RPKI Certificate
Location:                 ./rsync/rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer (download)

Subject key identifier:   EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Manifest:                 rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
CA Repository:            rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: AS: 327979
    1: IP: 41.76.104.0/21
    2: IP: 41.222.32.0/21
    3: IP: 154.66.196.0/22
    4: IP: 2c0f:f850::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5424 (0x1530)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:11:28 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F363212DAF/serialNumber=EBC4A85197C32B425638A6C7E5860B5964E657FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:91:e8:6e:b8:b7:0f:81:c5:65:1f:4f:34:c7:
                    33:ef:cc:27:44:80:6d:f4:9a:6a:a2:df:df:ba:ef:
                    f7:a0:64:7f:3c:44:cc:5b:cb:bf:1c:f6:f4:fa:b4:
                    63:26:8a:44:2f:3d:77:96:5c:1a:da:39:2a:40:db:
                    34:f5:29:de:4c:c6:82:5d:06:3d:25:c2:b9:0c:af:
                    b1:e6:ac:6f:24:6d:81:43:6a:7c:bb:ec:9d:4d:ab:
                    5b:68:c7:b1:98:2b:90:9b:b2:a0:49:7c:82:8a:b3:
                    95:7d:28:e4:2d:e0:20:1b:50:ae:ba:03:7a:bb:ad:
                    57:06:bb:0a:cb:32:b4:ad:48:96:ca:4a:b8:22:db:
                    8a:0e:9d:2a:a5:cb:e5:58:ac:36:04:e4:59:9e:30:
                    42:42:e1:26:15:b8:6d:3a:11:77:43:9c:e0:7e:6d:
                    f0:6c:23:fc:92:cd:17:f0:ff:fa:2c:83:63:f2:d3:
                    e6:d8:89:72:f7:64:69:ca:c6:8b:77:9a:a5:6f:d9:
                    f5:7f:a9:4b:82:5c:f4:6a:3d:ca:cc:76:6e:75:85:
                    24:5f:84:46:ed:56:7c:3d:bf:fc:c5:da:67:cc:d8:
                    de:ba:18:3b:40:3f:9a:6e:56:78:07:78:84:a9:87:
                    93:85:df:01:e8:cf:d4:1e:87:37:87:33:53:0c:06:
                    3a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327979

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.76.104.0/21
                  41.222.32.0/21
                  154.66.196.0/22
                IPv6:
                  2c0f:f850::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:51:8e:4a:4b:5c:ed:02:ba:ca:e3:b7:f9:37:15:5b:a5:20:
         97:db:f4:49:f2:e9:e5:02:84:37:6c:91:f0:6c:2f:1c:f8:7b:
         f5:3d:36:48:95:de:8b:95:86:52:f5:5b:0e:0a:b0:e3:b1:df:
         99:f5:ae:62:10:82:e5:77:6f:b2:cd:19:70:04:34:47:0e:e1:
         82:4f:2a:8f:9c:3b:b9:55:16:35:82:84:fc:45:aa:e1:f3:da:
         8f:92:51:35:0e:6a:1e:49:b7:66:1f:e0:e5:7e:2a:d4:44:c2:
         e6:26:fc:53:b4:f4:2c:e0:56:44:76:2f:fb:be:bb:f3:e9:66:
         d7:8d:83:9a:58:c5:90:1d:45:09:96:b8:7d:87:51:27:e1:76:
         d3:77:5d:7e:ac:1c:9c:bd:05:3e:08:f1:22:73:e8:eb:88:24:
         50:6a:d0:5f:8f:49:bf:85:05:bb:25:84:ac:3c:aa:25:cf:22:
         49:3d:a4:75:3c:1e:df:bf:52:65:dd:7a:d9:bb:41:0e:33:7d:
         3d:e7:41:1f:b9:ec:52:bf:12:c7:da:32:e0:e0:2b:cf:f2:e1:
         53:3d:31:6b:6d:d6:8e:f9:1e:f6:3c:00:a9:df:c7:3c:cd:8b:
         86:da:0f:94:31:26:2f:65:a3:f0:d6:47:04:4f:0d:c0:24:e4:
         84:d8:5f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----