RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/1-1hWbRVumXo0sW_JwHwge35z-1M.cer (download)

Subject key identifier:   FB:58:56:6D:15:6E:99:7A:34:B1:6F:C9:C0:7C:20:7B:7E:73:FB:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/1-1hWbRVumXo0sW_JwHwge35z-1M.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: IP: 185.138.232.0/22
    2: IP: 2a07:1040::/29

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/1-1hWbRVumXo0sW_JwHwge35z-1M.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 711525343142 (0xa5aa371fa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:04:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fb58566d156e997a34b16fc9c07c207b7e73fb53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:95:64:ae:89:31:93:60:9e:9f:89:ac:6d:8c:
                    68:6b:11:d2:53:da:d6:f6:d1:cb:54:2a:77:aa:01:
                    ed:dd:77:1f:fb:0e:aa:9e:9f:91:da:2f:96:28:94:
                    41:95:a5:45:61:24:9e:3c:7d:f9:79:fa:09:e4:e4:
                    0a:7a:c6:1b:4a:37:e2:66:10:9a:3f:53:f9:4c:54:
                    f7:e7:a7:aa:c9:20:3c:41:79:30:28:96:e2:55:05:
                    3b:13:6e:7f:a6:64:c8:d6:71:04:bb:0b:f3:10:e1:
                    e1:41:c6:b3:4a:bf:dd:7f:8b:27:41:04:93:6d:f5:
                    ef:fe:be:a7:2a:f2:f3:34:03:96:d1:c2:9e:c5:43:
                    eb:25:ef:32:41:32:a8:ee:55:9a:85:47:8b:b0:23:
                    65:57:55:f1:aa:ae:fb:9e:ff:0a:73:85:d4:3a:8a:
                    a1:cb:16:2b:4b:99:92:23:02:0d:2a:1a:ca:2a:a1:
                    aa:a6:8b:85:7f:b4:60:b7:00:7e:5a:a3:66:b1:54:
                    9e:c8:96:ce:f2:bf:d7:44:d9:f8:b0:bf:24:4a:92:
                    2f:b0:ff:2d:d1:80:3b:92:ff:cb:13:ad:ba:a2:0d:
                    e1:6b:51:0f:d0:b1:8a:c8:0e:0a:66:5c:c2:a4:bd:
                    94:c1:29:07:33:f5:45:74:e3:f1:c7:d7:94:9e:84:
                    e4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FB:58:56:6D:15:6E:99:7A:34:B1:6F:C9:C0:7C:20:7B:7E:73:FB:53
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/1-1hWbRVumXo0sW_JwHwge35z-1M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.138.232.0/22
                IPv6:
                  2a07:1040::/29

    Signature Algorithm: sha256WithRSAEncryption
         99:37:21:c8:b7:ba:4d:66:64:a6:73:97:0a:af:f0:58:3a:99:
         02:ec:48:c8:51:32:dd:c6:07:be:c1:4e:66:2c:b6:d7:d2:aa:
         fa:d5:18:fa:9c:f8:00:19:18:c2:3d:b0:a2:35:ee:40:65:51:
         e7:fe:1e:e5:d4:4d:f7:eb:ee:45:af:b5:43:c9:36:40:28:77:
         fa:2f:bc:a7:74:1d:49:dd:71:4d:bf:e1:36:d6:f7:28:e8:f2:
         ee:2b:a3:cf:af:84:95:bf:18:9d:67:55:52:c6:d1:f4:08:e1:
         83:a7:18:05:bf:c1:48:0e:df:d7:0d:c2:3c:56:3c:3c:ed:6a:
         1c:60:02:fd:bc:a6:1a:56:e6:d0:37:fe:6d:e2:c7:b4:4d:b8:
         f5:2b:47:15:76:b5:83:54:a5:e7:cd:7c:52:9a:4a:26:0c:1f:
         7a:2a:37:aa:5d:90:04:10:60:13:8f:c7:bf:f2:44:8d:ee:6e:
         eb:12:c1:29:41:3e:55:7f:0c:c8:37:6c:77:8b:a6:0c:3f:b9:
         69:57:95:76:eb:0f:4a:bf:4f:25:97:a4:2a:05:45:1f:b9:00:
         d1:4d:5b:e7:f1:6f:d1:e4:ba:cb:bf:fc:4a:6b:bd:75:c4:bf:
         c7:f1:ac:7b:ba:f8:53:7f:da:d5:e5:c7:e8:63:44:62:fc:28:
         54:8f:d6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 13:34:15 2022 by LibreSSL & rpki-client.