RPKI Certificate
Location:                 ./rsync/rpki.afrinic.net/repository/afrinic/vfb5nNCCwTvtpdoOiYiN1TLIYwc.cer (download)

Subject key identifier:   BD:F6:F9:9C:D0:82:C1:3B:ED:A5:DA:0E:89:88:8D:D5:32:C8:63:07
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Manifest:                 rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.mft
CA Repository:            rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: AS: 37254
    1: IP: 41.76.216.0/21
    2: IP: 102.69.168.0 -- 102.69.179.255
    3: IP: 102.222.196.0/22
    4: IP: 2c0f:f4a8::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.afrinic.net/repository/afrinic/vfb5nNCCwTvtpdoOiYiN1TLIYwc.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5962 (0x174a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:05:38 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F36E8561AF/serialNumber=BDF6F99CD082C13BEDA5DA0E89888DD532C86307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:55:57:c6:1f:45:b0:9e:d0:19:e3:14:cb:7e:
                    a4:d2:07:0e:12:f8:04:ad:e6:a7:8f:f2:79:02:65:
                    3d:cf:38:bf:55:8b:cd:61:30:b9:46:3d:6f:6d:2f:
                    14:b2:e8:dc:33:79:4e:a3:f4:1d:bd:92:99:b4:67:
                    12:b6:9b:31:a8:df:9c:53:16:4c:83:04:7f:e8:05:
                    05:18:6e:5b:e9:f8:2d:43:1c:40:3a:6a:97:89:ca:
                    bd:bb:d1:37:44:88:8e:86:cf:b1:fa:b0:99:d6:7a:
                    25:9c:f6:07:74:ef:29:07:19:e9:c9:49:a4:f2:f9:
                    cc:19:0c:eb:95:84:c0:b5:da:94:63:00:f5:1b:e5:
                    b0:84:e9:16:27:06:ef:42:e9:cc:81:f8:32:95:9b:
                    db:ac:9e:4a:89:99:d5:9a:f0:85:74:70:22:61:98:
                    41:37:82:2c:a6:2d:ed:7e:9c:52:e4:3c:d8:4f:2d:
                    43:dc:7f:ae:49:b9:c0:73:63:a4:58:c7:12:cd:c6:
                    d2:a5:b7:f6:8a:97:82:26:fb:e4:0d:8d:76:d8:59:
                    8b:38:76:e3:d9:87:75:44:48:8b:f4:e2:e1:e1:94:
                    ac:d7:1e:da:fc:01:73:2d:9e:99:d1:fa:6b:55:bb:
                    65:5c:40:a1:7d:fc:e7:7e:3e:49:77:16:a0:63:61:
                    5b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BD:F6:F9:9C:D0:82:C1:3B:ED:A5:DA:0E:89:88:8D:D5:32:C8:63:07
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37254

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.76.216.0/21
                  102.69.168.0-102.69.179.255
                  102.222.196.0/22
                IPv6:
                  2c0f:f4a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:a1:a7:31:f5:71:ba:4d:cd:90:a6:91:a7:a9:ff:b4:e5:b5:
         06:a3:cf:93:3e:4d:f1:cc:32:68:50:14:1f:dd:80:d9:7c:ea:
         74:28:17:a8:a9:ca:17:fa:46:7c:ed:44:38:2b:26:7e:c9:d1:
         b8:e9:5b:15:66:5e:eb:00:dc:dc:cd:e6:54:26:e6:a7:33:e4:
         92:14:64:cb:4c:5c:be:0a:b3:52:0a:ab:5d:ac:f2:1f:2f:7b:
         b6:35:e4:6e:19:cc:a2:1b:19:7f:be:78:1c:5b:f7:67:de:c9:
         41:f1:a8:76:c5:db:8a:8d:45:02:b5:18:0a:97:f4:a5:aa:79:
         b6:0f:98:fb:3b:85:38:bd:b3:05:69:8e:50:f7:e7:00:06:55:
         70:a0:c1:a3:9e:4c:90:06:89:db:f3:d4:b7:e1:b9:5a:04:04:
         28:a2:31:c0:3f:d4:6b:72:53:5c:63:3c:2d:77:f7:04:18:b2:
         2d:c8:c3:e1:64:39:63:3b:44:f5:bf:79:7b:70:6b:b0:e0:5a:
         fc:60:55:2b:7a:45:8b:80:db:18:2f:9e:86:f9:03:69:e5:cb:
         77:4c:5c:47:5c:c3:b7:63:21:85:9f:e6:f8:ad:a6:98:e5:50:
         02:63:93:a5:97:68:bc:c0:77:68:fe:cc:48:73:47:06:42:6e:
         59:20:51:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 03:22:08 2022 by LibreSSL & rpki-client.