RPKI Certificate
Location:                 ./rsync/rpki.afrinic.net/repository/afrinic/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.cer (download)

Subject key identifier:   81:31:64:E5:35:DF:5B:1B:43:F8:FA:6E:22:5D:D0:FA:98:CF:6F:ED
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Manifest:                 rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.mft
CA Repository:            rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: AS: 25793
    1: IP: 196.13.31.0 -- 196.13.80.255
    2: IP: 2c0f:f440::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.afrinic.net/repository/afrinic/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5526 (0x1596)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:21:18 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F3652E81AF/serialNumber=813164E535DF5B1B43F8FA6E225DD0FA98CF6FED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b2:90:11:5f:f1:52:f5:d7:8f:5d:d8:8f:52:
                    f2:93:90:cd:81:8a:76:48:7b:ee:97:a9:f5:9d:88:
                    95:ea:8a:2d:07:c9:3e:0d:ef:6a:fc:b3:b5:45:43:
                    20:fa:95:31:7b:a6:8c:fc:cf:4f:22:57:74:11:f1:
                    6f:bf:b2:04:c2:de:ce:81:5c:5a:f4:b2:5a:bc:21:
                    0b:0b:2c:f4:c8:fa:d1:79:9b:61:4f:3d:a4:17:50:
                    8a:c9:f8:ae:9b:a3:8d:5e:72:da:16:19:fe:88:37:
                    bd:c7:1d:80:2c:05:10:c0:2a:47:f6:e7:90:e2:28:
                    32:c4:d6:ed:e6:28:99:8d:6c:16:bf:93:ee:31:c5:
                    93:8d:2d:40:d3:e1:44:3e:5c:81:10:ec:a0:70:29:
                    d7:33:0d:1d:1a:c0:f2:14:4d:de:4f:e2:09:0d:e0:
                    aa:4d:8d:e8:91:d6:1b:01:b5:2f:1e:a8:eb:b5:55:
                    c2:bd:3f:98:11:b7:ac:63:3f:81:57:ca:1a:01:bc:
                    1e:08:f3:b5:61:60:b7:2a:15:3d:aa:28:05:31:53:
                    c0:61:2c:bc:40:21:ee:1b:38:3c:0f:01:79:c6:ef:
                    3b:be:b1:a8:3f:ac:2d:a1:84:2a:e2:1d:29:b4:70:
                    b3:90:cf:d4:b4:e0:96:af:ee:3a:bf:da:d0:9f:74:
                    f4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                81:31:64:E5:35:DF:5B:1B:43:F8:FA:6E:22:5D:D0:FA:98:CF:6F:ED
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25793

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.13.31.0-196.13.80.255
                IPv6:
                  2c0f:f440::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:61:6f:f2:8b:bc:66:a9:db:6d:de:ca:dd:bf:f1:bb:f3:e6:
         65:15:11:39:9e:16:d8:b6:0d:3e:94:ac:67:b7:00:03:f7:c4:
         29:6f:06:ad:0e:04:26:d5:57:ca:4b:48:0e:2b:8e:8e:92:36:
         20:56:6b:d7:8c:03:4a:9c:cb:ff:a1:0d:db:40:67:f9:57:74:
         0d:cb:b3:c7:5d:e6:6c:47:9b:01:48:e4:d1:40:22:04:ee:7a:
         93:84:c7:a5:9e:16:2e:f3:ea:38:f1:79:0b:56:10:c2:cb:72:
         60:71:c3:1f:36:ca:7b:7c:e0:b0:4c:3f:f2:3a:60:7b:85:47:
         d1:0d:81:ec:90:4d:13:cd:4b:66:76:55:51:bb:6f:17:b5:2c:
         b2:9d:bd:41:05:b8:96:3c:fc:71:1c:bb:be:60:05:ce:92:ac:
         6c:80:40:7a:57:55:b0:db:88:5a:53:62:59:79:aa:88:03:44:
         03:60:d9:dc:a8:a7:0b:30:36:65:b1:ba:c1:a7:9f:03:81:3f:
         3d:85:a7:4f:55:29:d9:d9:a5:aa:93:11:cc:35:88:1f:bd:13:
         c7:3c:67:13:29:77:40:5e:21:77:e1:02:36:46:3f:40:00:c4:
         ae:e4:33:7a:45:00:67:8f:bf:cb:e4:2b:2b:72:21:4e:dd:26:
         75:33:21:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 03:22:03 2022 by LibreSSL & rpki-client.