RPKI Certificate
Location:                 ./rsync/rpki.afrinic.net/repository/afrinic/7PbzU5pP4IyibRf5jcsVmgR8v-g.cer (download)

Subject key identifier:   EC:F6:F3:53:9A:4F:E0:8C:A2:6D:17:F9:8D:CB:15:9A:04:7C:BF:E8
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Manifest:                 rpki.afrinic.net/repository/member_repository/F3662F58/7594EBF2498711EA969C9454F8AEA228/7PbzU5pP4IyibRf5jcsVmgR8v-g.mft
CA Repository:            rpki.afrinic.net/repository/member_repository/F3662F58/7594EBF2498711EA969C9454F8AEA228/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: AS: 328501
    1: IP: 102.64.112.0/23
    2: IP: 2001:43f8:13b0::/48

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.afrinic.net/repository/afrinic/7PbzU5pP4IyibRf5jcsVmgR8v-g.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5558 (0x15b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:24:36 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F3662F58AF/serialNumber=ECF6F3539A4FE08CA26D17F98DCB159A047CBFE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:98:41:fc:e6:6c:48:22:f3:36:d1:b1:8f:d4:
                    c7:30:f6:40:f3:d4:2e:d4:87:11:1b:d5:fa:c5:87:
                    12:c9:ca:8d:54:07:a7:66:08:a9:6e:10:d1:3b:61:
                    25:0b:4e:60:c1:32:dc:0f:34:1a:ae:c8:cf:1d:08:
                    33:56:42:50:1d:ae:40:2b:12:29:6e:e0:f0:30:04:
                    36:69:66:30:65:b4:a4:83:c6:68:86:4b:8f:c4:6a:
                    dc:0f:de:02:97:8f:85:6a:87:ab:f0:a8:27:73:bc:
                    18:cc:0c:d7:c3:68:43:24:b2:d4:84:d0:1f:68:26:
                    e3:f0:96:65:5e:30:ba:90:f5:fb:71:13:46:4c:d9:
                    d6:c4:68:92:61:cb:3d:d2:32:69:d7:53:98:68:68:
                    85:9c:6f:51:21:29:97:2a:6b:3a:4a:ea:ed:74:95:
                    11:3b:a6:47:7c:c2:ec:75:cf:70:08:2f:7d:b2:78:
                    80:71:c6:d2:f0:77:37:f8:9e:e4:a0:2c:41:dc:64:
                    27:aa:a9:1c:9b:37:ae:f6:29:a1:ec:e7:64:7c:19:
                    62:84:8e:0a:45:8f:37:4d:09:96:26:62:13:30:48:
                    c1:2b:cf:7d:ad:5c:4c:5a:dc:19:32:db:17:22:79:
                    ad:d7:b2:54:fb:d7:d2:47:5d:c1:63:b3:6e:11:81:
                    b2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                EC:F6:F3:53:9A:4F:E0:8C:A2:6D:17:F9:8D:CB:15:9A:04:7C:BF:E8
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662F58/7594EBF2498711EA969C9454F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662F58/7594EBF2498711EA969C9454F8AEA228/7PbzU5pP4IyibRf5jcsVmgR8v-g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328501

