RPKI Certificate
Location:                 ./rsync/rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer (download)

Subject key identifier:   41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Manifest:                 rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
CA Repository:            rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: AS: 36958
    1: IP: 41.86.32.0/19
    2: IP: 41.191.120.0/22
    3: IP: 41.222.204.0/22
    4: IP: 41.223.216.0/22
    5: IP: 197.157.96.0/19
    6: IP: 2c0f:fef0::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5654 (0x1616)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:34:32 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F36FFD1EAF/serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:01:44:48:e2:3f:5e:5f:c4:bc:80:80:6b:84:
                    7f:d6:b2:fe:ce:f5:5a:2a:09:02:59:77:50:8b:0d:
                    3d:f5:df:7e:5f:51:0e:8e:18:29:4c:6d:fb:58:16:
                    c1:28:35:95:c1:e0:44:db:dd:91:e7:e3:8c:90:1b:
                    ad:b6:1a:58:b1:a2:86:d3:0e:e6:0f:62:5b:91:52:
                    a2:e2:2f:a0:7f:e6:86:fe:33:49:73:03:e5:2f:29:
                    6b:18:02:2e:9a:62:f0:d0:11:87:8f:94:75:18:ae:
                    0b:51:2a:2d:04:de:a6:36:c3:43:1b:a2:77:bd:5e:
                    fd:01:bf:90:1d:eb:48:64:f0:0e:e9:a5:7d:33:3b:
                    b0:3a:fc:1b:98:75:60:09:ee:33:43:e2:ed:71:de:
                    a8:34:ca:2e:78:c9:03:92:d0:12:75:72:fe:b5:47:
                    f4:50:79:f4:01:8f:e0:45:27:42:38:26:39:a7:9f:
                    e2:64:27:58:f0:0f:1d:d2:3e:c4:43:5b:b6:4c:12:
                    d1:c1:17:29:f8:c9:a5:7a:87:8e:01:e1:8b:26:88:
                    1b:1f:bf:fb:73:c1:3d:19:41:b4:00:0a:06:0b:64:
                    be:3f:52:43:36:bd:fa:2d:6c:0b:8e:cb:fc:1b:a2:
                    bb:b8:4a:86:06:d7:05:6f:6e:e7:a5:c8:ff:2c:c2:
                    ea:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36958

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.86.32.0/19
                  41.191.120.0/22
                  41.222.204.0/22
                  41.223.216.0/22
                  197.157.96.0/19
                IPv6:
                  2c0f:fef0::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:96:cd:a4:8c:06:c3:5c:d6:69:3a:55:61:15:c7:86:a8:9b:
         2d:18:5a:b7:87:f9:41:8f:6c:33:70:3b:9d:47:fe:d7:c7:d5:
         d9:05:cb:26:01:2f:27:1e:47:22:3c:e5:0d:4d:07:f0:ba:0a:
         cf:01:b4:08:c4:87:81:43:19:1e:36:a2:ad:91:b4:b2:0d:08:
         a8:c1:16:92:e7:56:9b:44:d0:60:53:ee:4c:d8:2d:2e:79:1d:
         dc:13:69:12:db:56:cc:f3:2f:f6:a0:70:4e:81:59:bc:7c:61:
         9b:dc:8e:75:6c:98:ac:da:47:42:c5:8e:12:a2:9d:e4:36:e4:
         2b:9e:ef:ab:f1:68:a1:24:7d:4c:69:ac:61:8d:d7:93:d3:de:
         90:af:cd:fc:da:8f:8a:da:3f:db:3e:e7:bf:53:7e:5a:a3:c2:
         41:12:d2:98:a5:31:ef:c4:95:07:4d:9e:f8:be:3e:a4:03:a5:
         f9:ab:c5:06:1d:1c:33:2c:d5:9a:1c:de:f3:98:2a:37:a6:72:
         0f:03:d0:0d:8b:a3:6f:9f:bb:84:c3:b7:6b:3c:5a:d9:ae:a3:
         f6:cf:68:0f:7a:fb:3d:e0:3c:74:8d:04:18:c8:42:76:ad:73:
         af:ef:6c:16:71:44:d6:fa:4d:8b:60:be:e4:9a:45:02:93:16:
         9c:23:64:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 03:21:59 2022 by LibreSSL & rpki-client.