RPKI Certificate
Location:                 ./rsync/rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer (download)

Subject key identifier:   A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Manifest:                 rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
CA Repository:            rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: AS: 11845
    1: IP: 41.193.0.0/16
    2: IP: 102.39.0.0/16
    3: IP: 102.217.196.0/22
    4: IP: 102.219.24.0/22
    5: IP: 102.220.208.0/22
    6: IP: 196.3.164.0 -- 196.3.179.255
    7: IP: 196.22.192.0 -- 196.22.239.255
    8: IP: 196.41.0.0/19
    9: IP: 196.41.192.0/19
    10: IP: 197.245.0.0/16
    11: IP: 2c0f:fd58::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5412 (0x1524)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:10:14 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3c:b2:9f:56:47:26:bd:94:e2:02:6a:d2:0a:
                    8e:5a:54:44:d6:d9:98:1e:66:fa:1d:a4:31:ed:6a:
                    8d:ac:c0:c4:ac:14:b4:2a:b1:67:32:57:d6:38:26:
                    0c:76:a1:48:05:2d:3c:1d:14:27:89:61:ef:cf:f1:
                    3d:a9:8f:90:c7:b6:54:60:ce:b4:fe:3c:3a:45:bc:
                    09:31:df:06:41:eb:16:2e:a4:4b:7d:7e:e3:e0:62:
                    c3:03:92:5f:2d:65:12:1e:60:a7:79:31:56:be:12:
                    ed:7c:2d:36:f9:c2:f3:c1:f3:24:98:82:41:4c:df:
                    5d:4a:ad:2e:34:11:c4:ce:b4:bb:05:61:99:89:66:
                    ec:d7:cd:0e:25:d9:24:85:84:dc:0c:3a:a4:e6:50:
                    9d:ba:77:43:20:cf:eb:92:b8:de:a1:db:e3:e4:3d:
                    14:e9:b9:2b:61:5d:37:a8:32:56:e8:30:3d:cd:d7:
                    e4:29:19:ad:80:ef:c2:6f:5b:9d:e0:2e:d7:fc:db:
                    a6:4c:ca:bb:fb:65:47:ba:30:20:c2:21:9d:49:9c:
                    60:02:c3:74:13:c6:9f:0d:28:8f:ba:f6:88:cb:5e:
                    78:79:69:2e:7c:e9:56:82:3a:71:71:da:07:55:79:
                    89:5e:a6:e4:3f:3b:50:4d:05:c8:74:62:a9:6c:7e:
                    f2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11845

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.193.0.0/16
                  102.39.0.0/16
                  102.217.196.0/22
                  102.219.24.0/22
                  102.220.208.0/22
                  196.3.164.0-196.3.179.255
                  196.22.192.0-196.22.239.255
                  196.41.0.0/19
                  196.41.192.0/19
                  197.245.0.0/16
                IPv6:
                  2c0f:fd58::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:d9:ee:92:d8:30:6b:a6:8d:cd:7d:53:e8:b2:02:80:85:63:
         9f:a6:9c:d5:92:7f:45:8c:9b:93:08:6c:cd:e4:0e:44:36:01:
         21:99:8c:3d:ba:02:f9:21:c9:56:28:88:ce:37:0d:e9:e3:06:
         42:4b:d6:7a:cb:3f:0c:18:db:27:e2:fb:02:55:6a:ca:b3:b1:
         1b:b7:36:9c:55:26:40:9a:77:b2:5d:46:39:83:ca:e8:d6:80:
         e3:98:a5:d9:21:93:59:c2:14:5c:0d:16:23:0f:05:29:15:8a:
         e7:7a:d2:9c:23:cd:07:80:07:a2:40:d0:49:fd:bf:e1:68:26:
         ad:98:b2:d0:fd:0a:63:3b:fb:53:f1:c8:b0:b0:c8:1c:31:1e:
         00:2e:0a:ed:f4:4f:e8:a9:9f:d2:51:f4:97:99:5c:14:b1:e0:
         5f:4c:1f:78:77:26:5b:76:06:23:1e:46:a0:ee:63:8e:74:84:
         66:54:31:3b:88:f2:17:90:80:47:ae:7b:57:8c:63:bb:c4:62:
         18:90:d9:c8:85:a3:c5:0c:42:89:f1:87:bf:17:4e:f1:a6:07:
         46:9f:da:44:e5:83:0d:c6:db:55:31:6e:d5:4f:4a:15:8a:22:
         ac:99:3c:5f:7a:42:e3:96:e5:7d:aa:d9:48:f7:e0:e4:76:77:
         6a:41:ab:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 01:44:36 2022 by LibreSSL & rpki-client.