RPKI Certificate
Location: rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer (download)

Subject key identifier:   6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
Subordinate resources:
    1: AS: 3130
    2: AS: 3927
    3: AS: 3970
    4: AS: 4128
    1: IP: 45.132.188.0/22
    2: IP: 147.28.0.0/20
    3: IP: 147.28.48.0/20
    4: IP: 147.28.96.0/19
    5: IP: 192.83.230.0/24
    6: IP: 198.133.206.0/24
    7: IP: 198.180.150.0--198.180.153.255

--
$ openssl x509 -text -inform DER -in rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504174384140 (0x756322940c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:04:29 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:13:f3:7a:84:e2:22:56:f9:b4:8c:cc:c2:7a:
                    4d:35:5a:9d:ef:29:11:b9:23:38:b9:7b:9d:9a:ca:
                    6c:bf:83:e9:17:f5:68:53:d6:49:8e:aa:28:6b:fe:
                    0f:a1:ca:5b:67:9d:92:bb:51:8d:9e:09:d1:ec:2d:
                    2e:37:f6:34:a0:f3:a3:d2:a8:57:18:75:ea:81:74:
                    37:8b:02:0d:67:aa:71:13:8f:a1:65:59:47:15:24:
                    ad:13:be:9e:7e:75:2a:46:9d:50:e5:35:b8:b8:33:
                    da:70:c1:ad:81:37:f5:95:c2:7a:af:be:bb:bb:e6:
                    59:e8:c3:55:15:15:ba:4e:96:4d:69:76:80:57:cf:
                    c1:03:54:46:60:81:a0:f4:f6:1f:80:9a:84:a9:27:
                    62:a8:ba:17:67:42:f2:04:c8:75:70:57:48:e6:a0:
                    dd:58:55:ae:c5:40:c8:9a:b1:5d:78:7b:8b:d8:8e:
                    8e:c5:3d:fa:e7:a8:4f:82:8a:0d:56:4e:ce:f3:a5:
                    20:24:75:1d:47:2f:0a:35:14:ec:eb:e9:ff:24:e2:
                    40:a4:2e:df:fe:5e:9b:fd:99:e1:51:f0:1e:8f:cd:
                    7e:1f:73:a1:e7:48:2d:9c:ae:55:ac:5c:7b:77:6d:
                    f7:88:fd:11:a8:b2:6e:20:20:1d:ee:b7:36:4d:85:
                    4e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://ca.rg.net/rpki/RGnet-OU/
                1.3.6.1.5.5.7.48.10 - URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
                1.3.6.1.5.5.7.48.13 - URI:https://ca.rg.net/rrdp/notify.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                0:08....02...-.............0.....`....S.......0.............
            sbgp-autonomousSysNum: critical
                0...0....:...W....... 
    Signature Algorithm: sha256WithRSAEncryption
         64:64:18:f6:24:5c:06:dd:98:2e:17:01:e0:70:d4:37:3f:4d:
         94:62:1b:19:d0:32:dc:ec:c0:89:b9:42:03:64:21:f6:04:73:
         53:06:7a:28:cf:e0:76:b2:68:92:1e:4e:ef:c0:d9:3c:f9:a4:
         45:e8:6a:ca:3d:b1:86:c1:dc:c5:98:5c:07:f1:48:1d:3e:b9:
         e1:1d:c4:a9:42:2c:69:ce:93:a6:3d:5e:cf:08:71:4f:b9:13:
         70:99:39:1e:fa:85:0a:0b:9b:42:42:d7:be:65:b3:59:23:7b:
         8f:b4:5f:46:fc:7f:7e:6f:87:87:2e:27:8a:97:8c:94:94:8e:
         90:43:57:7d:a1:f4:b9:1c:ae:48:8e:6a:eb:ff:51:60:34:85:
         e8:22:13:cb:5d:26:35:cd:45:ea:91:43:79:af:2f:43:33:d0:
         e9:93:80:e0:3e:b7:32:06:47:e6:97:40:80:5f:ce:f4:5c:01:
         6e:62:c6:c3:14:62:51:1f:cf:97:94:22:63:b7:76:ef:fa:21:
         e3:33:4b:97:c0:2f:b0:29:45:05:87:e5:11:4d:26:4e:cf:ad:
         d6:c0:d6:64:44:e0:a4:0a:e4:9a:4d:ff:f5:9d:bd:77:36:5b:
         80:85:0c:25:fa:8a:6a:46:88:2b:c1:9f:6e:5a:8e:b9:5d:ca:
         d4:59:79:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Mar 3 04:31:42 2021 by LibreSSL & rpki-client.