RPKI Certificate
Location:                 ./rsync/ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer (download)

Subject key identifier:   58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Manifest:                 ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.mft
CA Repository:            ca.rg.net/rpki/RGnet-OU/ovsCA/
Notification URL:         https://ca.rg.net/rrdp/notify.xml
Subordinate resources:
    1: IP: 45.132.188.0/22
    2: IP: 147.28.2.0--147.28.6.255
    3: IP: 147.28.8.0/21

--
$ openssl x509 -text -inform DER -in ./rsync/ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42411 (0xa5ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
        Validity
            Not Before: Oct  1 01:25:41 2021 GMT
            Not After : Oct  1 01:01:02 2022 GMT
        Subject: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:13:70:22:06:1c:65:d1:ad:f3:d4:c3:28:84:
                    aa:f9:15:11:b5:ad:0f:fa:65:cb:1b:74:b8:c1:d9:
                    fc:2f:10:5e:70:ee:4d:7d:52:f1:85:0f:c4:a5:ab:
                    68:13:0d:65:4c:af:1e:35:d2:1a:cd:8b:29:df:68:
                    d4:db:55:5c:3a:35:b8:5b:c0:32:c9:cf:c0:d1:f5:
                    4c:d5:4d:53:f6:e0:ad:9c:a8:38:a4:f7:66:d8:80:
                    ac:29:68:a1:fd:09:bd:03:90:f1:c8:b5:8e:07:94:
                    e2:c1:4a:35:c9:48:54:cf:33:2d:0f:81:71:b4:c4:
                    d9:f0:8a:f7:38:b4:c1:f1:e8:84:40:f4:02:10:d0:
                    a6:80:7d:ad:9a:17:4b:03:db:bc:b0:46:e7:66:63:
                    89:54:f4:96:a8:19:74:91:4c:a0:5c:70:cc:f5:f3:
                    79:d7:68:ee:f5:af:41:7e:e7:74:c6:bf:c6:83:61:
                    48:68:1d:c7:af:1e:49:2d:94:45:09:3e:52:ae:f3:
                    fe:af:a3:98:de:50:48:ec:27:55:10:03:80:59:b3:
                    5d:10:62:4c:b0:7f:3b:bb:7c:c4:18:4c:af:8c:87:
                    01:1f:86:09:87:04:7d:1a:6c:12:66:0d:04:bf:fd:
                    d6:69:62:56:91:b4:40:10:ad:20:cc:b5:88:de:08:
                    fc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
            X509v3 Authority Key Identifier: 
                keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access: 
                CA Repository - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/
                RPKI Manifest - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.mft
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.188.0/22
                  147.28.2.0-147.28.6.255
                  147.28.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         93:f5:f7:e8:22:4f:11:f6:1a:02:b5:e9:a6:9b:2b:03:dc:24:
         53:f2:94:09:85:29:3a:39:07:1f:6e:62:2e:24:6a:df:ac:01:
         82:8a:1d:9b:8b:1f:cd:9b:fc:07:e9:75:61:fb:18:f5:c9:fa:
         83:5f:0c:27:2b:37:24:9f:8c:af:a0:5d:8f:73:32:2c:1c:c4:
         74:b6:02:d8:ac:75:41:46:6d:a5:6d:03:ec:6e:f9:ad:53:d7:
         09:58:55:de:5a:3d:13:f2:58:3e:38:f1:e6:7a:3f:18:54:ad:
         5b:12:47:cd:f9:46:97:13:d9:80:68:c4:85:99:ed:54:7b:02:
         bb:e1:44:b7:83:74:ea:05:21:9a:7a:d4:1a:81:9b:c8:be:4a:
         6a:0e:ce:50:a9:45:27:12:db:7d:ab:d0:08:a5:45:30:aa:f4:
         5f:2f:d3:b3:47:32:cd:f7:a8:09:a7:0e:e1:31:b1:4f:2e:ca:
         a0:3f:39:b2:c3:90:05:63:76:35:d8:5e:3d:c4:92:f7:5f:6b:
         b2:a9:68:74:b5:3d:1c:38:27:f3:61:33:68:8b:15:ef:1b:33:
         03:f3:51:73:cd:64:08:23:58:5f:91:e1:a7:44:b5:4a:aa:58:
         ae:7e:9b:3b:54:1c:a0:13:7a:37:7f:aa:ee:05:65:fd:42:e4:
         63:57:50:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Oct 1 04:25:24 2021 by LibreSSL & rpki-client.