RPKI Certificate
Location: rpki.ripe.net/repository/DEFAULT/1-POT_Ccl0kYLaiuYF0bUdjQL4G0.cer (download)

Subject key identifier:   F8:F3:93:FC:27:25:D2:46:0B:6A:2B:98:17:46:D4:76:34:0B:E0:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/98/2d168b-7fcc-45fb-aa3e-b6adfd604855/1/1-POT_Ccl0kYLaiuYF0bUdjQL4G0.mft
Subordinate resources:
    1: IP: 185.34.220.0/22
    2: IP: 185.78.164.0/22
    3: IP: 185.82.88.0/22
    4: IP: 212.80.212.0/22
    5: IP: 2a04:6280::/29
    6: IP: 2a09:5800::/29

--
$ openssl x509 -text -inform DER -in rpki.ripe.net/repository/DEFAULT/1-POT_Ccl0kYLaiuYF0bUdjQL4G0.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 546110855562 (0x7f26be598a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:10:17 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f8f393fc2725d2460b6a2b981746d476340be06d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6e:56:be:f8:9b:93:42:7d:a2:56:80:4c:00:
                    a4:7f:8a:a2:aa:ec:7c:cb:43:6c:7e:11:6c:55:26:
                    5e:12:70:08:b4:30:17:19:1d:23:ae:17:c7:1a:d9:
                    b2:87:6d:a2:b6:56:aa:58:7d:e2:8e:69:db:1f:0f:
                    e9:2f:11:2b:89:65:2e:bb:96:d6:a8:14:9f:a9:52:
                    8a:9c:14:e6:61:cb:ce:ec:52:3a:71:b4:51:d0:e8:
                    f8:7e:97:bf:4f:43:fa:52:07:f9:7a:f2:83:82:c6:
                    55:14:a7:0b:7c:45:e3:1b:bf:e1:82:62:9f:eb:10:
                    ba:8b:52:c3:cd:1f:ac:63:fa:3e:be:cd:83:21:ae:
                    08:b0:78:27:96:58:50:d0:b3:8a:91:31:01:83:2e:
                    10:25:b3:d4:f1:24:c5:e5:e1:ea:5e:bc:3f:ab:35:
                    b3:6f:b8:29:7f:09:96:4d:cd:ef:9e:9c:ef:ad:30:
                    5e:bb:d9:21:df:fe:f9:0a:82:dc:bf:2d:10:52:73:
                    87:f0:97:d5:a0:de:14:07:7c:f0:1f:ea:5e:89:5c:
                    ee:65:77:d7:eb:b0:94:30:8e:d1:23:e1:8c:ca:e2:
                    29:e6:a4:6d:96:36:b9:c2:74:19:52:04:61:71:83:
                    2c:8d:bc:97:a9:61:38:09:f5:44:6a:f0:cd:b8:9c:
                    db:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/2d168b-7fcc-45fb-aa3e-b6adfd604855/1/
                1.3.6.1.5.5.7.48.10 - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/2d168b-7fcc-45fb-aa3e-b6adfd604855/1/1-POT_Ccl0kYLaiuYF0bUdjQL4G0.mft
                1.3.6.1.5.5.7.48.13 - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                060.....0.....".....N.....RX....P.0.....0....*.b....*.X.
    Signature Algorithm: sha256WithRSAEncryption
         87:37:a2:eb:0f:a1:35:0c:5d:ef:74:15:7a:a2:4f:9d:93:23:
         89:38:18:da:d2:02:46:c6:95:03:45:da:00:8a:3a:51:37:fa:
         87:e0:59:1a:12:8d:5a:ed:95:f7:40:54:d7:61:4f:fd:59:96:
         3f:c3:da:23:51:d8:d8:97:81:16:bf:63:d8:be:e8:67:83:4d:
         e2:16:a4:5d:0b:6f:e7:f9:12:55:23:38:51:f7:4c:4d:d5:da:
         fd:cc:90:9e:b3:68:f8:6a:d8:f6:8e:72:22:0e:ed:61:4e:76:
         1b:36:c7:ab:4d:3c:05:e3:8e:6b:1c:83:82:5b:d2:ff:d6:ec:
         2e:f1:e9:92:9a:0d:a8:34:a6:21:6e:fe:dd:65:2b:72:4d:d0:
         81:c8:b8:ce:59:8c:68:b5:92:4f:00:5d:b0:75:91:af:7f:8d:
         bf:df:8a:8f:78:36:02:13:d9:a9:65:1b:34:52:c1:f5:1d:02:
         83:41:bd:84:f6:4f:07:87:e0:46:18:37:61:1a:bc:5a:fb:9d:
         d5:b0:40:a8:c9:fc:64:c7:7f:ba:9e:1b:38:67:40:92:30:88:
         d3:9f:5d:d3:08:94:32:27:4b:9a:c4:b0:97:f6:c7:b5:d1:c6:
         06:d4:72:41:f7:06:f0:43:6a:95:a2:72:0a:c1:7b:f6:45:c8:
         78:c1:9c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Mar 3 04:03:59 2021 by LibreSSL & rpki-client.