RPKI Certificate
Location:                 ./rsync/rpki.afrinic.net/repository/afrinic/CNLFTntRy8c0NN0AYFFFEi8ay2c.cer (download)

Subject key identifier:   08:D2:C5:4E:7B:51:CB:C7:34:34:DD:00:60:51:45:12:2F:1A:CB:67
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Manifest:                 rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft
CA Repository:            rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: AS: 328434
    1: IP: 102.68.40.0/21
    2: IP: 2c0f:ecd8::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.afrinic.net/repository/afrinic/CNLFTntRy8c0NN0AYFFFEi8ay2c.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5384 (0x1508)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:07:21 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F3625A15AF/serialNumber=08D2C54E7B51CBC73434DD00605145122F1ACB67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:31:c0:f2:50:a2:36:5d:45:a8:dc:70:74:72:
                    a6:17:52:5e:ca:11:e9:36:a1:11:29:e0:c3:2d:af:
                    15:d8:c9:19:12:1a:c9:9a:fa:6d:11:ff:26:4e:1b:
                    86:03:06:24:c0:35:90:9a:a9:32:28:f0:70:b4:8c:
                    ba:ba:5e:2d:27:42:b2:ee:5e:d1:ce:a4:a3:47:a3:
                    8f:3a:b3:92:95:08:c0:1a:5f:e5:d4:bf:3c:a9:98:
                    94:21:df:52:f3:6c:c9:32:c5:c2:82:38:b9:46:3f:
                    b3:95:9c:7f:e6:8d:4f:27:20:b7:e1:d0:02:1b:40:
                    d0:81:81:d2:7d:61:e8:13:e7:d3:0c:67:08:47:54:
                    b5:e7:39:d1:67:51:6e:97:2b:42:96:5d:bf:67:59:
                    b1:5c:6a:9f:8e:d3:4a:90:0c:6e:48:13:32:89:b8:
                    0d:35:2c:8a:89:57:fb:80:29:47:03:c5:97:9f:91:
                    3b:cb:88:0c:c5:98:3d:2e:37:a3:51:53:23:82:c8:
                    44:a1:ff:f1:e4:66:7b:13:ef:29:af:95:cb:8a:8e:
                    cb:a3:e3:23:cd:47:cb:24:77:85:78:74:be:79:52:
                    d8:e1:ea:c1:d6:d7:31:3e:6c:6d:4e:9f:4f:84:fa:
                    d1:7e:de:07:63:bd:53:45:a1:4f:3d:12:66:f7:2d:
                    ca:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                08:D2:C5:4E:7B:51:CB:C7:34:34:DD:00:60:51:45:12:2F:1A:CB:67
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328434

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.68.40.0/21
                IPv6:
                  2c0f:ecd8::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:a4:62:c0:84:66:3f:39:b8:4f:b3:40:90:95:87:94:ef:29:
         f4:11:ae:ad:7b:c5:a3:ab:1b:88:20:3a:c5:fb:2e:de:26:0e:
         c3:1a:d6:fc:df:00:a9:fb:13:0e:85:e5:a1:8d:c5:e0:20:80:
         ec:56:c5:e4:d0:eb:a9:c7:cb:61:0e:60:00:0b:16:7d:72:19:
         69:84:a5:10:d0:00:98:c2:86:69:70:14:21:93:60:f1:83:fd:
         08:79:15:73:d2:cc:28:4d:23:89:60:f3:a6:8d:88:73:30:2d:
         50:7d:18:c1:85:85:ed:b2:39:4d:34:a8:6f:00:eb:7d:02:bd:
         39:a2:1e:7f:27:7a:15:b3:ad:bc:bc:32:78:6d:e6:9c:9c:71:
         50:b3:5d:86:82:8a:e5:c2:61:a5:ad:9d:66:86:a8:62:01:61:
         3b:b3:83:42:d0:1e:1d:aa:26:42:e4:18:e2:b2:e5:03:30:00:
         33:96:de:e7:47:a6:9e:31:9c:dd:c2:b2:44:1c:76:b7:11:0c:
         50:9d:f3:c2:5e:5d:c1:5d:fa:8d:64:b4:29:31:91:3e:2b:4c:
         59:72:14:c0:17:73:13:82:c5:3b:dc:48:dd:61:a0:83:78:17:
         62:56:ea:a2:88:79:05:ec:e4:88:86:45:2e:db:21:80:15:c8:
         0f:07:45:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 01:44:32 2022 by LibreSSL & rpki-client.