RPKI Certificate
Location:                 ./rsync/rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer (download)

Subject key identifier:   FD:59:AC:20:77:35:9B:0D:72:3D:20:AA:99:9A:8E:16:A8:4B:41:93
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Manifest:                 rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
CA Repository:            rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: IP: 41.32.0.0/12
    2: IP: 41.232.0.0/13
    3: IP: 102.40.0.0/13
    4: IP: 154.176.0.0/12
    5: IP: 196.202.0.0/17
    6: IP: 196.218.0.0/15
    7: IP: 197.32.0.0/11
    8: IP: 2001:4388::/32
    9: IP: 2c0f:7b00::/28

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5841 (0x16d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:53:14 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F36B49FAAF/serialNumber=FD59AC2077359B0D723D20AA999A8E16A84B4193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f3:53:28:ee:6a:fe:ca:cb:3a:44:20:3e:42:
                    cf:21:eb:a5:17:f3:16:84:31:e2:77:79:dd:50:bf:
                    cb:f9:df:42:1f:61:3f:bc:8d:a5:f6:d1:c7:87:cf:
                    a9:85:a8:a9:ce:f7:d2:19:b8:c4:79:50:44:68:f0:
                    4b:98:79:9f:e1:1e:2f:8b:c7:50:a1:4a:e0:fd:7a:
                    aa:fa:af:a3:e1:4c:08:6c:a4:24:74:3b:99:12:ff:
                    bb:81:c0:bb:61:85:b8:b2:75:cb:8e:74:ea:e8:66:
                    01:d1:14:2f:5e:77:22:b6:84:8c:62:c1:2b:b4:f3:
                    c7:6c:6e:b9:ee:d9:a0:3b:ab:d3:ae:95:3d:c4:fb:
                    82:59:64:d4:bd:a9:8a:d3:4c:db:e8:26:bf:ba:dd:
                    92:21:06:54:7c:83:63:58:6d:5b:1b:34:5a:ed:3f:
                    c7:f9:08:2b:8c:53:61:4a:93:f0:9a:3e:dc:aa:10:
                    bb:b7:4f:12:e2:04:13:2b:be:a3:ac:12:6d:7d:9c:
                    7c:7a:52:89:be:fe:95:b8:d9:e3:0b:9a:f6:f3:83:
                    da:eb:cc:b2:60:d2:3b:7b:56:46:24:4c:e4:33:4d:
                    49:dc:54:77:1b:fb:2e:eb:f3:62:0c:95:e7:0d:5f:
                    8c:23:d1:36:16:ec:ef:3e:2c:89:41:42:da:75:c5:
                    06:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FD:59:AC:20:77:35:9B:0D:72:3D:20:AA:99:9A:8E:16:A8:4B:41:93
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.32.0.0/12
                  41.232.0.0/13
                  102.40.0.0/13
                  154.176.0.0/12
                  196.202.0.0/17
                  196.218.0.0/15
                  197.32.0.0/11
                IPv6:
                  2001:4388::/32
                  2c0f:7b00::/28

