RPKI Certificate
Location:                 ./rsync/rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer (download)

Subject key identifier:   DD:83:C8:C0:05:CD:71:04:B8:26:E6:DA:A2:4B:C9:51:79:08:9A:A3
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Manifest:                 rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
CA Repository:            rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: AS: 328403
    1: IP: 102.130.101.0/24
    2: IP: 2001:43f8:13e0::/48

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5334 (0x14d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:02:11 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F36162E8AF/serialNumber=DD83C8C005CD7104B826E6DAA24BC95179089AA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:db:c0:68:c8:7b:fe:08:7a:34:70:98:ad:d9:
                    2a:56:ac:51:08:6e:9e:36:73:f1:e1:20:ce:cc:09:
                    26:ce:5f:03:1e:02:ce:f7:27:cc:9b:45:76:c9:5b:
                    93:27:86:ba:12:6a:44:21:5c:b6:22:c1:19:5d:4b:
                    29:21:27:39:9b:84:9a:2e:96:71:67:59:e0:48:2a:
                    12:ee:85:23:70:73:81:4e:2f:d8:83:bf:2a:62:d4:
                    61:20:49:40:76:49:0a:c2:45:6e:17:0c:af:c1:0d:
                    66:6a:a4:49:37:a5:bc:2d:45:68:18:34:a0:8d:b6:
                    f5:85:97:38:d5:5e:a4:59:8c:28:3a:e9:1d:1e:54:
                    51:de:fc:9b:44:50:df:c7:64:c9:84:aa:e9:4c:30:
                    d6:a9:87:a4:df:3c:1d:1c:75:6e:33:46:5b:03:b3:
                    f5:bc:ab:04:01:e3:b7:48:30:6a:a7:85:7b:7b:c0:
                    47:64:5b:7c:bc:03:ea:ed:e2:89:c8:4c:47:2a:5f:
                    c5:96:a8:58:c5:6a:c1:cc:14:78:1e:06:2a:7c:ef:
                    d6:3a:a6:87:43:ce:04:41:48:02:88:4c:04:2b:68:
                    6a:e3:3b:4b:be:1e:95:dc:61:58:43:8d:19:09:35:
                    77:6a:b6:ca:e1:5c:ed:69:13:b8:ec:17:20:d8:75:
                    b1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DD:83:C8:C0:05:CD:71:04:B8:26:E6:DA:A2:4B:C9:51:79:08:9A:A3
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328403

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.130.101.0/24
                IPv6:
                  2001:43f8:13e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:95:03:a4:96:14:fd:dd:42:d2:be:19:f8:62:66:4e:94:4d:
         87:75:6a:51:20:5d:47:69:94:e1:9a:8e:63:49:58:4c:04:f2:
         4b:ad:ca:ac:8c:28:93:85:73:87:18:22:b3:e4:91:45:bb:e5:
         d3:b6:13:0a:b6:6d:c4:30:13:31:1a:5b:bd:b0:ec:d8:53:18:
         4e:83:4d:98:70:9c:f8:ba:f4:b2:32:46:65:3e:e2:f4:a1:02:
         ea:0b:91:8a:56:97:c9:7c:58:fc:25:89:e5:e6:89:2f:6b:8c:
         1e:8f:2e:df:0a:51:a0:ba:6e:50:3e:cd:75:a9:cc:03:61:b8:
         e6:de:cb:62:8a:4b:71:2a:d5:72:3b:b6:7d:c9:16:3e:36:01:
         6b:ec:1d:a0:30:1f:08:f6:3a:59:dd:c5:20:80:61:d8:4b:69:
         6d:64:2e:23:5f:55:20:dc:2b:88:db:97:b8:59:18:cf:f5:61:
         23:01:77:ed:b4:64:7e:c7:31:cd:a9:48:d1:27:cd:2e:12:12:
         a9:8b:6a:8b:8b:69:39:df:60:16:49:a6:84:80:18:31:61:c1:
         da:3a:5d:88:49:c2:c9:4d:03:9b:fc:8e:c9:46:2c:7d:c9:ea:
         de:d2:f7:0b:d2:d2:da:b8:9d:43:b6:2f:85:df:46:e9:52:c3:
         c9:30:48:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 01:44:31 2022 by LibreSSL & rpki-client.