RPKI Certificate
Location:                 ./rsync/rpki.afrinic.net/repository/afrinic/JfCxDKLk37Or6AFrgxnhVRHDOhw.cer (download)

Subject key identifier:   25:F0:B1:0C:A2:E4:DF:B3:AB:E8:01:6B:83:19:E1:55:11:C3:3A:1C
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Manifest:                 rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/JfCxDKLk37Or6AFrgxnhVRHDOhw.mft
CA Repository:            rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: AS: 37640
    1: IP: 154.66.88.0/21
    2: IP: 2c0f:f470::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.afrinic.net/repository/afrinic/JfCxDKLk37Or6AFrgxnhVRHDOhw.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5444 (0x1544)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:13:30 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F36374C9AF/serialNumber=25F0B10CA2E4DFB3ABE8016B8319E15511C33A1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:19:04:4e:5b:71:e9:c3:0b:32:63:ac:0a:30:
                    4c:79:7e:25:eb:c2:73:10:fe:b9:7b:ca:3b:9c:6e:
                    39:9c:40:dc:52:d5:1d:57:12:0b:41:31:7f:ee:02:
                    ce:05:6c:c1:a6:f6:8f:c7:04:01:c9:de:81:c1:12:
                    64:86:4b:4c:4e:63:b9:1d:6a:23:4a:a8:35:b5:65:
                    fd:f9:b8:21:9d:99:ed:17:83:56:3e:72:39:9d:4a:
                    2e:1f:d2:ad:b9:83:0f:77:d5:57:e7:da:56:04:3c:
                    5e:35:05:9c:8b:3a:fe:5e:cd:c7:8e:f6:f6:9e:77:
                    09:d4:a3:48:e2:5a:d0:3c:72:8e:ce:38:e3:eb:27:
                    25:71:c3:c9:7f:b3:2b:0d:1b:0a:ab:f5:08:e9:7a:
                    40:45:8c:a0:62:81:68:41:98:b7:d7:70:c0:54:04:
                    c1:09:83:3c:7f:ba:4c:85:5f:1d:43:50:a4:84:5e:
                    ef:86:d4:12:4c:dd:4a:5b:34:e4:a8:13:c5:85:fd:
                    eb:db:0f:dc:de:69:81:00:8d:50:71:d1:3d:12:13:
                    9c:8b:9f:e5:28:2a:85:c0:dc:61:56:97:7f:b0:18:
                    0f:b6:9c:7d:d0:a1:0e:b0:91:53:18:91:a7:dc:dc:
                    88:79:c5:e2:37:2c:77:b5:57:b2:4a:23:c3:ce:1b:
                    1b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                25:F0:B1:0C:A2:E4:DF:B3:AB:E8:01:6B:83:19:E1:55:11:C3:3A:1C
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/JfCxDKLk37Or6AFrgxnhVRHDOhw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37640

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.66.88.0/21
                IPv6:
                  2c0f:f470::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:40:e7:e2:8a:50:41:01:91:4c:64:94:c5:e9:bb:91:bc:73:
         da:32:17:37:c7:98:c5:f0:6d:7f:14:16:74:f8:d9:a7:a6:85:
         65:4c:70:02:67:3a:43:72:31:a9:27:f5:ea:7d:6b:6e:35:65:
         83:76:89:44:28:ca:a5:71:23:7c:fb:8e:2e:28:de:80:aa:5f:
         fd:28:31:13:f1:4c:20:44:bb:1d:78:f4:59:6e:c7:71:ea:db:
         87:37:e1:16:e4:50:61:17:0c:24:f9:5c:d6:f1:46:db:79:c7:
         03:c8:e7:43:54:5c:d4:b1:73:8e:a8:f8:ba:17:b7:a1:08:1e:
         3a:fb:ed:42:c3:e9:9c:24:69:7c:23:04:78:e2:b0:01:cc:58:
         07:e9:84:cd:3f:71:97:82:03:39:0a:b6:62:b1:29:96:bb:24:
         06:44:00:5b:33:ee:a7:d8:38:6d:0b:2f:b9:01:3c:df:0f:2a:
         d7:d9:58:c3:08:43:cc:f5:02:62:79:9a:3d:b0:a9:3b:c7:80:
         4c:ea:60:8d:65:60:41:43:ac:4d:94:97:41:59:e5:ae:06:40:
         2d:93:99:3b:b3:61:25:93:fb:fa:9d:3f:73:cf:07:cc:0c:a1:
         fd:26:5f:24:f1:8b:8a:33:04:6c:70:42:67:ce:5c:71:3b:c8:
         99:48:c8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 01:44:32 2022 by LibreSSL & rpki-client.