RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/0uNa8961OjF_sOc2WlpP_i-tljU.cer (download)

Subject key identifier:   D2:E3:5A:F3:DE:B5:3A:31:7F:B0:E7:36:5A:5A:4F:FE:2F:AD:96:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/01/034b47-9f88-4b1a-839a-f758129b8e73/1/0uNa8961OjF_sOc2WlpP_i-tljU.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/01/034b47-9f88-4b1a-839a-f758129b8e73/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: IP: 91.224.141.0/24
    2: IP: 2a01:6640::/29

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/0uNa8961OjF_sOc2WlpP_i-tljU.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 719203185292 (0xa773d9b28c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:00:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d2e35af3deb53a317fb0e7365a5a4ffe2fad9635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e5:a3:02:3e:c7:dd:a3:74:b2:a1:7b:18:b5:
                    c2:fb:46:87:e2:5e:13:71:62:51:dd:b0:aa:4d:e5:
                    e1:a9:dd:ef:2e:fe:e2:a9:a4:2a:da:b6:c6:49:c9:
                    e7:ca:06:17:4b:18:83:de:3f:9b:a1:74:db:1b:5c:
                    8c:1d:98:fc:c5:f1:eb:2a:94:b2:4d:db:a2:9e:f9:
                    27:cb:54:b1:70:a3:9c:6c:ef:ce:19:3a:27:fc:a9:
                    b4:f1:fc:8a:02:92:a0:ea:1a:f2:3d:48:99:d5:f8:
                    f7:77:ae:e3:17:cd:b3:d9:b8:24:9e:78:ad:9e:91:
                    30:be:64:7b:fb:6a:fc:23:1e:53:0f:92:4d:3c:e7:
                    e6:9d:5b:ec:ad:71:15:ab:bb:9e:9f:05:19:b8:4e:
                    ca:8d:26:b6:de:f3:26:85:7c:1b:b3:f3:6b:b0:2a:
                    91:dd:f4:fd:79:8a:83:62:57:eb:95:bd:b1:74:15:
                    ef:5e:8c:2d:3f:3c:c2:46:0f:de:ea:4b:a0:c4:06:
                    0b:91:a8:33:af:ce:09:41:30:ac:a2:1d:a3:ac:62:
                    c9:d0:04:c7:e3:ce:4c:22:50:ae:c3:dc:bf:1c:09:
                    b7:62:d4:53:ec:05:77:94:13:c3:77:ad:2b:3c:d9:
                    64:e2:ea:5d:86:f7:46:ec:31:8a:12:42:1d:21:e1:
                    be:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D2:E3:5A:F3:DE:B5:3A:31:7F:B0:E7:36:5A:5A:4F:FE:2F:AD:96:35
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/034b47-9f88-4b1a-839a-f758129b8e73/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/034b47-9f88-4b1a-839a-f758129b8e73/1/0uNa8961OjF_sOc2WlpP_i-tljU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.224.141.0/24
                IPv6:
                  2a01:6640::/29

    Signature Algorithm: sha256WithRSAEncryption
         34:a2:22:4b:69:9a:63:76:77:ca:3a:34:2f:55:2f:f2:df:ac:
         bb:11:97:f7:1b:00:8b:72:97:59:1b:31:9b:9a:a6:52:ee:b9:
         f9:9d:b7:d8:11:5a:ae:2e:86:46:13:0a:24:54:2b:75:e3:0f:
         a8:b4:71:73:f9:68:85:3d:b9:e6:8e:e9:90:67:a3:4b:13:02:
         fb:ae:6b:8d:89:23:f9:c0:09:b3:30:fa:9c:62:24:15:ae:07:
         db:6a:56:9c:27:9d:ef:1e:b9:58:d7:49:2e:8e:7b:47:16:f8:
         0a:4d:c7:b3:b5:06:15:4d:e6:6a:9c:f6:ad:20:5c:30:bf:a4:
         e3:47:ad:9c:ae:92:e0:3b:de:10:8b:24:2a:e3:fe:6c:e4:20:
         dd:b3:6b:5a:ff:d7:1a:97:09:a1:f1:4f:83:e6:02:2d:4f:fc:
         19:d2:a6:b0:ad:45:c4:4b:75:52:e6:02:00:a4:c0:32:f1:32:
         91:9c:1e:ab:db:ec:d7:b4:7e:cb:f6:0f:52:e6:f7:b8:ba:18:
         21:b0:e7:29:ea:e4:83:43:f6:29:f8:84:61:60:56:b9:f5:25:
         5b:7b:45:3f:d1:38:6a:6f:a6:dd:db:fd:e9:14:e4:c9:ce:a6:
         ef:7c:d9:b3:24:1f:8d:b2:93:3b:bd:6d:bb:18:74:66:1c:a2:
         17:bb:9b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 15:16:40 2022 by LibreSSL & rpki-client.