RPKI Certificate
Location:                 ./rsync/rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer (download)

Subject key identifier:   68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Manifest:                 rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft
CA Repository:            rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: AS: 36969
    1: IP: 41.87.0.0/19
    2: IP: 41.221.96.0/20
    3: IP: 2c0e:7800::/24

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5940 (0x1734)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:03:19 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F36DE46FAF/serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:12:70:76:d3:ed:65:bf:e4:28:17:71:f2:2c:
                    ef:21:dd:0e:3e:d7:3d:c5:1a:7e:5e:17:b5:4f:e0:
                    a6:c9:9f:38:59:d6:a1:b4:6d:72:e4:75:c2:6f:11:
                    db:3e:69:0c:19:88:ef:64:54:93:7e:4f:72:0a:d9:
                    da:51:5e:16:41:07:d4:98:cd:23:49:4d:c2:02:82:
                    1f:13:ec:c6:c3:0c:61:49:03:40:a8:d3:3f:a3:63:
                    bd:ed:a6:78:31:81:48:43:e9:a7:e7:92:1a:b8:9f:
                    34:fa:ff:7e:83:4c:30:cf:79:c7:c7:f3:d6:38:2f:
                    40:63:5f:a3:2f:b1:42:ed:cb:6c:f5:6f:fc:2f:d6:
                    18:49:e1:44:9b:5b:b0:4b:53:e1:82:4f:39:e5:3a:
                    22:b2:a1:35:9c:bb:c4:8c:2e:6f:db:8e:25:67:f7:
                    3f:ca:70:f3:36:d6:19:31:b1:92:80:2c:36:3e:02:
                    ff:90:63:c8:38:4d:f3:fe:67:ba:2c:fa:df:0c:d0:
                    0f:4e:dd:47:b8:17:aa:d9:ff:d2:d0:1a:b2:00:c4:
                    2b:84:21:54:85:0c:cf:be:34:48:16:60:c0:5b:79:
                    7f:40:8e:3b:09:b9:82:d8:c1:e5:db:21:db:25:8a:
                    9f:02:84:e0:2d:00:b2:85:fd:18:82:3d:74:7f:95:
                    90:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36969

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.87.0.0/19
                  41.221.96.0/20
                IPv6:
                  2c0e:7800::/24

    Signature Algorithm: sha256WithRSAEncryption
         55:54:ce:56:80:42:27:6a:77:58:80:6c:f1:0d:3a:fe:3c:6c:
         99:a7:21:75:76:5f:82:2b:ed:21:89:3b:80:ee:aa:c9:e0:d6:
         60:ad:64:5a:01:6b:4b:c1:86:07:67:8a:28:e8:ad:55:94:fd:
         c1:d8:18:8b:6e:a0:4c:63:f0:17:9d:a0:f1:ff:83:a1:17:1d:
         2b:2b:ec:dc:cd:86:6d:f1:68:c7:8e:7f:92:a6:cc:ff:54:32:
         de:e7:78:65:24:52:fb:58:90:d6:fb:d7:be:a7:98:e5:e5:4d:
         40:5f:bc:62:90:48:43:4e:36:8b:9d:a5:00:e6:6e:6c:0f:2a:
         17:54:f2:84:78:ec:ae:a8:27:cb:0a:14:25:d2:7e:d2:ee:23:
         1a:9b:21:70:84:25:63:69:bb:1f:98:1f:72:3a:c2:03:f0:bd:
         36:07:07:c4:1a:3f:be:29:99:00:98:cb:2e:63:0f:6f:10:a4:
         5b:97:d1:ea:2f:79:7d:d0:67:39:d0:24:cd:3a:12:ae:54:0c:
         77:39:0f:23:92:ba:56:4d:40:19:30:f5:de:a4:91:7d:f6:10:
         23:a8:32:2e:86:ab:12:d0:fc:70:5e:dd:61:e6:0e:9c:00:cb:
         e8:b7:02:5a:7c:30:1a:67:fe:a0:5a:99:0f:17:71:0b:e9:2a:
         bf:78:c7:2e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Generated at Sat Jan 1 03:22:02 2022 by LibreSSL & rpki-client.