RPKI Certificate
Location:                 ./rsync/rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer (download)

Subject key identifier:   2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Manifest:                 rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
CA Repository:            rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: AS: 37199
    1: IP: 41.76.128.0/21
    2: IP: 197.155.0.0/19
    3: IP: 2c0f:fb18::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5352 (0x14e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:04:03 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F361D299AF/serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5f:c8:23:2f:23:d5:55:4d:3e:c2:f3:00:f1:
                    82:ad:c8:18:2d:8b:71:6c:35:25:fe:3d:1d:d1:1f:
                    f2:e0:40:18:08:0f:18:3c:5c:10:20:e8:cc:f8:57:
                    4e:c0:b6:71:03:97:4f:be:f5:25:b1:46:1f:41:b7:
                    6b:d2:fc:25:88:94:35:a6:cf:8f:f0:3e:dd:42:8e:
                    10:ca:54:1c:36:95:0f:bd:3e:1f:31:fc:07:d6:24:
                    82:d4:8d:c9:03:5b:57:65:a7:ff:28:ed:db:88:52:
                    00:1b:0a:3a:91:79:a7:99:07:47:ff:62:bc:67:fe:
                    3d:a7:a3:ef:89:28:ac:ea:d3:46:7b:eb:fd:78:e3:
                    ad:09:5c:7b:a7:7c:c6:3f:85:f3:d0:0f:63:f0:10:
                    1b:6e:59:4f:79:02:0b:50:e3:6b:59:e0:c2:d1:52:
                    8f:d2:ee:0a:83:13:46:c2:57:01:2e:42:be:62:db:
                    1c:41:05:5d:09:a4:ec:5b:ac:fb:33:38:c5:02:a4:
                    88:5a:e4:e7:fb:12:c5:7e:b2:17:23:d3:c0:32:5e:
                    d3:f2:54:e6:fa:84:79:69:71:5c:a8:f0:6b:31:31:
                    af:3c:0c:0c:0f:39:d1:c6:bc:c1:c0:a1:69:af:8c:
                    15:eb:a9:6f:e2:58:fe:ad:94:48:a1:37:0d:be:13:
                    43:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37199

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.76.128.0/21
                  197.155.0.0/19
                IPv6:
                  2c0f:fb18::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:9b:21:b3:3e:8a:37:90:71:22:1b:a5:d9:1f:17:16:74:50:
         1d:22:1b:79:10:7e:93:fa:bc:c0:a6:e6:d9:32:f5:e2:6c:fb:
         f1:02:c0:95:ea:16:aa:6d:be:c7:0b:0c:58:10:93:f6:18:e9:
         2c:f9:52:a8:20:0d:bc:16:6b:47:ee:a1:ad:0d:09:94:ad:5d:
         dd:75:ea:59:da:60:ba:94:54:8c:f5:1c:21:b1:8a:bc:ce:87:
         82:d0:38:29:3a:28:e1:4f:13:f3:0f:a6:ca:55:69:73:09:d6:
         b6:60:bd:39:a3:d6:11:85:42:06:a1:58:bc:85:bf:45:25:d7:
         5e:94:4f:fd:20:8d:31:62:ea:23:86:a2:5a:e5:da:45:86:67:
         47:d3:de:79:8b:8f:36:33:18:e1:ea:d9:ba:50:c4:da:05:46:
         88:58:85:3e:8a:f6:e1:18:e0:53:f5:58:d7:55:84:ba:fe:04:
         7b:e4:8c:1c:20:91:c4:32:86:9d:9d:4a:3e:27:89:fd:7c:ec:
         e9:ca:23:b2:fe:ba:3e:ab:ba:f7:b6:1e:76:ba:28:65:36:61:
         73:48:fd:16:27:40:06:aa:aa:39:15:51:ea:5e:7f:f8:ac:63:
         a6:1d:0c:c5:5f:fa:ef:cd:5c:ab:d5:a2:df:28:73:03:67:bc:
         a8:62:b5:e0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Generated at Sat Jan 1 01:44:33 2022 by LibreSSL & rpki-client.