:e3:96:48:be:df:c1:2d:64:19:a2:df:b9:
         68:67:da:89:90:55:b4:71:00:50:47:ec:19:b8:13:be:65:30:
         d9:76:b5:12:f3:a0:b3:6c:fa:84:f8:e6:ad:0f:7b:28:60:a9:
         80:86:d8:96:89:94:76:65:92:a0:58:36:c5:9c:b3:84:b2:ad:
         33:10:09:94:c0:65:92:d0:81:a4:79:eb:61:31:aa:6e:a7:96:
         d6:db:5a:71:11:66:15:ba:95:0e:db:c9:d0:78:ab:be:87:93:
         87:7b:0e:c1:74:9b:4b:19:37:d3:71:e1:99:86:83:4f:e9:af:
         2a:60:8c:d7:ab:31:fd:93:82:89:58:04:1d:2e:98:02:ad:ac:
         71:25:a2:32:9b:05:fa:ad:72:b2:4b:64:34:c0:93:eb:9e:f0:
         41:8b:e1:fd:61:6c:e4:1a:b6:88:84:23:8c:08:c3:61:7a:15:
         f8:7a:41:14:ee:27:55:33:c8:5c:41:ff:c2:3e:a1:dc:de:9e:
         77:6a:3c:41:74:9d:c6:82:60:65:4a:11:2b:80:0c:c1:a3:9e:
         f2:d5:ac:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:54 2024 by rpki-client on console-ams.rpki-client.org