RPKI Certificate
Location: rpki.ripe.net/repository/DEFAULT/8rkzE0O7MVlvhU8Kw7x8ZOv6cNo.cer (download)

Subject key identifier:   F2:B9:33:13:43:BB:31:59:6F:85:4F:0A:C3:BC:7C:64:EB:FA:70:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/d8/7e8085-00b2-43a0-9bb4-b33d22076885/1/8rkzE0O7MVlvhU8Kw7x8ZOv6cNo.mft
Subordinate resources:
    1: IP: 192.166.252.0/24
    2: IP: 192.172.232.0/24
    3: IP: 192.188.248.0/24
    4: IP: 192.207.14.0/24

--
$ openssl x509 -text -inform DER -in rpki.ripe.net/repository/DEFAULT/8rkzE0O7MVlvhU8Kw7x8ZOv6cNo.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 575378822639 (0x85f74015ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 31 17:08:25 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f2b9331343bb31596f854f0ac3bc7c64ebfa70da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3d:7e:0c:6c:c6:4e:75:43:48:39:30:22:4d:
                    e4:8b:b0:8d:aa:38:a3:8f:85:d0:5b:da:52:b2:3a:
                    f2:78:49:71:43:0a:cc:f7:5c:28:e8:0c:2b:f7:a4:
                    f0:8d:48:ee:ba:0e:10:89:58:a2:29:cc:0e:76:75:
                    0b:cd:43:c5:b6:d9:bc:c0:80:c2:d4:15:52:23:18:
                    a3:cf:49:4b:e8:be:e2:76:d3:07:e5:89:4a:5a:18:
                    92:d5:52:51:c6:3e:8f:cd:04:bf:bf:90:11:79:f8:
                    6d:90:27:ab:1d:5b:53:7e:20:7c:ed:af:74:a1:8f:
                    50:d6:fc:06:56:54:3e:8c:5f:53:7d:a7:e7:7b:b4:
                    0b:8b:fe:50:0a:01:a4:7c:e1:ec:89:14:5e:96:fa:
                    38:6c:bd:2f:70:5d:64:b0:bd:48:1b:be:c1:63:2b:
                    d3:4d:6a:50:59:7f:c0:52:58:36:5b:8e:da:5c:03:
                    a7:71:18:e7:ac:8c:5b:fd:5b:e1:ea:51:cd:58:45:
                    34:de:82:1a:e7:d3:15:b5:22:fd:dd:c7:0f:69:24:
                    5f:ee:07:5c:55:b1:69:2f:91:65:b5:8b:f1:eb:79:
                    e7:64:87:b7:fc:f2:c8:d0:90:4b:7a:bb:71:c6:c9:
                    7a:9d:de:44:d4:f4:67:40:76:ce:4e:5a:4d:be:dc:
                    6f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7e8085-00b2-43a0-9bb4-b33d22076885/1/
                1.3.6.1.5.5.7.48.10 - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7e8085-00b2-43a0-9bb4-b33d22076885/1/8rkzE0O7MVlvhU8Kw7x8ZOv6cNo.mft
                1.3.6.1.5.5.7.48.13 - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                0 0.....0.........................
    Signature Algorithm: sha256WithRSAEncryption
         89:62:a5:75:50:06:00:1b:9a:78:9e:ae:6f:d1:3b:17:fd:05:
         1f:5d:85:ae:ee:0d:50:0b:78:af:0c:94:cc:be:86:71:c2:ef:
         a0:75:e6:1a:f1:34:50:70:23:02:69:4e:a3:e7:8c:a4:dd:36:
         d7:65:89:bb:fe:df:ee:66:fa:22:73:07:69:cf:4d:98:10:99:
         f3:46:73:c6:4f:92:1e:83:c5:91:24:44:51:d6:77:8c:c6:c3:
         4b:7c:a8:2c:a4:0b:d0:55:3f:6b:10:30:03:f4:78:9b:68:9a:
         46:db:2d:c1:d1:68:9c:be:8f:49:3a:7c:bc:fb:8b:25:91:1f:
         ce:d3:d0:13:d1:94:36:ce:d6:50:d6:e8:d2:f2:21:69:82:0b:
         81:f5:e4:e8:a7:29:24:5e:40:c6:5f:03:45:95:bb:21:47:08:
         bd:a3:d4:3d:e6:34:91:83:dc:76:9f:b3:5d:9e:79:56:7c:6a:
         fd:61:fc:dd:05:71:19:49:bd:f3:3d:a2:52:2b:79:af:16:15:
         0f:e4:6e:7f:90:69:df:50:15:21:82:12:2f:8e:c3:74:e7:a9:
         29:7d:46:cb:4f:3b:0b:09:8f:60:99:70:c2:3a:9c:1b:27:fa:
         46:90:d8:17:ef:62:12:bf:4c:82:ac:79:58:81:8b:35:7b:62:
         21:58:05:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Mar 3 04:27:59 2021 by LibreSSL & rpki-client.