RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer (download)

Subject key identifier:   F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2022-07-01T00:00:00Z
    Resources:
    1: AS: 210953
    1: IP: 2.56.8.0/23
    2: IP: 5.183.76.0--5.183.78.255
    3: IP: 45.14.112.0/22
    4: IP: 147.189.128.0/20
    5: IP: 176.111.216.0/21
    6: IP: 185.127.92.0/22
    7: IP: 193.8.172.0/23
    8: IP: 193.8.194.0/23
    9: IP: 2a0e:c80::/29
    10: IP: 2a0f:9980::/29

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 632561630454 (0x93479c7cf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct 15 08:42:42 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c3:6f:ef:db:19:0b:b1:df:95:6b:ce:e0:e1:
                    de:23:63:f8:2c:4a:d2:ed:6b:67:ca:6f:f4:1c:06:
                    ba:6d:88:30:17:a5:f6:7f:f3:42:a3:0c:63:5d:4e:
                    8c:49:c5:bf:d8:e6:37:51:b8:a0:f1:26:74:d0:fe:
                    f9:7a:5e:3d:92:5e:9e:ed:7d:72:ec:80:a4:4c:6d:
                    88:e5:d3:58:33:2f:92:a7:dc:2e:b9:c9:8f:63:80:
                    6c:b3:73:91:62:53:c0:b2:eb:fb:c1:18:f4:54:9e:
                    d2:8b:2a:01:07:c9:bb:f1:cb:af:30:22:ab:e4:bb:
                    c9:a2:ef:9c:fc:fb:31:15:fc:4a:15:12:0b:ef:3b:
                    00:b3:70:36:81:14:8d:bb:fc:4a:56:6f:43:e4:58:
                    d7:76:27:6a:83:2b:fc:1f:2d:38:c5:2e:62:25:20:
                    72:95:30:94:93:66:7c:8b:d6:e0:32:5c:e5:1c:0d:
                    16:d9:37:ce:4d:24:34:aa:9b:6e:f0:b0:c3:82:9a:
                    3c:75:ba:35:94:a1:af:bb:81:88:43:72:f7:bc:26:
                    34:4d:65:d4:89:37:74:cc:05:7d:31:ef:1a:54:1b:
                    34:1b:fa:62:76:3f:d1:73:cd:53:d4:63:4d:65:8b:
                    cb:1c:fa:8b:62:cb:1f:ab:1c:db:ee:23:93:92:d4:
                    bf:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.56.8.0/23
                  5.183.76.0-5.183.78.255
                  45.14.112.0/22
                  147.189.128.0/20
                  176.111.216.0/21
                  185.127.92.0/22
                  193.8.172.0/23
                  193.8.194.0/23
                IPv6:
                  2a0e:c80::/29
                  2a0f:9980::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210953

    Signature Algorithm: sha256WithRSAEncryption
         b1:9e:4e:da:29:ee:1d:b0:47:43:86:b3:64:05:80:1c:85:46:
         24:37:a5:f6:3c:0a:e6:10:52:17:c1:0f:a2:57:7e:d6:59:0d:
         7e:16:3f:cf:dd:0a:8b:11:b6:98:de:b2:09:c1:5e:76:11:cc:
         90:64:12:3e:0b:56:12:49:3c:f9:89:17:88:31:83:79:f3:3f:
         ce:c8:89:22:97:c5:88:67:a2:a5:25:26:1b:c8:bb:fa:1c:ae:
         0e:7d:7d:a4:28:af:e5:45:ad:c9:40:94:fe:f9:54:93:0e:ec:
         91:82:d0:d8:96:16:4e:48:71:3c:44:86:a5:5a:07:d0:71:4a:
         63:81:4a:37:3f:3a:65:fd:cd:9b:90:6b:8e:f7:7e:e7:ce:9c:
         6f:81:78:dc:5d:50:ff:bd:71:3c:5d:bd:5e:fb:44:8d:56:09:
         7d:dd:a8:17:54:f9:73:c6:63:89:23:55:ed:df:cf:b2:30:80:
         8f:eb:89:62:59:01:12:19:8f:62:49:3f:3d:57:ae:16:d5:09:
         4d:7b:f8:45:36:8c:05:16:ff:ef:25:26:bd:44:3b:5b:b2:b7:
         2b:3f:3c:0c:a5:2c:3f:65:8c:8b:f2:65:23:05:4d:fe:f2:8c:
         20:11:e8:f8:5a:54:10:22:af:0b:cf:ef:7d:8b:ac:65:ec:ca:
         e6:00:3f:ef
-----BEGIN CERTIFICATE-----
MIIF0TCCBLmgAwIBAgIGAJNHnHz2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjEx
MDE1MDg0MjQyWhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmOTNhYzZjZDIy
NDAyNDliYmE2MDE3MWYwODZlOTEwMWNjODdjYTI0MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEArMNv79sZC7HflWvO4OHeI2P4LErS7Wtnym/0HAa6bYgw
F6X2f/NCowxjXU6MScW/2OY3Ubig8SZ00P75el49kl6e7X1y7ICkTG2I5dNYMy+S
p9wuucmPY4Bss3ORYlPAsuv7wRj0VJ7SiyoBB8m78cuvMCKr5LvJou+c/PsxFfxK
FRIL7zsAs3A2gRSNu/xKVm9D5FjXdidqgyv8Hy04xS5iJSBylTCUk2Z8i9bgMlzl
HA0W2TfOTSQ0qptu8LDDgpo8dbo1lKGvu4GIQ3L3vCY0TWXUiTd0zAV9Me8aVBs0
G/pidj/Rc81T1GNNZYvLHPqLYssfqxzb7iOTktS/SQIDAQABo4IC6TCCAuUwHQYD
VR0OBBYEFPk6xs0iQCSbumAXHwhukQHMh8okMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4L2IwMzIxMy01ZTgwLTQ5MzEt
ODFjZS1mNzUyZDgxNjA1ZmIvMS8wfQYIKwYBBQUHMAqGcXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04
MWNlLWY3NTJkODE2MDVmYi8xLzEtVHJHelNKQUpKdTZZQmNmQ0c2UkFjeUh5aVEu
bWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5uZXQvbm90aWZpY2F0
aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5j
cmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBnBggrBgEFBQcBBwEB/wRYMFYw
PgQCAAEwOAMEAQI4CDAMAwQCBbdMAwQABbdOAwQCLQ5wAwQEk72AAwQDsG/YAwQC
uX9cAwQBwQisAwQBwQjCMBQEAgACMA4DBQMqDgyAAwUDKg+ZgDAaBggrBgEFBQcB
CAEB/wQLMAmgBzAFAgMDOAkwDQYJKoZIhvcNAQELBQADggEBALGeTtop7h2wR0OG
s2QFgByFRiQ3pfY8CuYQUhfBD6JXftZZDX4WP8/dCosRtpjesgnBXnYRzJBkEj4L
VhJJPPmJF4gxg3nzP87IiSKXxYhnoqUlJhvIu/ocrg59faQor+VFrclAlP75VJMO
7JGC0NiWFk5IcTxEhqVaB9BxSmOBSjc/OmX9zZuQa473fufOnG+BeNxdUP+9cTxd
vV77RI1WCX3dqBdU+XPGY4kjVe3fz7IwgI/riWJZARIZj2JJPz1XrhbVCU17+EU2
jAUW/+8lJr1EO1uytys/PAylLD9ljIvyZSMFTf7yjCAR6PhaVBAirwvP732LrGXs
yuYAP+8=
-----END CERTIFICATE-----

Generated at Fri Oct 15 11:43:52 2021 by LibreSSL & rpki-client.