RPKI Certificate
Location:                 ./rsync/rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer (download)

Subject key identifier:   C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Manifest:                 rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft
CA Repository:            rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: AS: 327901
    1: IP: 102.141.128.0/18
    2: IP: 102.217.108.0/22
    3: IP: 102.217.200.0/22
    4: IP: 102.217.224.0/22
    5: IP: 102.218.240.0/22
    6: IP: 102.219.116.0/22
    7: IP: 102.220.148.0/22
    8: IP: 102.221.120.0/22
    9: IP: 102.222.168.0/22
    10: IP: 196.201.232.0/21
    11: IP: 2c0f:f0e8::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5890 (0x1702)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:58:04 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:63:b8:0b:a2:6e:da:65:f5:6e:65:dd:bd:d0:
                    3d:f9:cc:c1:4c:6d:e3:99:71:3f:b9:d2:ab:f4:19:
                    da:cc:60:64:f9:67:bb:82:cd:92:7d:83:6a:ba:b1:
                    d2:4a:6a:03:61:ae:ef:d6:1c:d8:5e:58:cb:c3:bd:
                    73:61:82:5a:19:4c:ea:0c:99:13:d8:3a:c6:82:55:
                    01:77:bf:dc:5a:c3:dd:06:2e:74:b7:85:0b:84:52:
                    a1:40:81:76:a7:0f:6c:41:56:d6:3c:60:a7:f6:eb:
                    ff:10:50:4b:fa:4b:a0:e8:ad:7d:b5:3b:21:9a:be:
                    be:35:c4:40:62:a8:ef:0e:b4:82:27:f9:50:06:55:
                    b9:80:20:15:d2:c6:c4:48:ae:8a:6e:22:23:be:c5:
                    47:94:a5:45:3d:df:58:61:45:72:42:ae:ab:d8:24:
                    73:10:f0:cf:5f:c8:8d:b6:78:76:65:b9:e3:81:bd:
                    08:e0:f3:db:78:3f:ba:5f:0d:ca:ed:b4:e6:85:45:
                    da:db:0e:73:f0:01:f1:52:4b:02:50:8c:e7:d0:2d:
                    be:1f:c4:0e:6c:8e:00:32:09:11:81:ce:ce:07:b9:
                    9e:c9:09:cd:10:5d:31:bf:df:a0:d6:7c:b8:b1:bd:
                    f0:42:19:a3:5f:80:5c:97:f4:2f:14:e4:68:48:eb:
                    e9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327901

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.141.128.0/18
                  102.217.108.0/22
                  102.217.200.0/22
                  102.217.224.0/22
                  102.218.240.0/22
                  102.219.116.0/22
                  102.220.148.0/22
                  102.221.120.0/22
                  102.222.168.0/22
                  196.201.232.0/21
                IPv6:
                  2c0f:f0e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:65:17:a6:ec:e7:3c:f4:da:84:ee:51:2d:b4:b9:66:1e:84:
         a0:7d:d1:dc:73:71:43:c6:08:74:84:2f:df:df:58:82:74:6d:
         c9:3c:0c:9d:4e:d5:9e:b8:89:06:7f:fc:ec:ef:68:69:48:55:
         3b:2c:26:42:24:fa:39:a2:81:bf:fa:fa:c2:dd:5b:60:14:b0:
         5c:02:65:59:e6:27:07:85:25:67:c2:c0:5b:8f:11:08:d2:6d:
         94:a6:59:94:58:69:c2:79:d7:05:b4:50:40:dd:f7:c7:37:c2:
         62:75:6a:ae:02:13:14:d8:eb:3c:20:50:6e:2e:4d:90:82:48:
         d1:07:9e:6a:34:8c:f4:f2:0c:45:b9:80:41:4d:2f:d4:32:74:
         50:6b:ce:cf:c4:98:6d:33:0b:ce:bf:02:b3:f3:db:30:75:bf:
         e3:d4:73:13:80:cc:61:36:12:51:ec:2a:5e:a0:ad:df:86:1f:
         1b:c1:33:9e:46:d9:e4:6d:31:47:50:5f:35:b4:da:06:b8:10:
         aa:83:1a:c4:f6:51:a1:5a:4c:bc:0f:70:1f:ba:43:77:64:ba:
         ee:c1:64:d4:79:fe:43:99:9c:b9:fb:06:36:e1:62:35:8f:bf:
         92:83:12:59:78:e6:3e:d2:c9:7d:37:44:2a:2a:6e:99:e4:0e:
         14:b9:08:23
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Generated at Sat Jan 1 03:22:08 2022 by LibreSSL & rpki-client.