    Signature Algorithm: sha256WithRSAEncryption
         78:26:c6:10:1d:94:2f:8b:87:93:8d:f8:14:49:75:eb:fe:99:
         e0:7d:78:c7:c3:ea:b0:c5:24:05:74:c0:c0:3c:28:48:3d:bf:
         df:e7:f2:85:68:b5:1f:91:3f:1a:cd:92:df:4b:df:7f:2d:b0:
         3e:d9:dc:6a:55:46:03:e0:40:08:b5:d8:33:fe:a1:90:30:81:
         29:0c:4b:66:d4:4d:28:0c:6d:12:c9:8c:b6:b9:a9:8c:4e:81:
         79:05:47:69:56:20:0f:c7:54:c8:b5:1e:9b:0f:1c:a1:84:52:
         f2:da:3e:85:84:30:fb:99:6b:ec:2e:0e:83:cc:b2:c0:53:bd:
         8c:6f:0f:38:ee:c7:8a:11:82:fb:eb:e7:d3:00:7f:86:7e:f5:
         9f:a8:9c:64:88:08:9b:a7:5f:8f:34:d7:25:7f:3c:21:3d:27:
         50:19:0d:13:ea:b3:bc:4c:23:b2:2a:0d:17:8e:29:f6:76:40:
         69:03:f2:90:e9:85:9d:43:2a:4a:ac:80:3f:8b:71:e1:5d:25:
         60:45:4c:5c:bc:45:df:67:b2:e2:89:fe:94:41:bf:3b:e8:0e:
         e1:b5:9a:43:8b:ca:e6:30:d2:05:52:e8:30:9d:bb:bb:ac:4e:
         26:13:72:a5:f4:ee:ec:04:eb:92:f8:ad:f2:38:f2:19:ab:bf:
         80:e9:21:e0
-----BEGIN CERTIFICATE-----
MIIGLjCCBRagAwIBAgICFtEwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yMjAxMDEwMDUzMTRaFw0yMzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMMCkYzNkI0OUZBQUYxMTAvBgNVBAUTKEZENTlBQzIwNzczNTlCMEQ3MjNEMjBB
QTk5OUE4RTE2QTg0QjQxOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDC81Mo7mr+yss6RCA+Qs8h66UX8xaEMeJ3ed1Qv8v530IfYT+8jaX20ceHz6mF
qKnO99IZuMR5UERo8EuYeZ/hHi+Lx1ChSuD9eqr6r6PhTAhspCR0O5kS/7uBwLth
hbiydcuOdOroZgHRFC9edyK2hIxiwSu088dsbrnu2aA7q9OulT3E+4JZZNS9qYrT
TNvoJr+63ZIhBlR8g2NYbVsbNFrtP8f5CCuMU2FKk/CaPtyqELu3TxLiBBMrvqOs
Em19nHx6Uom+/pW42eMLmvbzg9rrzLJg0jt7VkYkTOQzTUncVHcb+y7r82IMlecN
X4wj0TYW7O8+LIlBQtp1xQarAgMBAAGjggMjMIIDHzAdBgNVHQ4EFgQU/VmsIHc1
mw1yPSCqmZqOFqhLQZMwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZCNDlGQS9BMjU1OTE5QzFDMUMx
MUU2QkExRTVDMENGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QjQ5RkEvQTI1NTkxOUMxQzFDMTFFNkJBMUU1QzBDRjhBRUEyMjgvX1Ztc0lI
YzFtdzF5UFNDcW1acU9GcWhMUVpNLm1mdDBTBggrBgEFBQcBBwEB/wREMEIwKgQC
AAEwJAMDBCkgAwMDKegDAwNmKAMDBJqwAwQHxMoAAwMBxNoDAwXFIDAUBAIAAjAO
AwUAIAFDiAMFBCwPewAwDQYJKoZIhvcNAQELBQADggEBAHgmxhAdlC+Lh5ON+BRJ
dev+meB9eMfD6rDFJAV0wMA8KEg9v9/n8oVotR+RPxrNkt9L338tsD7Z3GpVRgPg
QAi12DP+oZAwgSkMS2bUTSgMbRLJjLa5qYxOgXkFR2lWIA/HVMi1HpsPHKGEUvLa
PoWEMPuZa+wuDoPMssBTvYxvDzjux4oRgvvr59MAf4Z+9Z+onGSICJunX4801yV/
PCE9J1AZDRPqs7xMI7IqDReOKfZ2QGkD8pDphZ1DKkqsgD+LceFdJWBFTFy8Rd9n
suKJ/pRBvzvoDuG1mkOLyuYw0gVS6DCdu7usTiYTcqX07uwE65L4rfI48hmrv4Dp
IeA=
-----END CERTIFICATE-----

Generated at Sat Jan 1 03:22:01 2022 by LibreSSL & rpki-client.