RPKI Certificate
Location:                 ./rsync/rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer (download)

Subject key identifier:   5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Manifest:                 rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
CA Repository:            rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: AS: 328633
    1: IP: 102.217.184.0/22
    2: IP: 102.223.104.0/22
    3: IP: 2c0f:e848::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5626 (0x15fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:31:47 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F3678967AF/serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:82:6b:22:64:0a:8a:5c:e8:e1:69:02:e6:1e:
                    55:78:c7:55:1a:0a:78:98:86:ef:71:53:e7:83:6b:
                    df:ad:b1:26:9f:95:71:7c:c6:da:fa:41:9e:c9:d9:
                    f5:5d:55:e3:e5:4e:ca:81:51:68:96:dc:b2:9b:ea:
                    10:1b:da:ee:65:5b:f0:c8:29:a3:7e:42:76:f5:74:
                    f7:06:b1:5f:83:b0:02:9b:33:44:a5:46:ef:ad:03:
                    1d:29:a1:14:35:47:09:d3:09:3a:2c:e0:96:19:b0:
                    88:f7:45:d7:63:98:24:e1:13:f6:7b:2f:3b:23:88:
                    20:76:19:85:62:c7:a1:f9:92:8a:44:da:a1:f8:07:
                    05:9f:2c:9e:51:54:33:21:70:42:c5:b9:1e:1d:71:
                    29:f4:f2:81:0b:4c:bc:e2:26:9a:0c:b8:0d:46:45:
                    4a:43:a2:d3:4c:b8:57:f3:a6:0a:50:67:42:a4:82:
                    38:b5:03:bc:7d:df:27:34:18:08:78:a1:23:6f:b0:
                    b4:4e:93:53:fd:07:b5:79:a9:c7:25:99:1b:d0:2b:
                    85:68:0c:b3:a3:81:da:f7:db:c8:9c:dd:ee:05:25:
                    75:af:60:eb:7b:ed:90:78:74:ea:fc:9b:7e:fb:5a:
                    09:9f:72:aa:fd:7b:3c:15:b9:8c:c3:ef:b9:4a:39:
                    f4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328633

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.217.184.0/22
                  102.223.104.0/22
                IPv6:
                  2c0f:e848::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:b2:dd:e2:05:b5:7d:d3:6d:30:9a:d4:f4:11:65:97:c7:20:
         1c:46:09:06:c5:b3:15:14:9f:b7:40:c8:74:83:1a:7d:64:74:
         ac:b5:ee:d8:a5:83:e1:3e:40:00:b5:06:02:c1:54:69:5a:97:
         dd:05:70:48:bc:6d:db:4a:b6:a5:5d:d5:7c:28:5d:58:45:28:
         9c:8f:a4:1e:aa:f7:a8:7b:ba:1d:73:40:25:26:46:d4:fa:5b:
         4b:a1:54:8f:ed:11:fd:88:57:9b:a0:39:7a:44:a1:a2:a9:03:
         35:20:8d:88:bd:fd:51:a9:d2:5e:bf:62:48:8c:55:8d:a5:89:
         27:30:e7:e6:63:6a:7e:71:7c:38:57:f3:72:b3:bc:b6:ab:9d:
         cb:16:34:3d:41:a8:3a:19:f0:58:70:31:94:61:9c:45:a4:34:
         0d:14:8e:d1:bf:8b:84:2f:cd:95:41:e6:ad:2e:21:39:3b:74:
         26:b9:a7:2e:98:b8:8c:1a:da:f4:68:8b:bc:d6:4d:f6:6b:85:
         de:89:83:ac:f3:72:19:ce:54:47:bb:9d:96:ac:c8:b7:b1:86:
         af:aa:a5:9d:32:b8:f3:74:58:30:29:e2:37:ed:c9:29:59:f4:
         b1:40:94:84:e8:67:2d:9f:e7:44:f2:e3:54:92:d1:29:7d:27:
         17:e7:bf:1a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Generated at Sat Jan 1 03:22:01 2022 by LibreSSL & rpki-client.