RPKI Certificate
Location:                 ./rsync/rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer (download)

Subject key identifier:   5E:B8:8D:F4:BF:90:89:D7:04:9A:1F:BE:80:05:E6:21:EA:AE:86:2B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Manifest:                 rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.mft
CA Repository:            rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: AS: 328631
    1: IP: 102.22.248.0/21
    2: IP: 102.218.24.0/22
    3: IP: 2c0f:e8a8::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5791 (0x169f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:48:05 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F36A2303AF/serialNumber=5EB88DF4BF9089D7049A1FBE8005E621EAAE862B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9f:c5:f0:45:cc:78:7d:2b:ef:91:59:aa:10:
                    f5:d8:e3:ed:b0:2e:98:4d:38:36:83:a0:ca:fe:e1:
                    4f:22:cf:2b:91:f0:2e:c8:e3:7d:4b:f6:02:a0:ac:
                    a6:8d:d1:7c:b3:7d:32:44:0d:23:89:9e:7c:b1:9f:
                    db:7f:c2:86:ef:29:bd:e9:8d:c3:37:60:95:cb:37:
                    45:91:76:f9:cb:8f:a1:6f:55:f3:7a:19:68:d3:30:
                    66:4f:39:d1:6b:34:ca:f3:6d:11:83:64:91:f0:01:
                    54:04:1c:e2:e9:5f:8d:e6:5e:62:f6:c2:84:24:8f:
                    66:be:8f:7b:1f:0e:1d:30:7b:ee:14:b6:72:72:ce:
                    25:fa:58:f8:6a:d3:0a:79:86:22:f3:9b:88:cf:7a:
                    3a:b4:5b:8e:56:bb:55:1f:4a:25:c5:1c:46:cd:ca:
                    9d:c9:73:66:f6:84:69:c2:d4:92:7c:0d:4e:46:41:
                    37:af:2c:39:c1:dd:2a:e3:a0:ae:f3:42:67:3f:fa:
                    07:14:28:7d:97:92:45:c5:72:1f:fb:90:bb:44:82:
                    31:8f:1a:8b:1e:c0:34:7b:ef:f3:9c:a3:10:0a:ff:
                    3b:e4:2d:dd:52:48:92:98:2c:10:00:6c:6f:66:eb:
                    db:9c:e3:ae:2b:b5:45:75:ab:be:fc:72:15:e4:93:
                    26:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5E:B8:8D:F4:BF:90:89:D7:04:9A:1F:BE:80:05:E6:21:EA:AE:86:2B
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328631

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.22.248.0/21
                  102.218.24.0/22
                IPv6:
                  2c0f:e8a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:ee:f4:83:c7:02:57:8e:09:07:27:49:73:08:e6:c4:f2:b5:
         59:6c:86:77:67:3f:49:f2:de:5e:36:2e:f4:6f:fe:93:be:79:
         fe:4f:12:1b:48:80:51:23:63:61:95:cb:28:b9:07:48:5a:b5:
         a5:d4:ef:9b:cb:72:48:48:4c:98:93:e5:11:1e:ec:8d:f0:0a:
         1f:ed:ab:d7:37:34:12:02:43:ea:68:d6:7c:ea:d4:a8:a0:11:
         11:33:96:8f:58:1d:8e:47:fc:eb:80:1c:f3:2a:cc:e4:79:fa:
         66:25:ef:f7:35:27:22:a9:da:6d:90:62:ec:7d:79:39:77:8a:
         67:6a:2f:d7:ed:21:1a:0f:c9:a4:24:e5:5a:c1:4b:b6:e1:55:
         65:3e:88:31:cf:74:34:b6:b9:cc:e5:3e:4b:d5:dc:64:24:ae:
         36:a5:96:4d:b1:7c:1d:44:22:0d:9e:82:49:ce:7d:fa:e9:ba:
         07:96:69:52:61:ac:c3:ad:c4:78:63:a7:c6:dc:5b:19:02:1f:
         80:1a:4a:fa:8f:3b:37:c5:92:85:48:7f:c8:72:a6:de:77:de:
         f8:75:4d:7b:52:46:c7:57:d7:fc:e8:8c:6c:49:50:f5:5d:db:
         99:3f:c0:c1:1d:f4:10:17:7c:23:49:dd:ce:c3:fc:1c:10:62:
         56:d6:be:43
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Generated at Sat Jan 1 03:22:01 2022 by LibreSSL & rpki-client.