RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer (download)

Subject key identifier:   D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: AS: 31639
    2: AS: 48403
    3: AS: 58003
    1: IP: 31.217.192.0/21
    2: IP: 37.233.88.0/21
    3: IP: 79.171.232.0/21
    4: IP: 84.234.64.0/20
    5: IP: 94.199.56.0/21
    6: IP: 109.106.8.0/22
    7: IP: 185.28.244.0/22
    8: IP: 185.163.152.0/22
    9: IP: 185.168.204.0/22
    10: IP: 185.179.116.0/22
    11: IP: 2001:67c:14c0::/48
    12: IP: 2a00:9560::/29
    13: IP: 2a09:5600::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 715036028362 (0xa67b77edca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:02:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d03046d16cfc391b028b88743773ce005cf97b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:98:d6:d6:84:a2:ea:ec:6e:74:4c:8a:da:8e:
                    8c:26:37:29:71:b0:d5:20:fe:2b:ca:01:f4:6e:2f:
                    f7:95:ce:8b:e6:3a:b2:b8:76:22:6a:19:7d:03:06:
                    b9:0e:9a:33:9e:f5:22:0b:ed:0b:ee:88:b1:1c:98:
                    43:8b:8e:0d:09:f5:9e:bc:3b:ce:d9:0b:dc:bd:3a:
                    04:d3:ee:62:ac:22:8a:89:b9:c0:4d:4a:e6:73:cc:
                    a8:c4:7e:a6:d8:69:3b:c7:3d:52:58:f7:c6:80:b4:
                    82:28:ca:72:72:92:84:72:8e:9d:8a:4c:fa:0f:c0:
                    55:fc:c1:f5:b4:6f:f5:5c:e1:b1:e4:4c:d9:a2:26:
                    67:4a:c4:17:e6:32:49:57:c3:dc:91:4e:56:a0:db:
                    15:1f:66:a1:a3:a9:17:b8:57:73:7b:23:47:9f:94:
                    3e:bc:23:53:31:03:d1:67:83:c4:77:71:ef:ab:e4:
                    6c:c3:0f:e4:cb:f3:29:19:5c:8b:5c:dc:ca:be:f2:
                    b3:1d:8e:98:bc:1c:3f:e1:46:95:78:8a:9f:29:2e:
                    8f:48:59:52:84:df:7f:71:e8:06:fe:e9:da:29:de:
                    45:d0:06:7d:ce:8e:2d:82:35:7f:16:d6:81:74:d1:
                    b8:57:49:50:a9:8c:02:37:ee:03:af:f1:83:f1:cf:
                    1e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.217.192.0/21
                  37.233.88.0/21
                  79.171.232.0/21
                  84.234.64.0/20
                  94.199.56.0/21
                  109.106.8.0/22
                  185.28.244.0/22
                  185.163.152.0/22
                  185.168.204.0/22
                  185.179.116.0/22
                IPv6:
                  2001:67c:14c0::/48
                  2a00:9560::/29
                  2a09:5600::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31639
                  48403
                  58003

    Signature Algorithm: sha256WithRSAEncryption
         6f:04:27:ca:0a:09:c8:2d:96:be:6f:25:75:ce:a9:30:1c:7b:
         60:66:ab:fb:ef:14:f7:c5:f5:ca:b7:a1:c4:a3:ae:5f:bb:bf:
         49:94:6b:ca:5b:dd:df:9a:36:7e:97:98:b2:76:44:8e:8c:26:
         cc:21:3c:38:bc:66:f9:2a:bd:29:9a:2c:f6:fd:08:fa:3c:69:
         e5:ac:e9:20:74:be:7a:05:00:1f:80:08:45:33:3a:da:69:14:
         de:a0:89:6a:8c:6c:2a:b1:79:14:0d:00:c5:07:15:92:e3:92:
         1d:b0:19:81:17:be:78:97:e0:2a:7a:7a:2f:8f:28:bd:57:af:
         79:f5:69:a7:7e:eb:61:ac:b5:ec:b7:9b:1f:2a:14:ca:cc:79:
         51:e0:53:1c:91:5e:f2:de:c5:c4:50:2f:34:9a:36:2a:2e:18:
         e0:dc:5b:40:4a:c6:bd:57:43:a4:c2:02:63:7c:a9:88:15:85:
         cb:8a:16:41:51:a5:50:f9:0e:96:db:8a:c1:b5:af:aa:2d:06:
         da:a6:73:9d:a0:2c:0e:bd:0b:88:c4:11:fa:2e:b1:42:53:b3:
         65:5d:1e:6a:16:94:87:e1:9f:84:02:4b:9e:c9:95:1f:f9:39:
         cb:27:aa:8f:11:d1:e9:d7:db:44:73:3c:3f:a2:16:68:6a:81:
         e0:38:f5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 13:34:13 2022 by LibreSSL & rpki-client.