RPKI Certificate
Location: rpki.ripe.net/repository/DEFAULT/52pNP0ug326jEQNuvBSmLnh1wyE.cer (download)

Subject key identifier:   E7:6A:4D:3F:4B:A0:DF:6E:A3:11:03:6E:BC:14:A6:2E:78:75:C3:21
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/20/dbc44e-9144-4bf9-b0f3-70f167d5c937/1/52pNP0ug326jEQNuvBSmLnh1wyE.mft
Subordinate resources:
    1: IP: 45.151.160.0/22
    2: IP: 2a0f:3f00::/29

--
$ openssl x509 -text -inform DER -in rpki.ripe.net/repository/DEFAULT/52pNP0ug326jEQNuvBSmLnh1wyE.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 566965903234 (0x8401cd1f82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:34:36 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e76a4d3f4ba0df6ea311036ebc14a62e7875c321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:80:2e:72:0f:70:7b:84:4b:2e:74:c4:52:4f:
                    0c:49:59:e9:52:9d:bb:9a:fa:85:9d:fb:d6:4a:6b:
                    c2:d2:fb:e1:d8:03:08:f8:58:88:b1:e9:38:8b:0b:
                    fe:59:ad:4e:3f:40:bd:45:3e:35:67:cc:1d:56:94:
                    a4:23:2a:09:25:81:2e:9a:ec:6c:01:40:c3:b8:ea:
                    b2:03:0b:f3:12:fd:cd:26:fd:19:3e:9a:8d:8e:69:
                    53:aa:04:13:7e:b5:16:cc:05:19:cf:59:6f:9a:8b:
                    dd:d6:1f:53:1c:82:dd:34:39:b0:94:13:66:cb:9f:
                    e8:59:38:96:3e:bc:62:68:13:42:bf:6b:96:2e:fc:
                    d5:ca:96:25:da:d7:a3:4d:42:78:2d:13:58:08:9c:
                    25:cc:3d:41:b1:7c:fc:e9:33:90:38:62:d2:48:cd:
                    20:74:ba:a9:ae:1c:23:85:90:aa:94:19:2b:b0:ea:
                    8d:e0:8b:54:3e:c7:17:e8:a1:a4:87:d0:b5:4f:8d:
                    e4:54:97:7b:ac:bf:09:38:47:70:f7:c5:84:28:22:
                    df:b3:43:47:66:0c:a8:14:91:2a:7e:83:71:de:53:
                    b8:ee:01:cb:64:82:b9:95:ce:1f:ab:f1:98:cd:4c:
                    36:28:c5:28:e3:e5:cf:0e:75:2f:06:e0:77:32:b4:
                    fc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/dbc44e-9144-4bf9-b0f3-70f167d5c937/1/
                1.3.6.1.5.5.7.48.10 - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/dbc44e-9144-4bf9-b0f3-70f167d5c937/1/52pNP0ug326jEQNuvBSmLnh1wyE.mft
                1.3.6.1.5.5.7.48.13 - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                0.0.....0....-..0
....0....*.?.
    Signature Algorithm: sha256WithRSAEncryption
         07:3e:23:13:38:a6:86:16:83:19:a1:09:31:63:d3:80:c5:33:
         50:b0:4c:41:60:c1:2d:34:4d:95:b4:52:81:81:10:d5:7e:96:
         fb:aa:cb:b1:da:a2:2b:08:0a:03:6a:d0:df:9d:15:c0:06:3a:
         1d:7e:ee:46:92:75:57:50:4b:2e:c7:a1:61:a3:ef:dc:4a:da:
         af:71:ba:5d:da:f3:06:52:be:11:79:cf:13:ea:45:44:99:0f:
         76:1d:42:6b:3d:0b:73:f1:0c:59:4e:d5:eb:a0:b5:5f:24:d5:
         2b:0a:8f:5a:df:3e:69:73:57:9b:fe:2e:e0:75:95:72:b1:19:
         06:70:ce:bb:08:69:6e:7c:0c:ae:be:25:ca:82:7e:9e:d3:e6:
         7e:a1:38:90:68:f2:c4:32:79:d5:b2:2b:77:15:57:2b:9e:e5:
         3b:1e:b7:01:1a:5c:e8:8b:f5:08:4b:51:ea:f0:79:c2:90:70:
         f1:8f:22:e6:ae:a8:c0:92:04:a3:1e:8b:d5:86:8e:a6:09:48:
         4d:c7:7b:92:19:9c:5d:53:3b:73:50:8d:4c:39:04:d6:92:b8:
         c4:11:24:3a:eb:24:48:b2:d2:8f:7e:a9:e8:d1:21:31:05:e1:
         1a:99:16:60:98:2a:26:aa:d0:ba:0d:d9:f2:a3:41:3e:1f:ea:
         ae:79:cc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Mar 3 04:25:01 2021 by LibreSSL & rpki-client.