RPKI Certificate
Location: rpki.ripe.net/repository/DEFAULT/1yW1DPaSA2dKLZoD6o-a4Cw6huM.cer (download)

Subject key identifier:   D7:25:B5:0C:F6:92:03:67:4A:2D:9A:03:EA:8F:9A:E0:2C:3A:86:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/c3/f99972-c432-4920-9073-f1d5d0faeafa/1/1yW1DPaSA2dKLZoD6o-a4Cw6huM.mft
Subordinate resources:
    1: IP: 45.87.152.0/22
    2: IP: 2a00:9680::/29

--
$ openssl x509 -text -inform DER -in rpki.ripe.net/repository/DEFAULT/1yW1DPaSA2dKLZoD6o-a4Cw6huM.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557330776640 (0x81c380c240)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:39:54 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d725b50cf69203674a2d9a03ea8f9ae02c3a86e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0d:50:8a:a4:e4:2b:2d:ce:b4:ad:94:82:41:
                    84:5b:b0:55:61:0b:e1:b2:c6:de:51:fd:d2:15:f8:
                    33:13:ab:98:49:6a:e9:08:74:f4:05:2a:d6:4c:58:
                    fb:72:ac:68:88:82:95:62:e0:29:85:b7:88:76:44:
                    a7:57:9b:cb:a2:93:a3:08:c0:1c:05:9b:8f:92:77:
                    ac:44:94:52:bf:de:7a:49:7a:e7:ef:da:e5:4d:e9:
                    55:ef:bf:a2:84:9a:32:84:44:c9:03:30:4c:b7:00:
                    a5:74:ba:47:40:66:f3:a2:1b:f6:87:88:ec:fa:4e:
                    98:67:d5:64:e9:02:43:e6:4a:a9:69:7e:f9:e0:f2:
                    89:34:19:91:c3:7c:de:2a:80:ff:61:61:75:6d:4e:
                    01:37:26:b7:46:4a:96:05:e9:97:82:13:b4:28:c9:
                    72:9f:d2:4f:7a:4d:07:a5:0c:0a:21:6e:16:94:51:
                    1e:cb:d8:76:71:ae:25:d3:ef:03:75:53:5f:ea:58:
                    c2:3b:97:c5:57:d1:c7:34:91:7d:8d:fb:7d:b2:ad:
                    11:be:fc:cc:3a:8b:48:71:48:b1:24:f5:ab:0f:5f:
                    2f:e9:bd:dd:87:69:31:7f:ab:fe:89:12:da:90:29:
                    b2:0d:01:b1:d3:59:87:5f:bf:20:f8:8f:f8:8f:58:
                    10:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f99972-c432-4920-9073-f1d5d0faeafa/1/
                1.3.6.1.5.5.7.48.10 - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f99972-c432-4920-9073-f1d5d0faeafa/1/1yW1DPaSA2dKLZoD6o-a4Cw6huM.mft
                1.3.6.1.5.5.7.48.13 - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                0.0.....0....-W.0
....0....*...
    Signature Algorithm: sha256WithRSAEncryption
         15:9d:66:01:59:21:df:23:3f:ef:f8:cc:66:31:21:f3:f7:16:
         f4:7f:80:e4:a1:83:ff:17:d3:42:8c:d4:c6:12:48:11:74:87:
         11:0b:da:4e:da:ef:68:e3:1d:a0:0f:ed:16:9d:a3:b2:91:24:
         e2:40:f1:0f:5f:dd:f3:33:d1:09:4c:c5:d1:66:9d:47:08:0c:
         b4:96:75:c5:74:2f:6b:70:67:10:2a:ae:87:a2:69:4d:f7:9c:
         ef:e7:ef:0e:07:65:ff:b2:40:e6:ca:c9:88:30:e2:50:ed:e5:
         d2:ad:e3:90:a1:22:bb:2d:39:b4:8a:52:e7:13:71:42:60:c9:
         2b:db:31:58:03:e2:95:5d:e8:b1:9c:30:68:58:cb:dc:5c:71:
         ac:e7:af:74:ad:2d:d2:91:4d:0c:2b:c1:32:34:51:b8:89:80:
         6e:9c:03:93:f6:f4:48:d1:cd:a3:b9:7f:6a:65:76:a4:f4:66:
         9b:68:fc:51:f6:d8:68:09:3f:ef:37:ed:ea:2a:9f:8d:8a:c8:
         c1:5d:cf:fa:63:9e:c3:22:0b:76:7f:10:f5:4a:49:28:b4:dc:
         ef:48:a9:7b:1f:eb:9a:af:ab:e6:38:d3:9f:f7:3a:47:4d:c1:
         60:89:a7:00:0c:d6:f5:48:14:75:99:a0:3a:e8:76:48:2d:7e:
         92:5b:bf:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Mar 3 04:11:17 2021 by LibreSSL & rpki-client.