Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
File:                     xkc2Jerv1nNskH0jHdnF29ufXqs.cer (raw, json)
Hash identifier:          DE8R4pMbqfLl9NXAHr3pPqsLTQgiJmewG/O+VOm/Dds=
Subject key identifier:   C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       144A
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:30:49 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 160.120.0.0/16
                          IP: 160.154.0.0/15

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 07 May 2024 00:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5194 (0x144a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:30:49 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36F731FAR/serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:02:aa:a0:f0:db:3c:79:bd:80:07:ac:19:aa:
                    15:b8:c1:36:dd:94:81:3e:7f:42:a2:20:7e:43:2c:
                    ca:08:cf:54:9f:55:a6:af:39:21:9f:d5:1a:b5:d7:
                    aa:10:16:fa:a1:88:25:e0:81:96:d0:d7:b0:c8:ef:
                    1c:90:e4:ca:9f:bb:b6:e8:f5:73:55:95:40:6c:51:
                    89:fd:6c:ad:a1:53:81:4b:76:03:25:61:38:51:8b:
                    85:06:22:95:30:1a:0b:2f:c5:35:2d:02:9f:42:1b:
                    82:95:c8:22:b0:b6:89:75:10:28:43:04:0f:7f:1d:
                    c4:8d:8d:c3:9b:29:a6:4b:9c:f1:d5:6d:3f:66:54:
                    80:2d:51:28:df:ec:4c:2f:17:d0:61:f3:49:f8:8b:
                    c3:3a:68:eb:ad:41:f2:1a:84:33:96:31:0b:79:1a:
                    60:5b:a0:49:3f:0d:1b:0f:7c:34:dc:fc:22:3b:05:
                    00:09:7b:01:22:0a:17:0f:ce:43:fe:d8:c3:ab:eb:
                    ea:7a:8f:ec:5b:e9:be:9a:24:fa:fa:a0:2d:7d:6a:
                    9d:86:8c:73:c6:81:4f:df:90:a7:c7:4f:b4:a2:04:
                    3b:72:32:d6:82:2b:78:01:61:c5:ba:6b:44:2e:ba:
                    44:8a:d1:01:59:16:38:a9:14:36:6f:5f:59:d9:43:
                    a5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.120.0.0/16
                  160.154.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         8e:74:01:ec:96:03:80:24:42:28:a5:5e:81:aa:5f:79:b5:17:
         85:0c:58:1e:14:46:13:72:8d:05:80:dc:00:2c:cd:99:d7:dd:
         f5:d9:4b:a5:fa:13:53:8d:25:c2:53:94:b6:78:b8:4d:8a:6d:
         bd:8c:41:5a:50:fd:3e:25:95:28:f8:9c:f9:54:78:c4:df:43:
         55:34:d6:c6:7e:9e:cf:d6:84:68:bf:d2:e4:4a:98:04:ae:b1:
         92:59:6a:64:91:e3:9f:e1:f1:f4:b6:50:c5:ea:aa:ff:f4:cd:
         03:c2:3a:6a:3a:6b:bd:f5:24:1d:06:a0:12:68:a5:51:fe:80:
         6c:62:49:08:0e:ca:f2:2e:bb:c7:7e:8e:21:c1:33:3b:73:5c:
         54:f2:88:00:32:47:d0:d0:f8:38:0a:b1:c1:2d:7e:d8:31:0a:
         a2:c3:9e:65:ae:56:95:b9:3a:b3:a0:ce:2a:ab:c8:8a:d2:8d:
         a8:ad:f4:bc:34:40:65:37:25:41:8f:93:2e:78:5c:8f:26:21:
         16:c4:80:c7:3d:9c:8b:43:e5:f3:6b:78:6f:48:3f:d2:52:6d:
         dc:90:76:e6:86:75:0d:b9:19:7a:de:fa:98:97:0f:53:65:8f:
         d7:8a:5e:49:31:be:05:88:cf:7f:66:cc:a5:9c:0e:c2:03:e9:
         f4:1c:19:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:13:16 2024 by rpki-client on console-ams.rpki-client.org