RPKI Certificate
Location:                 ./rsync/rpki.afrinic.net/repository/afrinic/DfSP5wXc0B45e4-chO8Xkcls-9g.cer (download)

Subject key identifier:   0D:F4:8F:E7:05:DC:D0:1E:39:7B:8F:9C:84:EF:17:91:C9:6C:FB:D8
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Manifest:                 rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.mft
CA Repository:            rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: AS: 328346
    1: IP: 102.134.24.0/22
    2: IP: 2c0f:ef60::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.afrinic.net/repository/afrinic/DfSP5wXc0B45e4-chO8Xkcls-9g.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5882 (0x16fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:57:15 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F36C4AD7AF/serialNumber=0DF48FE705DCD01E397B8F9C84EF1791C96CFBD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:97:14:60:3a:6d:66:27:75:c7:2e:b6:bd:c8:
                    a7:88:00:df:11:42:99:00:f3:cf:49:ce:d3:4d:05:
                    02:2d:34:2e:9e:0e:f2:c7:14:be:19:4c:f9:ae:6b:
                    f2:53:b8:4f:9f:79:a2:7a:d7:0a:86:f0:68:48:a0:
                    ba:53:2b:1f:cb:7a:c0:af:0c:77:d6:f4:8d:f8:0d:
                    44:ac:1b:fc:ba:3b:f7:24:4e:b1:b7:40:06:16:09:
                    13:7a:3e:77:00:ab:dc:c4:ec:62:10:49:97:7a:fa:
                    57:d8:84:ca:87:e0:17:7b:d7:cd:52:26:8c:16:89:
                    07:9b:f1:44:86:19:b1:ca:a6:4a:2f:1d:0b:bb:75:
                    50:85:d6:7e:9b:86:b1:a9:d9:f8:db:91:cb:5d:2e:
                    87:10:64:fb:11:9d:2d:4a:3d:3b:bf:68:ba:70:b1:
                    75:52:7b:c3:8f:3a:87:91:a5:e0:27:87:14:f2:45:
                    79:3a:e4:50:70:e0:97:eb:98:98:4d:d1:86:78:68:
                    d6:89:7d:54:05:c8:37:42:ce:8e:c4:2b:13:9c:cd:
                    1e:5e:8f:14:11:84:e8:a8:7e:5a:42:58:3b:66:37:
                    ba:1d:1e:2d:0b:2c:fe:6d:0d:d2:de:f5:98:5e:05:
                    10:48:f5:24:80:13:c0:17:17:b2:f5:ac:c2:59:b0:
                    22:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0D:F4:8F:E7:05:DC:D0:1E:39:7B:8F:9C:84:EF:17:91:C9:6C:FB:D8
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328346

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.134.24.0/22
                IPv6:
                  2c0f:ef60::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:68:90:c2:07:e5:8b:91:67:e9:74:13:84:77:f7:83:0b:c3:
         4d:df:a8:fa:c4:87:bf:58:7d:19:c1:48:60:50:04:d3:87:dc:
         d3:94:25:96:8f:eb:5b:54:bb:fd:0b:a6:81:d6:b5:88:ae:b4:
         1e:62:a1:09:1c:32:04:c1:fb:f8:ea:c7:a2:36:de:48:10:56:
         6e:56:fa:f8:00:9c:01:11:b4:ac:f4:80:65:80:d2:16:3a:3c:
         ba:28:98:ed:a6:42:8b:4d:a7:38:01:58:f6:d9:ee:98:90:0e:
         01:35:68:1a:92:44:b8:22:1c:e6:62:22:e1:34:2b:fe:e3:46:
         a6:70:03:a5:5c:b8:05:65:e6:14:36:1c:a4:d7:50:16:e2:1f:
         8e:39:2c:24:b3:cc:d4:57:83:eb:e1:75:a8:76:68:4a:14:9e:
         08:a5:6a:13:30:4a:17:fa:ea:fa:20:61:1c:50:fc:1c:79:9e:
         ad:6a:66:a6:1d:43:39:d2:f0:61:2a:a8:1a:94:a7:f9:ac:ad:
         dd:0f:3f:cb:d0:29:d9:8c:b5:0b:17:96:01:46:a8:24:5e:10:
         27:5a:19:c4:1b:cb:4e:a4:f2:ec:99:fa:db:ec:c0:03:bd:4f:
         88:5d:51:ba:60:25:0b:c5:70:93:f9:e5:77:e4:80:06:3d:a9:
         f3:26:8f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 03:21:56 2022 by LibreSSL & rpki-client.