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.64.112.0/23
                IPv6:
                  2001:43f8:13b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:8e:ba:dc:28:ec:0a:14:0f:85:b5:98:f9:0d:d3:50:67:0f:
         68:14:88:c7:12:42:2b:02:44:f3:0e:b9:ea:43:aa:53:e8:b6:
         69:f0:5d:5f:c7:01:fa:90:dc:33:dd:17:7f:4c:1b:66:0a:0e:
         3c:3a:60:0c:e9:ef:fe:c5:ff:13:88:5b:a1:05:03:ea:41:b0:
         d9:8e:cd:6c:e7:0e:da:36:04:96:3d:9c:83:20:17:76:a2:af:
         12:fc:f5:af:7d:1b:2f:96:94:85:88:7a:aa:82:2c:c2:2f:3c:
         55:14:54:51:2f:a2:41:05:0e:cd:b7:c2:4a:47:45:f6:08:e1:
         1e:e0:82:3c:a1:94:b9:06:e7:f9:91:c0:a3:b2:47:6b:2c:41:
         8a:90:17:25:71:7e:13:01:4a:c5:86:8e:4f:b6:e7:18:bf:82:
         8b:20:4d:6d:eb:fa:63:74:f3:0d:31:43:37:54:14:f3:67:0c:
         3f:18:ad:20:b5:bd:a0:e8:ce:3c:7b:6e:3b:47:05:c6:f5:f0:
         65:1a:6e:23:df:bf:94:63:89:c4:70:ba:1c:ab:a7:28:9c:40:
         36:20:f6:27:47:72:7a:a1:88:c9:90:bc:3f:0c:f9:c6:76:d8:
         27:7a:1b:3a:80:92:df:1b:4c:22:92:d9:3f:a0:5a:35:64:29:
         dd:d3:e3:b4
-----BEGIN CERTIFICATE-----
MIIGJzCCBQ+gAwIBAgICFbYwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yMjAxMDEwMDI0MzZaFw0yMzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMMCkYzNjYyRjU4QUYxMTAvBgNVBAUTKEVDRjZGMzUzOUE0RkUwOENBMjZEMTdG
OThEQ0IxNTlBMDQ3Q0JGRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDjmEH85mxIIvM20bGP1Mcw9kDz1C7UhxEb1frFhxLJyo1UB6dmCKluENE7YSUL
TmDBMtwPNBquyM8dCDNWQlAdrkArEilu4PAwBDZpZjBltKSDxmiGS4/EatwP3gKX
j4Vqh6vwqCdzvBjMDNfDaEMkstSE0B9oJuPwlmVeMLqQ9ftxE0ZM2dbEaJJhyz3S
MmnXU5hoaIWcb1EhKZcqazpK6u10lRE7pkd8wux1z3AIL32yeIBxxtLwdzf4nuSg
LEHcZCeqqRybN672KaHs52R8GWKEjgpFjzdNCZYmYhMwSMErz32tXExa3Bky2xci
ea3XslT719JHXcFjs24RgbIpAgMBAAGjggMcMIIDGDAdBgNVHQ4EFgQU7PbzU5pP
4IyibRf5jcsVmgR8v+gwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY2MkY1OC83NTk0RUJGMjQ5ODcx
MUVBOTY5Qzk0NTRGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NjJGNTgvNzU5NEVCRjI0OTg3MTFFQTk2OUM5NDU0RjhBRUEyMjgvN1BielU1
cFA0SXlpYlJmNWpjc1ZtZ1I4di1nLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFAzUwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAFmQHAwDwQCAAIwCQMH
ACABQ/gTsDANBgkqhkiG9w0BAQsFAAOCAQEASI663CjsChQPhbWY+Q3TUGcPaBSI
xxJCKwJE8w656kOqU+i2afBdX8cB+pDcM90Xf0wbZgoOPDpgDOnv/sX/E4hboQUD
6kGw2Y7NbOcO2jYElj2cgyAXdqKvEvz1r30bL5aUhYh6qoIswi88VRRUUS+iQQUO
zbfCSkdF9gjhHuCCPKGUuQbn+ZHAo7JHayxBipAXJXF+EwFKxYaOT7bnGL+CiyBN
bev6Y3TzDTFDN1QU82cMPxitILW9oOjOPHtuO0cFxvXwZRpuI9+/lGOJxHC6HKun
KJxANiD2J0dyeqGIyZC8Pwz5xnbYJ3obOoCS3xtMIpLZP6BaNWQp3dPjtA==
-----END CERTIFICATE-----

Generated at Sat Jan 1 03:21:55 2022 by LibreSSL & rpki-client.