Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
File:                     xcFCD1BxamsUb136joK_0eTdmRA.cer (raw, json)
Hash identifier:          KukzodLd8M26fb5j7BFJINPceYjU6na5C4ydx6pcX3k=
Subject key identifier:   C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       17A8
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 16 Jan 2025 21:38:31 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 160.226.184.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Feb 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6056 (0x17a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC
        Validity
            Not Before: Jan 16 21:38:31 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36CFBB0AR
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6d:52:cf:0f:77:f0:3e:f6:aa:e5:3c:30:c3:
                    60:86:4c:0e:24:1c:77:ae:ae:9d:09:0b:58:cb:1b:
                    36:c0:37:47:86:0f:8d:1d:97:1b:cd:2e:0c:a9:f7:
                    3f:98:50:91:c2:fb:c3:ae:06:6f:ec:ae:40:14:4a:
                    e4:87:e9:47:aa:cd:b1:66:2f:d4:54:5e:05:45:9e:
                    46:ff:8a:17:1e:20:ac:24:eb:f2:8f:3a:95:ea:e6:
                    d5:7d:f4:d2:2c:21:30:c5:6c:e3:f4:fa:7e:23:7a:
                    cf:45:e3:99:a8:cb:33:6c:ea:3a:3f:3a:9e:28:58:
                    eb:12:8c:fb:a7:8c:d6:75:21:7c:6b:2f:4f:cd:e2:
                    f8:5c:5d:46:b7:76:d0:66:a7:4a:c0:b4:a5:fc:80:
                    82:b1:97:c5:2b:c8:a4:19:d7:f0:2f:a5:71:72:60:
                    76:52:eb:cd:98:02:86:ba:2b:8f:92:6c:32:55:81:
                    d7:b5:36:09:5a:6d:fa:1d:79:73:69:5e:53:20:9b:
                    fc:11:91:cc:7b:ac:9a:66:70:9e:eb:3d:f6:9e:05:
                    b4:2f:fb:5b:c3:ed:90:a3:c0:27:49:bb:ec:2f:60:
                    5a:4c:c9:bf:87:3d:b7:5b:f3:88:b1:14:f5:5d:c5:
                    99:3a:0b:fa:e7:c7:9e:1e:87:8e:1a:f9:ba:1e:bd:
                    be:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.226.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:6c:9f:e2:fd:4a:cd:6d:a1:5e:b3:aa:5d:1d:c0:f8:98:49:
         de:6c:60:27:f6:0f:8e:e6:b7:bd:6c:4e:ba:77:75:63:38:d4:
         7a:72:30:11:83:47:69:54:63:e0:02:9e:5b:d1:46:c6:aa:af:
         dc:e1:74:e7:67:df:da:9c:d5:fa:af:ce:8d:5b:4f:f1:b8:b7:
         29:4b:f0:1c:5e:1d:c9:0c:dc:85:f2:e3:00:83:a8:cd:eb:e6:
         6d:d8:dc:a2:bb:f0:f6:01:27:98:15:a9:ae:51:01:e7:1a:c5:
         4c:0d:bb:45:a7:0e:fe:51:a6:53:86:d6:1f:65:a7:0b:70:85:
         9e:d7:58:f7:98:13:bc:1c:79:17:6b:cd:2d:4a:de:a2:5e:00:
         a6:c4:71:09:14:87:88:97:0e:4e:0c:ef:ac:76:19:4e:0f:12:
         a8:9b:65:84:44:c7:2e:ec:b6:b6:6f:0e:bb:5a:1b:8f:07:11:
         bc:13:69:e0:ec:21:9c:81:9f:93:cc:cb:a2:74:2c:eb:27:86:
         3d:d6:86:ea:09:95:42:b0:f9:45:2f:50:2d:33:ce:ff:e2:b4:
         93:2c:81:68:f2:07:15:f8:c1:5f:f7:75:95:73:ae:2a:75:7b:
         08:2e:ad:67:6c:e3:be:fa:90:e7:b1:ba:a6:3d:4a:4d:05:75:
         cb:20:56:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 22:50:43 2025 by rpki-client