RPKI Certificate
Location:                 ./rsync/rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer (download)

Subject key identifier:   5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Manifest:                 rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
CA Repository:            rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: IP: 196.250.252.0/22
    2: IP: 196.251.252.0/22
    3: IP: 2001:43f8:e00::/40

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5689 (0x1639)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:38:01 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F368588EAF/serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8c:c9:eb:4b:cc:ae:52:e0:79:bd:c5:ac:dc:
                    d8:a0:e2:47:b7:b7:ff:cb:b4:e4:31:0f:56:07:ac:
                    92:44:6b:83:3b:d3:aa:7d:ea:06:8f:5f:7e:93:31:
                    9b:69:1a:2e:47:51:54:bf:09:06:6d:80:e0:ab:ab:
                    fa:8f:fb:8d:76:be:2e:10:44:9f:c1:e5:52:9e:8b:
                    f7:44:70:ad:4a:c0:78:e7:6f:c3:03:54:19:1b:91:
                    a2:53:84:5e:0c:90:14:10:a4:ba:d6:f1:00:92:fe:
                    e9:2c:85:57:09:05:35:03:87:ff:13:b0:dd:eb:7a:
                    be:a6:08:a1:be:00:cb:18:b0:88:80:36:24:5e:ac:
                    f6:e5:18:b1:53:68:5b:e4:30:94:cf:b7:6d:db:d8:
                    3a:e6:9d:94:b7:82:81:16:4d:f1:db:5d:e8:f8:2b:
                    b7:47:e6:da:66:13:e5:b1:fa:6f:3b:ab:54:38:fd:
                    0f:fd:fd:5c:c9:39:9b:ad:25:3c:67:b2:d0:db:10:
                    34:ed:0e:9d:35:b6:13:41:83:d0:e6:b1:51:c2:85:
                    8b:62:88:c2:3e:fb:8b:c1:cd:ff:b8:72:0c:39:15:
                    b8:7b:9a:bb:5e:f2:a8:92:be:4f:b8:a3:fd:0e:6a:
                    e8:b3:ff:c3:3b:af:49:0d:a1:75:f7:47:5e:76:49:
                    36:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.250.252.0/22
                  196.251.252.0/22
                IPv6:
                  2001:43f8:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3a:e9:63:6f:4c:0e:ad:3b:21:da:84:5d:01:45:97:c0:75:a7:
         3e:99:77:14:71:dd:fe:5f:19:13:e5:4a:64:7a:a7:4a:9a:ae:
         44:bd:28:a8:58:97:3e:2a:7e:4b:dd:da:54:25:fa:ca:dd:1a:
         25:e7:ed:19:81:27:e6:cf:f7:fb:64:92:ad:79:eb:b9:21:10:
         ee:5b:58:5c:ac:80:be:23:87:8c:9c:60:14:94:6c:21:2f:ca:
         83:21:04:ab:6f:f9:4b:bb:26:7f:aa:38:04:b7:e2:fc:46:27:
         a5:06:25:21:a9:e0:99:95:3d:5b:86:1c:81:28:61:32:33:82:
         a2:41:20:e8:e7:ad:22:2f:a5:4a:c6:b8:40:51:38:40:a4:f2:
         13:d8:a6:46:46:be:d8:b9:88:cb:26:39:10:f4:a0:27:a5:7b:
         44:8d:72:b4:73:4a:ec:02:cf:7d:e7:d0:43:5d:fd:58:27:cf:
         b7:5b:38:6c:8f:ac:96:54:09:ab:5c:e5:e7:71:2a:31:a9:ca:
         71:dd:a9:2f:de:e6:e1:c7:db:a3:6a:f7:73:e2:bd:bd:e0:3d:
         ad:13:1a:01:af:fd:7e:2e:6a:76:1b:d3:55:3d:69:1b:69:fe:
         c2:99:cd:57:16:12:6e:71:3c:f7:2d:9d:f3:b7:62:55:a9:39:
         19:05:d0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 03:22:01 2022 by LibreSSL & rpki-client.