RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/1-IMBwukKuq41kP_E_6aU1iIFnj4.cer (download)

Subject key identifier:   F8:83:01:C2:E9:0A:BA:AE:35:90:FF:C4:FF:A6:94:D6:22:05:9E:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/50/7467f6-9c48-4f6f-a98c-46c32ca20fdf/1/1-IMBwukKuq41kP_E_6aU1iIFnj4.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/50/7467f6-9c48-4f6f-a98c-46c32ca20fdf/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: AS: 209306

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/1-IMBwukKuq41kP_E_6aU1iIFnj4.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 734385870961 (0xaafccf1871)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:03:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f88301c2e90abaae3590ffc4ffa694d622059e3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:3a:f7:e4:af:aa:29:7f:b6:5b:e6:58:5e:a3:
                    87:fc:e2:4f:97:ad:91:29:d2:94:cf:16:95:4a:c6:
                    57:a4:08:de:35:12:77:be:86:14:e6:02:94:a2:82:
                    89:76:6a:4e:46:d8:17:08:f6:57:9d:73:71:9e:a0:
                    bd:50:37:aa:9a:69:ca:44:a3:46:4d:1b:da:8a:32:
                    15:92:8c:97:98:af:1d:de:64:3b:d6:ba:ce:b5:52:
                    32:da:7c:df:aa:7f:f4:3e:2a:43:37:65:5a:a7:6e:
                    be:c6:56:f1:9e:04:97:c1:11:ee:91:13:3b:68:1c:
                    61:cc:c5:d7:78:89:8e:6a:40:d8:e5:29:c4:5d:77:
                    38:50:2f:8c:34:41:e4:38:3f:37:95:1b:ea:4d:5f:
                    2e:4b:ad:a1:0f:66:f5:1a:3b:73:2a:ae:cf:ae:75:
                    a6:3e:de:35:a8:6f:0c:f8:f6:b6:26:89:46:8a:ed:
                    2c:39:4d:d2:f6:a4:4c:d9:9b:7b:45:62:bf:3b:88:
                    9e:48:bd:19:e5:ec:32:dc:a8:57:50:5f:d7:03:41:
                    47:45:dd:94:38:8e:c5:65:b6:d7:7d:aa:92:b8:6e:
                    97:89:ab:83:d6:ce:1c:d4:a4:44:a1:69:4f:da:27:
                    0f:ba:40:6c:c0:4e:a6:ab:cc:91:24:39:b0:4c:5b:
                    6f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F8:83:01:C2:E9:0A:BA:AE:35:90:FF:C4:FF:A6:94:D6:22:05:9E:3E
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7467f6-9c48-4f6f-a98c-46c32ca20fdf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7467f6-9c48-4f6f-a98c-46c32ca20fdf/1/1-IMBwukKuq41kP_E_6aU1iIFnj4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209306

    Signature Algorithm: sha256WithRSAEncryption
         8c:63:0a:48:3e:ae:57:57:c9:89:97:b4:fc:c0:40:96:c5:93:
         91:3c:10:af:d9:0e:1f:31:6d:cd:04:20:7e:97:d6:70:8e:9b:
         87:15:fd:0b:9c:b8:f9:3c:85:c0:fc:4e:bc:fd:96:f5:5b:f2:
         c1:1b:5b:e8:bf:4e:f4:51:90:f9:12:e7:97:00:be:ac:01:81:
         21:e9:93:49:e8:fb:53:c6:ac:78:a6:99:9c:01:d8:36:2e:03:
         87:b0:bd:4e:f8:30:7e:35:e7:e4:f8:a0:2e:c7:41:3a:97:88:
         c6:e5:c4:b2:bf:69:4e:85:83:db:d6:9b:70:16:e0:d6:92:b1:
         f7:63:19:74:1e:7f:21:46:c9:ab:64:68:7c:89:c5:ae:4e:f0:
         67:51:d9:ed:d3:61:0a:cf:b9:3b:14:2f:78:53:70:7e:b5:9a:
         bd:8c:5e:60:13:0d:a9:60:29:c1:9f:22:87:78:8b:53:af:bd:
         cc:f4:67:32:5a:08:8c:5a:93:fb:7f:63:72:f0:25:3c:cf:31:
         7d:ea:09:b7:a9:25:67:1f:57:3e:d9:a0:b3:a4:39:7b:9a:0a:
         fb:04:7a:28:c3:78:72:a1:70:12:0a:cf:f2:fe:ef:0d:1e:d5:
         40:f3:36:f3:c2:ec:64:0b:2c:02:48:50:85:80:e4:5b:37:3e:
         30:d1:eb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 18:42:08 2022 by LibreSSL & rpki-client.