RPKI Certificate
Location:                 ./rsync/rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer (download)

Subject key identifier:   85:A9:5A:DD:2C:F5:87:74:03:0B:6A:9B:93:B4:11:38:6F:E3:06:40
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Manifest:                 rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
CA Repository:            rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: AS: 37324
    2: AS: 327821
    1: IP: 196.49.9.0/24
    2: IP: 196.223.0.0/24
    3: IP: 2001:43f8:270::/47

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5990 (0x1766)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:08:40 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F36F5173AF/serialNumber=85A95ADD2CF58774030B6A9B93B411386FE30640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c9:ea:84:ef:62:11:88:89:b1:4c:05:a1:4d:
                    ef:de:05:c9:8d:9f:a1:1e:ad:f7:14:17:01:0c:6b:
                    f8:5d:0b:fb:09:6b:b3:5e:33:d1:21:dd:1b:34:5a:
                    b0:54:45:4a:39:1e:63:ca:55:26:0e:6a:55:49:e4:
                    50:7b:70:10:93:9c:47:e1:60:4b:91:56:22:81:3c:
                    b4:6e:09:7d:f7:50:f3:08:2c:62:02:bb:28:0c:eb:
                    b7:76:4f:5f:af:f1:6b:46:42:de:fb:91:a2:04:5a:
                    5e:cd:ab:4f:f9:d2:01:84:f4:27:db:a2:93:09:9e:
                    04:ef:13:73:fc:a3:d9:e0:45:7c:95:d2:2c:aa:ee:
                    98:5a:84:b3:d7:3f:11:94:61:8b:be:72:4f:f9:fc:
                    f3:77:d1:4b:aa:48:1b:57:cc:8d:83:6e:c7:7b:65:
                    c0:11:d0:4a:92:87:64:a0:7a:a9:3f:f4:74:6b:c0:
                    f4:dc:04:6c:59:fd:f6:d6:a5:c7:b7:27:e6:db:3d:
                    2f:71:31:3d:56:97:60:53:9d:66:9b:16:d3:6d:eb:
                    7a:d3:ad:5d:38:fe:29:f1:05:64:bf:aa:14:0b:31:
                    5e:0f:58:48:21:47:e6:d0:3a:63:3e:c5:2e:f7:77:
                    e3:d7:2d:44:fb:3d:40:ca:53:2b:84:29:29:06:d6:
                    00:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                85:A9:5A:DD:2C:F5:87:74:03:0B:6A:9B:93:B4:11:38:6F:E3:06:40
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37324
                  327821

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.49.9.0/24
                  196.223.0.0/24
                IPv6:
                  2001:43f8:270::/47

    Signature Algorithm: sha256WithRSAEncryption
         0b:d0:36:40:71:e5:e3:a0:d7:ed:13:a0:17:c2:e6:7f:74:48:
         57:4f:52:69:96:13:a1:1c:70:25:b6:54:cf:b2:e1:83:98:b1:
         c9:41:1f:ff:e1:3a:fd:ab:e3:63:65:dc:82:0a:1e:0c:14:af:
         e9:1d:fd:53:a4:f6:6e:d7:c2:c7:6d:43:2e:17:8b:54:be:25:
         00:78:67:a5:a7:30:21:65:a6:01:fc:fc:40:bd:0c:32:ea:59:
         aa:ab:ff:1f:cd:4e:6f:f6:5e:19:82:b8:c9:92:4c:79:ec:85:
         3f:2f:d1:d3:e5:cc:70:b0:3d:c8:ea:da:fb:94:cb:eb:9b:52:
         1a:f4:7f:30:16:ea:77:36:e6:15:2b:00:c5:24:f8:ec:79:ce:
         22:c2:7c:77:46:de:73:be:3b:2b:86:b0:d6:36:3f:90:7f:e6:
         9a:14:2c:31:8a:d7:35:9a:d3:82:a1:04:c6:88:5b:49:0c:22:
         45:95:b3:14:2f:58:78:0d:09:64:bf:d3:51:1d:db:83:5d:a9:
         7b:45:b5:6c:14:00:3c:4f:70:2a:c8:64:bd:64:9e:de:f2:40:
         75:2d:85:e3:97:6e:a7:55:f1:c2:59:25:97:f0:46:0c:42:2e:
         db:5a:01:e9:11:e9:a0:e7:63:a7:d6:92:fe:88:53:df:22:02:
         e5:ca:a7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----