RPKI Certificate
Location:                 ./rsync/rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer (download)

Subject key identifier:   CB:88:58:75:27:B3:83:91:6C:C0:B1:D8:86:66:53:C3:34:31:E4:5D
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Manifest:                 rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
CA Repository:            rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: AS: 327693
    1: IP: 41.76.224.0/21
    2: IP: 102.67.176.0/21
    3: IP: 154.73.184.0/21
    4: IP: 2c0f:f708::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5560 (0x15b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:24:47 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F3663CEEAF/serialNumber=CB88587527B383916CC0B1D8866653C33431E45D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8f:f7:3b:a5:6e:10:87:52:12:d5:95:4d:30:
                    4d:d4:ea:16:d7:a6:2d:ba:8c:07:bf:f6:f8:86:27:
                    87:18:c5:9a:20:c1:07:13:ff:09:9f:33:e9:fd:25:
                    17:1c:37:c8:bf:24:d1:74:98:60:de:de:24:cf:51:
                    5a:d8:e1:ba:00:7a:4c:a9:42:d5:66:fb:ce:cc:b1:
                    30:40:26:af:74:a9:47:dc:ae:18:09:f0:d7:94:4f:
                    5f:21:3d:53:f1:91:d6:f2:b4:78:56:7a:1c:8e:4d:
                    a4:36:2f:a7:b6:6e:e3:d5:50:c8:72:17:29:cd:72:
                    26:f1:6c:e1:db:2e:25:14:8a:ef:29:ff:8c:01:43:
                    0c:92:33:95:53:0e:a7:1c:0d:14:d7:fc:61:6c:30:
                    04:d3:4c:18:31:b4:eb:cd:b7:fd:a9:cb:da:a2:8e:
                    fd:09:e6:06:f0:30:65:f0:53:a7:34:3d:7f:2a:01:
                    8f:ff:35:82:44:ad:53:b2:ec:b1:70:80:2d:ad:5a:
                    24:00:d0:d2:af:f3:56:44:79:bc:ee:c5:55:ad:33:
                    1d:dc:23:48:58:8a:60:f6:74:0e:5b:37:e2:1e:a2:
                    58:c5:cb:ff:c7:f3:19:17:4f:e5:a2:5f:89:91:dc:
                    85:44:79:15:57:4b:af:1d:8a:69:d7:d0:70:bb:1a:
                    31:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                CB:88:58:75:27:B3:83:91:6C:C0:B1:D8:86:66:53:C3:34:31:E4:5D
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327693

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.76.224.0/21
                  102.67.176.0/21
                  154.73.184.0/21
                IPv6:
                  2c0f:f708::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:68:62:ea:71:c2:ba:41:84:60:07:d8:c7:df:63:05:8d:e9:
         bf:cb:db:b8:63:74:be:96:13:12:29:1f:ae:fa:9f:61:36:17:
         60:f5:ef:f9:6d:f8:41:9b:fb:42:3c:26:91:bc:68:e4:aa:8b:
         c8:34:14:c4:9f:42:a5:2f:38:70:a3:a4:17:64:f9:a4:97:80:
         f1:84:47:5e:3c:d1:fd:8f:b8:d3:29:76:4a:d1:f3:bb:2d:30:
         86:04:f6:1c:de:50:f8:5f:a5:c6:6c:1d:8f:01:ea:50:5b:d9:
         11:a3:fc:af:dc:de:a0:0e:6b:5d:2b:5a:d7:c8:c2:42:06:55:
         8a:7a:ee:9b:ae:87:e9:b4:bf:d0:67:c9:42:66:57:07:55:0e:
         b2:d9:ca:13:5d:6e:85:0f:db:94:0e:b0:1e:12:ff:84:4e:cd:
         14:7c:9d:af:5a:08:16:23:4f:1a:ac:84:87:71:8e:55:cb:59:
         a8:8c:73:f3:84:5a:75:ee:69:7d:c9:aa:f5:00:f6:94:0a:60:
         77:1e:b6:c8:c1:79:8d:39:43:9d:af:04:ea:8e:ad:91:d5:44:
         8f:b7:de:06:d8:90:44:27:95:ad:52:7a:bf:db:b3:a2:cf:a6:
         3c:25:7f:c4:56:0c:ed:f8:e7:60:bb:5f:f1:c1:8c:7d:07:48:
         7a:49:64:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 03:22:09 2022 by LibreSSL & rpki-client.