RPKI Certificate
Location: rpki.ripe.net/repository/DEFAULT/9noZ6C4Je9gjmQWl22By70ACr04.cer (download)

Subject key identifier:   F6:7A:19:E8:2E:09:7B:D8:23:99:05:A5:DB:60:72:EF:40:02:AF:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/9b/2e01cf-488d-4990-ad53-2c4dc711a210/1/9noZ6C4Je9gjmQWl22By70ACr04.mft
Subordinate resources:
    1: IP: 88.218.68.0/22
    2: IP: 2a09:9d80::/29

--
$ openssl x509 -text -inform DER -in rpki.ripe.net/repository/DEFAULT/9noZ6C4Je9gjmQWl22By70ACr04.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 481478331741 (0x701a584d5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct  6 15:18:41 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=f67a19e82e097bd8239905a5db6072ef4002af4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5d:8c:de:99:fe:80:fb:95:53:cd:47:f9:01:
                    4e:3e:ec:f2:e2:67:13:9a:ef:a7:c9:84:ce:a8:eb:
                    13:68:a4:36:5d:46:90:83:92:a8:f0:4b:98:8a:88:
                    d7:e6:bc:91:44:96:d5:0f:30:03:b8:4e:f8:a5:d3:
                    1c:7f:ff:b2:5e:ce:54:8a:1a:2d:ea:63:12:f4:df:
                    5e:19:07:a4:23:dd:f4:f9:00:d7:2d:24:9e:f1:62:
                    a4:50:89:d5:68:48:bf:39:a2:b1:3d:73:5d:fa:06:
                    a8:3f:fa:4b:4f:90:8c:81:f6:8b:1e:6d:63:64:9f:
                    6a:aa:32:62:fa:21:d9:78:6b:28:66:8c:9c:35:c5:
                    bd:9a:2e:f4:94:b5:17:d6:c9:bf:67:d5:41:d7:c6:
                    62:62:02:22:a8:00:77:88:41:43:47:73:45:1b:e6:
                    c0:82:39:80:41:11:2d:6e:b6:ac:30:66:78:ba:64:
                    cc:a5:f7:9c:8a:fe:24:b5:81:b5:a9:0e:3e:0a:ef:
                    b6:20:18:a1:14:7f:66:5a:f3:dc:54:09:de:6e:ba:
                    b0:20:47:1f:49:79:03:c0:fe:1e:64:a3:9c:a8:33:
                    f0:f6:92:29:b5:ff:64:ca:52:20:ab:43:36:86:c7:
                    52:03:40:c2:ab:c7:fe:65:14:30:f3:2a:e2:ac:ae:
                    fe:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2e01cf-488d-4990-ad53-2c4dc711a210/1/
                1.3.6.1.5.5.7.48.10 - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2e01cf-488d-4990-ad53-2c4dc711a210/1/9noZ6C4Je9gjmQWl22By70ACr04.mft
                1.3.6.1.5.5.7.48.13 - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                0.0.....0....X.D0
....0....*...
    Signature Algorithm: sha256WithRSAEncryption
         6b:76:f4:45:56:3e:2b:d9:04:3f:fa:4c:e0:01:1b:1d:99:df:
         ee:d3:88:89:5f:6e:ee:af:72:77:e5:11:21:6f:1b:24:79:c0:
         cb:d4:87:be:56:b1:3b:02:8f:c2:e2:ba:b7:c2:8f:f9:d1:b3:
         8f:6e:1f:bc:84:d1:ee:d0:08:82:ec:23:b8:29:1e:c3:13:16:
         86:90:47:2f:cf:68:23:cf:52:9f:8f:a8:de:57:a8:cc:31:0c:
         f7:7f:12:f4:8d:6c:cf:c7:62:10:97:cf:e3:2a:c8:98:ea:37:
         79:46:94:01:71:b1:ec:70:a1:05:ab:8b:d9:d6:8e:4c:99:0f:
         57:fb:47:b2:3f:8e:f7:5f:79:25:66:4e:88:7f:e1:9f:c0:9e:
         f0:c2:cb:72:00:26:91:f5:1f:ca:da:3d:c7:ea:8d:d8:38:a0:
         09:31:b3:02:63:0e:ff:53:a2:3b:c5:07:25:d0:3a:f4:68:b5:
         f5:e7:aa:f9:61:3d:76:8a:bd:82:2d:04:97:ce:41:6d:56:f8:
         57:21:d4:47:d7:2c:e0:58:33:02:1b:45:87:e5:d1:bb:df:1c:
         a0:d4:80:86:a2:9b:b4:85:61:76:d5:38:78:7b:66:51:91:25:
         12:54:32:f8:91:fb:9f:f7:75:56:44:f2:48:fa:6f:ea:64:aa:
         ad:f3:ff:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Thu Dec 17 13:36:56 2020 by LibreSSL & rpki-client.