RPKI Certificate
Location:                 ./rsync/rpki.afrinic.net/repository/afrinic/Lx1uALCK9xI0GPxWIY5qMmTT2ZQ.cer (download)

Subject key identifier:   2F:1D:6E:00:B0:8A:F7:12:34:18:FC:56:21:8E:6A:32:64:D3:D9:94
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Manifest:                 rpki.afrinic.net/repository/member_repository/F36940B5/41BB43F2641F11E88026CE28F8AEA228/Lx1uALCK9xI0GPxWIY5qMmTT2ZQ.mft
CA Repository:            rpki.afrinic.net/repository/member_repository/F36940B5/41BB43F2641F11E88026CE28F8AEA228/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: AS: 37017
    2: AS: 328365
    1: IP: 41.223.244.0/22
    2: IP: 102.176.224.0/20
    3: IP: 2c0f:f178::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.afrinic.net/repository/afrinic/Lx1uALCK9xI0GPxWIY5qMmTT2ZQ.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5730 (0x1662)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:41:56 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F36940B5AF/serialNumber=2F1D6E00B08AF7123418FC56218E6A3264D3D994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e3:09:fb:cb:2f:69:fa:51:57:a1:63:25:dd:
                    65:bd:23:39:66:2c:02:36:f2:f9:92:9b:73:75:fd:
                    47:b7:d4:bf:a7:9d:2c:cd:ec:38:5a:9c:eb:57:5e:
                    e1:7e:f3:b1:ab:bf:61:2c:5a:bc:93:e9:3f:d7:b2:
                    60:fe:f4:3e:3b:3f:03:c5:fd:a0:de:b8:4b:69:b3:
                    f6:64:6f:5b:37:bc:87:87:01:80:d8:4a:aa:7a:96:
                    6d:ae:a5:2d:9c:5d:84:cd:0b:26:f6:a2:b4:1f:db:
                    a3:e7:f7:01:50:b9:6c:61:b0:06:81:29:9a:f0:55:
                    ba:6e:ba:bc:ec:61:9d:e1:39:09:3b:b9:ec:36:60:
                    2d:e7:c0:c2:67:34:50:15:81:b7:c6:fa:ae:97:7e:
                    a5:ec:bd:54:1b:fa:c5:c7:45:f1:44:c9:16:2b:2f:
                    91:5b:69:6f:0e:8e:a1:bf:bc:74:fd:1e:de:4d:ef:
                    29:42:12:15:d4:9c:0f:06:ff:6e:50:c4:f6:4f:ef:
                    99:8e:a8:4a:93:f4:db:3f:3a:86:1a:3b:7b:2c:e3:
                    86:a0:90:df:71:3a:5f:28:40:46:00:13:6c:47:d4:
                    da:64:82:9e:6e:82:de:29:80:48:3a:67:50:68:9a:
                    74:7a:92:be:d2:c0:95:54:a4:d6:96:28:34:1f:e0:
                    87:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                2F:1D:6E:00:B0:8A:F7:12:34:18:FC:56:21:8E:6A:32:64:D3:D9:94
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36940B5/41BB43F2641F11E88026CE28F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36940B5/41BB43F2641F11E88026CE28F8AEA228/Lx1uALCK9xI0GPxWIY5qMmTT2ZQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37017
                  328365

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.223.244.0/22
                  102.176.224.0/20
                IPv6:
                  2c0f:f178::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:76:fc:52:d9:fc:ec:89:74:dd:5c:3a:43:01:64:4a:0c:bc:
         1c:4d:37:e5:2e:8b:a4:91:de:d8:e1:b1:1a:76:46:c2:76:54:
         5f:10:e9:4d:d3:7f:fa:30:f4:c2:70:e4:b4:c7:d0:02:4e:9f:
         12:7c:0c:9a:60:97:8d:c9:1f:4e:06:0a:97:e1:a6:ad:59:33:
         19:a6:ab:e1:b3:50:60:55:69:a4:08:ab:d4:58:76:a8:19:0e:
         4a:41:64:a6:27:59:01:7e:25:29:6d:3d:97:19:5c:1e:e5:87:
         fc:fc:dd:aa:1a:dc:c1:b9:2a:2f:cd:45:16:65:3c:cd:c6:df:
         e7:1e:84:fa:4b:90:01:41:bc:03:ce:bb:20:e7:a4:66:7d:89:
         82:1f:c3:da:33:a2:38:f3:b8:2e:3c:43:0e:09:c2:1d:07:d8:
         dd:e2:c8:ee:b0:10:ed:1e:37:0c:b1:fb:b6:ae:fa:52:65:6d:
         5c:37:e7:e3:b9:7d:76:ed:3d:56:ff:ae:db:53:0a:c3:ad:73:
         01:5b:c8:80:dc:66:7f:33:67:ab:e1:ce:ea:ee:95:e5:25:bd:
         da:7b:66:03:62:9c:f7:7c:4e:2b:f2:41:3b:96:8b:8e:67:24:
         91:e2:c8:c4:5d:76:23:c1:40:8e:96:6a:81:ea:a9:87:ee:f2:
         0a:97:fd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 03:21:58 2022 by LibreSSL & rpki-client.