RPKI Certificate
Location:                 rsync/ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer (download)

Subject key identifier:   58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Manifest:                 ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.mft
CA Repository:            ca.rg.net/rpki/RGnet-OU/ovsCA/
Notification URL:         https://ca.rg.net/rrdp/notify.xml
Subordinate resources:
    1: IP: 45.132.188.0/22
    2: IP: 147.28.2.0--147.28.6.255
    3: IP: 147.28.8.0/21

--
$ openssl x509 -text -inform DER -in rsync/ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38008 (0x9478)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
        Validity
            Not Before: Jul  1 01:29:09 2021 GMT
            Not After : Jul  1 01:01:02 2022 GMT
        Subject: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:13:70:22:06:1c:65:d1:ad:f3:d4:c3:28:84:
                    aa:f9:15:11:b5:ad:0f:fa:65:cb:1b:74:b8:c1:d9:
                    fc:2f:10:5e:70:ee:4d:7d:52:f1:85:0f:c4:a5:ab:
                    68:13:0d:65:4c:af:1e:35:d2:1a:cd:8b:29:df:68:
                    d4:db:55:5c:3a:35:b8:5b:c0:32:c9:cf:c0:d1:f5:
                    4c:d5:4d:53:f6:e0:ad:9c:a8:38:a4:f7:66:d8:80:
                    ac:29:68:a1:fd:09:bd:03:90:f1:c8:b5:8e:07:94:
                    e2:c1:4a:35:c9:48:54:cf:33:2d:0f:81:71:b4:c4:
                    d9:f0:8a:f7:38:b4:c1:f1:e8:84:40:f4:02:10:d0:
                    a6:80:7d:ad:9a:17:4b:03:db:bc:b0:46:e7:66:63:
                    89:54:f4:96:a8:19:74:91:4c:a0:5c:70:cc:f5:f3:
                    79:d7:68:ee:f5:af:41:7e:e7:74:c6:bf:c6:83:61:
                    48:68:1d:c7:af:1e:49:2d:94:45:09:3e:52:ae:f3:
                    fe:af:a3:98:de:50:48:ec:27:55:10:03:80:59:b3:
                    5d:10:62:4c:b0:7f:3b:bb:7c:c4:18:4c:af:8c:87:
                    01:1f:86:09:87:04:7d:1a:6c:12:66:0d:04:bf:fd:
                    d6:69:62:56:91:b4:40:10:ad:20:cc:b5:88:de:08:
                    fc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
            X509v3 Authority Key Identifier: 
                keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access: 
                CA Repository - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/
                RPKI Manifest - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.mft
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                0"0 ....0....-..0...................
    Signature Algorithm: sha256WithRSAEncryption
         c6:5b:49:82:ad:3f:86:a0:9c:d2:16:28:27:d7:f6:9d:15:05:
         da:67:c4:bc:d3:8f:0f:85:1e:e5:02:0e:56:28:9b:03:13:ce:
         2d:cc:f8:85:ab:19:ad:6f:5e:5c:33:1b:91:72:12:e6:fc:42:
         7f:1b:b2:40:eb:95:6f:5a:b2:90:60:e3:74:7c:aa:3a:43:c7:
         de:20:56:77:53:fd:eb:b5:0c:62:17:55:5a:91:30:94:3f:37:
         fd:12:95:42:b1:98:b9:c5:11:16:f5:86:f6:0f:f6:52:fc:7d:
         54:25:b7:76:97:d4:44:95:80:3a:27:97:c4:e4:03:11:05:06:
         60:57:bd:1a:df:5a:b3:3d:cf:11:05:1e:69:03:0c:b9:7f:e3:
         2a:02:2a:53:df:54:25:5f:96:2a:89:5a:80:15:1c:7c:76:58:
         0d:af:9f:b4:9f:f9:96:89:41:01:ff:71:93:4f:0d:3c:eb:88:
         57:4e:36:aa:12:42:10:96:b8:cf:a1:43:bd:bd:c1:30:74:16:
         b0:1a:a4:7e:3a:b3:b2:6f:99:c6:75:52:7a:29:41:87:87:8c:
         f3:4c:9f:fd:18:12:0d:31:e5:78:c2:99:9a:c5:a3:c5:bd:a0:
         a0:46:9f:e5:91:73:18:33:77:9c:16:b9:b3:92:a0:3c:68:52:
         ff:54:3b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jul 27 14:46:45 2021 by LibreSSL & rpki-client.