RPKI Certificate
Location:                 ./rsync/rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer (download)

Subject key identifier:   DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Manifest:                 rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
CA Repository:            rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: AS: 328732
    1: IP: 102.221.216.0/22
    2: IP: 2c0f:e9a8::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5546 (0x15aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:23:22 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F365C79EAF/serialNumber=DD7499A8C8C12AB67E15EB492808A692ED4B59F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b9:86:ad:c3:be:e3:19:86:fc:7a:62:48:f5:
                    37:9c:c2:cd:31:ec:2d:98:eb:77:0f:b3:2a:c3:90:
                    46:d8:d9:e4:99:6c:43:a1:09:96:ff:82:dd:d1:e9:
                    df:1e:81:73:a1:80:9f:39:cf:f0:56:cd:58:f3:f6:
                    bf:4a:0b:71:a6:7e:61:d4:53:a7:12:a5:96:75:41:
                    1d:79:1d:1b:ff:c8:14:04:c1:f0:49:70:8d:6b:de:
                    7e:cd:9c:6c:59:b3:17:ad:97:50:00:cf:81:30:c4:
                    16:d7:3c:2a:a1:81:58:b7:9b:33:cd:c0:a3:4f:b4:
                    45:8f:81:a2:f2:2c:9a:a1:bb:2d:d4:79:8d:57:d6:
                    89:20:92:7e:de:ac:dc:04:8c:14:fa:f9:2a:a1:c5:
                    db:d0:ea:e3:43:06:ba:26:ad:bf:29:c8:b3:13:60:
                    26:e0:49:f3:a2:87:7e:7a:82:c4:70:fa:4c:bb:22:
                    e5:95:dd:2b:19:3b:f2:16:1e:9d:1f:a3:3c:8c:ad:
                    23:69:2f:af:ed:e1:2b:79:2f:ab:00:8d:d3:35:03:
                    64:62:93:4f:74:17:29:26:4b:4d:cd:2c:21:98:bb:
                    ce:cb:38:09:5f:4e:a8:9c:53:52:a5:13:41:6b:82:
                    29:5e:d4:5e:d6:e7:e3:cc:0c:22:fc:b2:2d:46:0f:
                    09:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328732

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.221.216.0/22
                IPv6:
                  2c0f:e9a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:34:c0:84:d4:c5:56:ac:3a:cc:a8:c6:cb:44:f1:1e:3f:a3:
         38:4f:99:73:b9:eb:3e:72:99:2a:61:56:0b:e3:6b:57:64:70:
         6d:0e:02:4d:b8:f1:10:4a:99:b5:eb:99:b5:d3:c4:f6:45:f8:
         aa:b0:a6:ef:dc:a5:54:50:b5:45:0b:21:64:78:7a:4c:f4:b1:
         52:f5:32:b3:52:27:08:a0:35:96:de:6a:54:27:08:ed:b8:bd:
         09:7f:f1:e3:61:d8:a0:46:85:18:6d:06:bb:70:54:6d:02:02:
         ea:23:69:84:0e:e2:16:7b:3b:fa:66:c6:d0:28:d1:e5:c3:c0:
         6c:5d:5f:24:cd:d6:49:d2:b5:a3:a7:df:78:6d:81:52:d8:9f:
         fc:a9:88:54:58:c9:a8:b1:41:e5:b6:30:8a:04:0c:2f:05:91:
         99:1d:1f:a7:7c:0e:64:ce:f7:68:e0:8f:e9:3f:a0:5e:30:fb:
         ab:8e:ad:06:0e:d2:8c:dc:00:7e:e9:a9:2d:d3:27:95:8f:b3:
         e5:a3:8a:8e:0d:90:2a:42:e5:25:7c:0a:25:61:e1:a8:fd:7c:
         05:6f:d6:f0:77:45:d5:72:52:33:14:fd:82:49:a2:2d:be:d5:
         91:bc:d5:62:06:2a:e7:21:19:51:21:34:27:be:65:09:0c:77:
         35:d1:c5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----