RPKI Certificate
Location:                 ./rsync/rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer (download)

Subject key identifier:   23:F8:14:BB:47:D5:C3:AE:DD:51:03:F3:6F:5D:B8:A2:9B:E3:D7:1D
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Manifest:                 rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft
CA Repository:            rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: AS: 32653
    2: AS: 37394
    1: IP: 41.77.152.0/21
    2: IP: 41.222.48.0/21
    3: IP: 102.164.121.0/24
    4: IP: 154.72.96.0/20
    5: IP: 2001:43f8:1180::/48
    6: IP: 2c0f:fbf0::/28

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5628 (0x15fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:32:01 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F36D9B5BAF/serialNumber=23F814BB47D5C3AEDD5103F36F5DB8A29BE3D71D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a2:25:82:8f:b8:ba:4b:12:9f:f4:87:a1:4b:
                    6a:6a:94:ad:2b:8a:7d:fb:a8:e1:6b:b8:ff:0e:17:
                    47:f5:de:59:a6:53:42:f0:a5:32:ee:18:dd:71:e1:
                    85:9f:ba:d8:2b:2f:44:bf:7d:3c:e5:ad:3d:3e:d5:
                    6c:54:cb:50:9a:d1:6e:b1:53:a1:46:a2:a2:f6:d8:
                    f0:54:9c:26:e0:c0:03:74:a1:06:06:07:94:f1:b7:
                    5c:87:ff:db:99:88:8b:a8:4a:eb:7d:a2:d5:0d:9a:
                    14:2d:1f:c1:36:97:fb:d2:fe:c4:d6:1c:91:c0:eb:
                    84:f3:fd:69:66:35:77:ea:2e:87:22:97:c5:64:83:
                    03:d0:2c:5d:33:b8:4b:4b:4f:95:e3:a2:de:cc:06:
                    18:f8:d6:bf:17:1a:76:e6:07:e0:1a:7d:ea:47:13:
                    47:22:31:18:ae:b4:ce:b3:74:c3:fe:b8:4e:69:2d:
                    c3:c2:52:16:4c:80:1a:da:61:40:68:21:86:0e:ac:
                    b0:4f:ca:65:33:fc:1a:1d:e6:4e:b7:88:f6:64:0e:
                    4a:e6:13:d0:7c:6d:99:4b:23:21:fa:43:d2:c2:6e:
                    7f:68:38:ba:25:02:83:e3:9f:a9:b3:cf:de:fd:52:
                    4f:58:59:4b:b1:1d:0f:2f:9c:43:b8:9d:85:c4:55:
                    d3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                23:F8:14:BB:47:D5:C3:AE:DD:51:03:F3:6F:5D:B8:A2:9B:E3:D7:1D
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32653
                  37394

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.77.152.0/21
                  41.222.48.0/21
                  102.164.121.0/24
                  154.72.96.0/20
                IPv6:
                  2001:43f8:1180::/48
                  2c0f:fbf0::/28

    Signature Algorithm: sha256WithRSAEncryption
         0b:05:1b:5f:26:3a:ff:df:bd:ba:17:d9:42:7e:4d:55:2a:92:
         19:80:5e:a9:34:11:6f:64:83:fb:6a:84:7d:d0:05:eb:0c:22:
         1c:00:2e:81:f0:17:5e:3d:9c:90:84:27:45:f3:85:a5:a8:6c:
         c2:43:9f:7d:60:82:5e:a0:84:4d:fa:77:e1:c5:8f:d0:26:b2:
         3c:58:3d:6b:84:c0:72:5c:51:08:f5:36:c3:64:bc:58:92:46:
         b3:a6:15:ea:45:b5:b2:04:06:db:72:7b:a9:f3:32:48:93:79:
         fb:d2:16:48:39:48:e7:18:e5:38:4f:43:b7:ee:56:3f:d8:0c:
         78:2e:15:cd:c4:5b:70:25:95:25:33:1f:a5:cc:ef:96:e6:61:
         63:52:0e:26:22:08:fa:21:78:2a:f3:42:40:74:3d:c2:85:26:
         39:72:b6:64:1c:9c:2a:dc:d0:bf:58:07:77:38:0a:e4:77:8f:
         b1:0a:6f:90:ce:a5:42:be:19:41:c6:0d:c6:d9:00:ab:43:40:
         da:ca:61:b7:7b:78:62:39:de:a5:fe:ec:ec:54:cd:d6:5a:22:
         5b:79:90:4f:23:a2:32:4c:33:06:5f:5d:a3:27:22:39:2d:b6:
         64:5a:9a:aa:12:76:18:e2:bb:40:53:ef:1b:84:52:77:8f:be:
         bf:d1:53:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 03:21:57 2022 by LibreSSL & rpki-client.