Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/zt9uwjs6Dp_IyZsUc0ra56HYmUo.cer
File:                     zt9uwjs6Dp_IyZsUc0ra56HYmUo.cer (raw, json)
Hash identifier:          0/IB8/EWE18yYRyOb5DW0IBbw2OCFzjccM1Y+EW2/7c=
Subject key identifier:   CE:DF:6E:C2:3B:3A:0E:9F:C8:C9:9B:14:73:4A:DA:E7:A1:D8:99:4A
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       13DC
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:03:51 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 164.160.184.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 07 May 2024 00:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5084 (0x13dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:03:51 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3698125AR/serialNumber=CEDF6EC23B3A0E9FC8C99B14734ADAE7A1D8994A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:78:7f:93:44:79:b4:99:4a:49:eb:ae:69:6e:
                    53:5b:09:76:a4:83:4a:24:02:2e:3c:c8:38:56:ac:
                    1d:e2:bd:36:00:e0:bc:4f:b8:81:78:49:5b:ea:99:
                    57:2b:2d:a6:60:99:78:49:a0:7d:ad:5a:35:c6:b1:
                    37:85:c5:b9:51:cc:cd:95:6d:f4:05:36:6f:33:5f:
                    e2:f1:73:70:d8:d2:0c:77:0f:ff:6a:71:63:6e:c2:
                    e6:38:d7:39:eb:e5:b8:ae:ce:59:4a:02:01:3d:26:
                    ca:c0:41:0f:d6:c8:1e:b2:b9:9d:23:23:8e:d3:54:
                    b6:0c:ac:3b:23:40:49:46:8d:29:73:34:9f:86:94:
                    06:97:5b:74:dc:1a:28:9d:a2:1c:ab:ea:30:0e:2c:
                    0a:8a:cf:70:53:21:46:09:aa:5c:1c:77:41:5b:46:
                    14:59:89:f5:c9:1c:b2:0e:42:69:ab:8c:6c:fe:bf:
                    37:a8:9d:c4:c0:43:94:1d:11:f9:f1:65:b6:16:02:
                    59:79:3d:9d:9f:01:f3:0d:ee:74:d5:70:bf:b7:a1:
                    a5:d5:e2:b6:98:bf:92:2b:b7:74:e3:66:f6:1a:8f:
                    41:a5:fb:a4:36:3d:49:c8:f8:04:1c:9f:e9:1c:72:
                    ae:c7:29:c2:61:6e:3e:a5:a7:62:9a:c1:45:c5:68:
                    29:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:DF:6E:C2:3B:3A:0E:9F:C8:C9:9B:14:73:4A:DA:E7:A1:D8:99:4A
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.160.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:6b:e2:9a:78:ec:33:3b:09:98:08:c5:a2:d7:93:5a:c8:75:
         1a:0e:a2:62:98:20:c5:4a:d7:fc:92:7f:08:e0:d9:47:8b:87:
         05:ea:e3:82:e2:76:30:3f:42:48:5a:32:3a:fe:86:de:40:38:
         2d:14:54:84:ad:45:c6:0a:0e:b6:f6:13:79:d4:91:50:6e:62:
         c7:c2:2e:32:f2:df:28:78:dd:72:58:8c:ff:5e:07:03:f3:89:
         fe:a7:62:ca:06:83:ad:06:ed:ed:61:11:86:45:f6:a0:20:99:
         75:9f:80:74:b9:cf:60:87:65:5d:08:8a:4a:3f:d7:0c:54:ac:
         1b:11:91:8e:53:d8:4b:5d:e9:03:96:2a:b0:ff:32:16:61:d1:
         c8:8a:d7:3a:1d:ac:71:af:93:bd:6b:a8:ce:c1:99:ee:6d:0b:
         ca:da:7a:87:76:3d:d7:c5:bf:55:d3:3b:36:cf:d6:f8:e2:79:
         71:83:14:32:a0:e3:7c:f8:63:9a:40:50:3a:8e:54:2b:0f:08:
         fd:ec:1f:27:a8:4b:97:9d:46:ae:33:80:f4:6a:dc:3d:15:99:
         9b:88:c3:65:75:3c:d1:b7:0c:b5:97:ed:46:5e:fa:10:21:bf:
         04:e1:91:da:79:bc:4f:be:d4:51:e7:49:2a:b6:a4:70:b7:bd:
         15:71:04:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:22:16 2024 by rpki-client on console-fra.rpki-client.org