RPKI Certificate
Location:                 ./rsync/rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer (download)

Subject key identifier:   95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Manifest:                 rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
CA Repository:            rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: AS: 36916
    1: IP: 41.138.92.0/22
    2: IP: 41.180.0.0/16
    3: IP: 41.221.224.0/20
    4: IP: 41.223.60.0/22
    5: IP: 2c0f:fcb0::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5592 (0x15d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:28:03 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:70:ab:97:62:55:e1:a0:81:1b:61:b2:30:41:
                    f4:3e:4f:d1:2c:43:38:a0:e8:77:f9:8f:0f:65:6e:
                    b5:0d:54:b8:28:5f:32:ba:83:f9:57:f1:08:09:d3:
                    4b:3b:44:b5:25:46:dd:e0:23:4d:54:bd:e5:f5:f5:
                    47:14:4f:37:fd:9f:8d:47:fe:a1:e6:c7:29:91:8e:
                    01:21:53:b5:a8:03:16:49:73:16:aa:33:d4:da:f3:
                    a2:70:ad:4d:6f:76:60:bb:30:0e:73:61:f6:c5:46:
                    ef:69:70:5d:fe:2f:78:e2:b4:32:6e:f5:f1:31:64:
                    c5:4f:7e:e5:be:a8:de:d6:a6:db:3f:bb:93:d4:20:
                    1f:a6:33:1e:e7:89:f3:93:b7:3e:26:86:ec:bd:2b:
                    5c:c4:0f:98:eb:0b:5f:03:9f:12:10:52:0d:1e:f9:
                    59:cc:ae:c5:91:47:06:4b:51:46:61:91:65:46:b1:
                    0f:f9:4a:19:32:33:95:a0:6a:76:4f:0e:11:ab:4f:
                    15:24:d2:05:62:78:03:69:40:41:3b:41:3e:78:16:
                    55:f4:b5:ec:8f:94:27:d2:85:24:fd:3e:29:19:9e:
                    fa:70:ea:94:59:dc:6f:51:a0:b2:42:78:f2:c5:74:
                    45:74:c8:b4:d8:0b:bb:97:a5:2b:5a:82:04:cb:29:
                    4f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36916

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.138.92.0/22
                  41.180.0.0/16
                  41.221.224.0/20
                  41.223.60.0/22
                IPv6:
                  2c0f:fcb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:4d:09:c6:95:df:51:85:1e:5d:47:93:20:a5:02:94:50:0a:
         58:54:80:57:ac:57:da:1e:47:cc:9e:33:64:6c:46:6e:0d:cf:
         fe:7b:e3:65:86:2c:f2:ee:67:92:e2:50:4b:62:76:59:d8:ec:
         74:03:69:95:71:bb:49:6f:d1:a4:91:6e:28:e2:0c:26:de:ac:
         b8:db:9f:bb:2f:fe:f4:ef:65:c5:b6:19:08:48:9f:60:02:24:
         33:b2:0d:5b:51:27:1e:9a:54:12:01:0c:26:a8:53:c4:a5:97:
         0b:18:fa:98:7b:d3:60:bb:91:aa:bc:05:0f:d2:ff:86:53:85:
         f1:84:af:8f:16:78:1a:05:20:13:aa:11:33:b8:be:bb:c6:86:
         54:60:94:98:41:99:ed:71:cf:c1:6e:f0:65:e1:dc:83:c0:06:
         a2:e7:80:6e:5b:a7:b4:fa:47:2e:e1:74:b8:3a:ac:4a:c1:2c:
         fa:a8:66:ec:18:a3:8d:b4:a3:88:22:0c:6f:30:9a:c3:e7:3c:
         56:93:57:23:73:71:10:8c:a3:30:3a:d3:84:ed:ae:2d:92:20:
         91:24:1e:ec:60:f7:35:95:2e:f5:0e:af:f1:c8:e2:21:d1:32:
         f8:78:7e:d0:cf:40:8e:29:8a:58:a2:06:13:9c:c1:5b:77:61:
         5e:b1:03:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 03:22:04 2022 by LibreSSL & rpki-client.