RPKI Certificate
Location:                 ./rsync/rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer (download)

Subject key identifier:   98:21:C8:72:21:D2:70:B4:2F:F9:DD:82:60:48:B9:92:C0:E0:E3:F8
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Manifest:                 rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.mft
CA Repository:            rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: AS: 1228 -- 1232
    2: AS: 2018
    3: AS: 6149
    1: IP: 154.114.0.0/17
    2: IP: 154.115.0.0/17
    3: IP: 196.21.0.0/16
    4: IP: 196.24.0.0/16
    5: IP: 2001:4200::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5860 (0x16e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:55:08 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F36B9F4BAF/serialNumber=9821C87221D270B42FF9DD826048B992C0E0E3F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d0:05:b1:12:c2:0c:30:84:cb:fe:a4:03:1d:
                    ea:6b:db:93:df:f3:ff:c2:a9:e0:c3:f6:b7:ce:e9:
                    0c:e0:1b:6f:e8:1d:19:47:d6:41:44:34:b0:44:ee:
                    86:92:33:f1:f2:d4:24:4c:a4:f7:24:c2:a2:e1:79:
                    08:aa:11:09:19:f7:14:ad:79:d5:5d:05:93:4f:29:
                    21:c0:ae:e6:aa:9b:3c:a7:51:3a:0b:4d:6b:95:92:
                    a2:31:be:2d:87:3f:5e:76:bd:6d:0f:5b:8e:3c:cf:
                    30:92:f0:ea:a4:62:9a:b5:41:ae:14:25:6c:c2:94:
                    0c:93:79:70:10:9d:31:03:fc:a3:32:5a:47:e7:90:
                    c8:7a:19:1f:44:da:26:0b:5e:78:29:ba:29:7d:65:
                    e3:14:01:76:b7:96:3d:74:24:23:1b:b4:e4:26:68:
                    3e:82:35:04:2b:cf:93:79:ed:73:66:62:d2:5c:d3:
                    c8:4c:f8:e6:b2:2a:dd:08:60:9c:f6:fd:a4:b2:44:
                    ff:24:d2:45:ad:29:4a:fb:b1:ea:f4:43:86:3b:03:
                    45:f4:05:f1:3b:24:92:fa:5f:e5:59:cc:13:40:8e:
                    47:cd:f1:44:69:51:61:04:30:63:c9:94:a4:9c:08:
                    ac:c0:7a:bd:a9:4b:8b:73:5b:ca:eb:98:58:d6:61:
                    95:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                98:21:C8:72:21:D2:70:B4:2F:F9:DD:82:60:48:B9:92:C0:E0:E3:F8
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1228-1232
                  2018
                  6149

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.114.0.0/17
                  154.115.0.0/17
                  196.21.0.0/16
                  196.24.0.0/16
                IPv6:
                  2001:4200::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:27:0d:f4:12:3d:02:e3:e0:18:0f:22:7a:38:9d:0e:0c:10:
         58:e3:dd:01:4c:ba:d5:82:6d:91:f2:be:6e:24:22:55:e7:73:
         77:4b:be:91:99:8d:70:34:45:5d:62:f2:31:6b:04:ca:7c:a3:
         75:8a:97:e2:9d:53:f3:4e:49:19:6e:af:29:de:3c:7c:31:35:
         2e:60:04:9f:ae:20:61:28:ec:dc:33:46:d7:8d:97:81:67:b1:
         e9:b3:bb:c1:31:85:58:05:d5:01:08:ab:ac:be:ff:15:4e:a4:
         a3:9a:52:0f:ef:2e:c5:98:48:e9:1d:b8:6f:ff:bc:7e:95:91:
         78:ca:6f:9b:96:37:12:88:cc:0e:fc:40:1f:2b:13:bd:1b:77:
         bd:7e:e4:4e:cc:fb:64:45:aa:2a:2a:f8:69:a3:8c:92:f9:0d:
         85:62:12:0f:1f:f8:0e:fe:ec:93:3f:31:ed:41:7c:27:0a:06:
         35:00:b0:f0:5b:f0:fe:e6:dd:f1:36:4c:92:1f:d1:04:55:5c:
         79:89:64:48:26:d7:ee:9f:99:67:02:ad:cb:ad:ee:a8:7a:12:
         0a:6a:88:fa:16:6f:f9:2e:5e:3d:d2:d7:5c:63:43:af:99:f4:
         4e:a4:e6:ce:71:7c:fd:6f:6b:f7:d8:08:1b:cc:0f:ab:cf:4e:
         42:b3:a9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 03:22:05 2022 by LibreSSL & rpki-client.