RPKI Certificate
Location:                 ./rsync/rpki.afrinic.net/repository/afrinic/5hfTT1TsLbm6WEBc2glDH9OB8xY.cer (download)

Subject key identifier:   E6:17:D3:4F:54:EC:2D:B9:BA:58:40:5C:DA:09:43:1F:D3:81:F3:16
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Manifest:                 rpki.afrinic.net/repository/member_repository/F3664674/657AADAE501D11EB849EAF47F8AEA228/5hfTT1TsLbm6WEBc2glDH9OB8xY.mft
CA Repository:            rpki.afrinic.net/repository/member_repository/F3664674/657AADAE501D11EB849EAF47F8AEA228/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: AS: 328386
    1: IP: 102.130.72.0/21
    2: IP: 2c0f:ece8::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.afrinic.net/repository/afrinic/5hfTT1TsLbm6WEBc2glDH9OB8xY.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5564 (0x15bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:25:12 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F3664674AF/serialNumber=E617D34F54EC2DB9BA58405CDA09431FD381F316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b5:33:54:4f:77:c0:9b:86:9c:a9:c5:56:43:
                    c8:d4:c3:6f:3b:35:0d:c5:20:2c:cc:70:85:48:1e:
                    54:34:61:cf:2e:4c:0e:b5:9e:42:7e:28:16:23:56:
                    d9:99:fa:0e:73:28:f8:40:b6:c2:c3:83:1b:78:52:
                    e9:a5:69:94:69:9f:29:54:f8:38:d5:f2:5b:7d:e5:
                    d1:f5:07:8d:11:8a:d0:6b:52:3b:81:7f:76:ab:3b:
                    84:b4:b3:ee:fc:db:7f:e1:46:89:b2:8f:c9:61:aa:
                    f1:f8:e9:ac:36:41:e1:2e:d4:1e:94:e6:da:6b:1b:
                    75:1e:b4:d3:0c:15:e9:a0:f4:36:8f:f9:ff:76:87:
                    58:de:3e:b4:7d:c6:48:73:09:5c:0c:1d:93:6f:de:
                    ba:32:b5:3f:37:63:dc:11:86:e4:b7:59:e8:a0:cc:
                    bd:ca:db:bd:fa:33:a9:59:17:d8:2a:8f:11:a8:60:
                    a3:f6:45:1e:0c:cf:51:b7:60:21:b0:6c:f5:e0:f9:
                    63:03:82:4a:fb:74:09:b0:f4:c4:bc:b5:77:a7:34:
                    32:ba:4e:69:55:3f:b8:80:c4:80:f6:98:cb:21:00:
                    62:1d:67:77:fd:10:ec:42:91:8d:e5:55:95:d0:69:
                    2f:bd:16:e1:13:38:d1:b9:22:e9:95:d1:b6:04:21:
                    fe:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E6:17:D3:4F:54:EC:2D:B9:BA:58:40:5C:DA:09:43:1F:D3:81:F3:16
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664674/657AADAE501D11EB849EAF47F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664674/657AADAE501D11EB849EAF47F8AEA228/5hfTT1TsLbm6WEBc2glDH9OB8xY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328386

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.130.72.0/21
                IPv6:
                  2c0f:ece8::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:ee:1d:83:3b:0a:70:ab:3f:56:18:d6:ff:92:5d:5b:97:0f:
         86:38:77:3a:12:d0:2b:70:67:54:53:54:22:f8:9c:4a:6d:dc:
         6c:3e:97:40:24:1a:8c:a1:9a:da:ea:dc:59:e3:7d:60:f0:71:
         92:e5:e7:fa:cb:01:6b:9a:48:02:e3:3d:d3:56:aa:d5:50:f4:
         5f:8a:90:fa:91:42:ce:56:ee:1f:bc:da:78:e9:14:21:c2:30:
         35:54:a7:df:9d:74:69:76:00:82:df:a8:0c:9a:d0:e9:35:5f:
         79:57:7b:09:89:8e:4b:65:34:95:bb:6a:1b:62:c3:e1:ee:b3:
         2b:9f:de:8a:b8:83:89:96:53:91:42:bf:26:29:1e:f1:ea:e2:
         c7:31:fa:4c:12:a6:34:ae:38:2a:47:81:6f:b9:81:e9:f7:b6:
         90:e9:52:b6:c8:bf:08:fd:e7:f1:64:a5:29:e6:cc:77:fa:63:
         32:2c:98:c0:bf:d1:34:1a:78:65:ce:4b:ba:48:da:5f:21:09:
         56:1b:d8:c9:b0:19:3a:7d:c5:3c:5f:48:73:39:4b:97:18:df:
         81:93:12:ca:80:27:fc:31:ac:3e:e2:9c:69:bc:ab:32:93:94:
         51:ec:4e:e4:93:49:34:55:00:bb:f2:f0:76:f5:0d:ae:01:96:
         96:f5:f0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 03:21:54 2022 by LibreSSL & rpki-client.