RPKI Certificate
Location:                 rpki.ripe.net/repository/DEFAULT/WM4ypXvUFp5b3bSYqlUH74NOR3I.cer (download)

Subject key identifier:   58:CE:32:A5:7B:D4:16:9E:5B:DD:B4:98:AA:55:07:EF:83:4E:47:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/d2/5e4f7a-0a1c-4f07-b2da-673de700f112/1/WM4ypXvUFp5b3bSYqlUH74NOR3I.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/d2/5e4f7a-0a1c-4f07-b2da-673de700f112/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: IP: 195.64.119.0/24

--
$ openssl x509 -text -inform DER -in rpki.ripe.net/repository/DEFAULT/WM4ypXvUFp5b3bSYqlUH74NOR3I.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 749639025527 (0xae89f7c377)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 11 23:53:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=58ce32a57bd4169e5bddb498aa5507ef834e4772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a4:c4:b0:a8:da:38:08:b4:94:e9:4b:9b:cb:
                    e4:d0:df:ea:e8:48:35:56:6c:19:70:94:21:d8:46:
                    93:0c:5d:27:84:7e:d8:a3:e8:93:a5:04:f0:59:e0:
                    29:59:d3:76:6b:e6:f0:62:b3:5a:f6:fa:e4:41:35:
                    57:f0:d3:67:5d:a7:6f:76:d1:28:26:5f:4a:cb:1c:
                    29:51:ba:36:39:7d:9a:90:2d:23:e7:64:95:3a:ee:
                    f0:73:a4:62:2f:51:79:bf:ae:37:2e:12:73:d6:51:
                    06:3f:9e:bf:9f:2e:38:e3:3f:85:76:ea:a5:9e:a9:
                    04:ee:d6:43:bd:8d:b5:3f:65:47:6d:ba:57:84:22:
                    3e:26:fb:1e:f8:81:40:c3:7a:43:cf:dc:91:71:68:
                    01:55:a4:54:bd:f2:1a:71:09:5b:65:c3:d6:e6:5b:
                    ef:6c:e1:d4:62:50:6c:e1:1d:df:76:3b:00:94:65:
                    3c:01:9a:09:fb:bb:e6:4a:b1:17:2a:17:5b:7c:4b:
                    4c:55:13:c9:1f:d9:ec:5b:fb:24:4e:78:7f:8d:5f:
                    48:e0:62:7b:3a:a6:5e:d8:a8:43:9c:fa:8a:8d:14:
                    da:54:6c:b5:cb:f7:b4:5c:2d:d6:a1:0f:a5:aa:b1:
                    88:07:7a:62:a3:80:e1:68:8f:cc:31:a5:d4:52:2d:
                    6b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                58:CE:32:A5:7B:D4:16:9E:5B:DD:B4:98:AA:55:07:EF:83:4E:47:72
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5e4f7a-0a1c-4f07-b2da-673de700f112/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5e4f7a-0a1c-4f07-b2da-673de700f112/1/WM4ypXvUFp5b3bSYqlUH74NOR3I.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.64.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:d1:ba:cd:38:80:4f:79:8e:e7:85:0d:86:a0:d1:8e:81:e7:
         f9:f9:fe:e4:fd:13:09:21:37:e5:74:51:21:f4:24:dd:4a:52:
         45:28:3c:60:fb:e9:ac:f8:24:71:11:b0:0f:fd:69:37:1e:10:
         62:b7:cb:dc:7b:51:cc:ba:53:e0:97:2d:55:79:64:ec:6b:d0:
         33:e0:09:01:07:fa:40:cd:43:87:f4:97:dd:53:8c:12:29:c6:
         60:c3:46:b9:c9:6b:b8:15:d0:db:81:71:91:db:7b:f6:73:79:
         d3:85:ca:0c:13:f2:9c:4f:4f:73:a0:e6:ee:54:ca:ae:f1:e9:
         8e:ef:f0:07:4b:95:a9:a9:88:cf:e6:3c:14:8a:72:07:b1:b1:
         37:a3:6b:e6:a5:50:6b:37:16:3d:ad:16:f5:97:b8:d3:04:f2:
         60:1b:73:ae:51:51:57:0e:76:f7:8b:c7:1b:5b:20:13:3e:79:
         64:ca:6b:74:ca:31:f7:c3:07:86:3a:33:e3:0b:24:68:c6:4f:
         a6:ac:f8:ee:79:a5:32:92:c8:65:89:39:e8:60:fa:3f:94:dd:
         b8:ab:14:d1:53:fc:16:d9:9b:73:be:8d:df:3f:9c:0d:d3:39:
         f0:a4:90:b6:fc:a5:16:4b:c5:ef:87:34:45:e6:92:7b:60:d6:
         ea:a6:20:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Mar 12 03:53:23 2022 by LibreSSL & rpki-client.