RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/15Oo1za-uSvhbRk7EB-TvlUyWRk.cer (download)

Subject key identifier:   D7:93:A8:D7:36:BE:B9:2B:E1:6D:19:3B:10:1F:93:BE:55:32:59:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/15Oo1za-uSvhbRk7EB-TvlUyWRk.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: IP: 5.180.152.0/22
    2: IP: 45.12.12.0/22
    3: IP: 45.145.96.0/22
    4: IP: 2a0d:3900::/29
    5: IP: 2a10:4bc0::/29
    6: IP: 2a10:8840::/29
    7: IP: 2a10:bdc0::/29

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/15Oo1za-uSvhbRk7EB-TvlUyWRk.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 715741665412 (0xa6a5871884)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:04:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d793a8d736beb92be16d193b101f93be55325919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d8:e2:8e:f5:16:a3:bb:42:4c:ee:fb:a8:9e:
                    2f:e3:36:9d:f5:7a:b3:77:cc:eb:0f:c8:e9:65:96:
                    33:0e:ab:fc:5e:fa:b4:84:31:af:0c:d0:50:b7:a2:
                    8e:bc:da:33:09:7b:48:3b:37:bf:14:e4:28:a7:b7:
                    e4:1d:d6:f0:e6:a0:3b:d1:28:75:3c:d4:bf:80:f4:
                    90:9f:c2:9d:f2:a4:fc:2a:2f:65:59:74:dd:14:ab:
                    fe:cd:5d:b3:32:be:82:df:fc:06:00:fe:f7:8f:e1:
                    4b:f2:e7:b4:bf:b8:97:f2:62:8c:e5:12:89:35:6c:
                    99:4e:1d:ff:30:76:0b:1f:0f:b9:f2:5a:ca:b0:47:
                    98:95:c8:9a:43:6d:d5:34:80:d7:93:17:4c:47:04:
                    e3:04:5f:8b:23:5a:00:2d:b1:36:5d:b1:19:45:78:
                    a5:22:4c:66:b2:18:90:ae:d3:d2:ab:99:12:31:de:
                    e1:0b:ad:77:1e:6a:5e:c1:b2:4b:33:14:af:e3:bf:
                    9c:0e:08:9a:24:14:fc:09:74:99:68:f5:c5:f7:e1:
                    f5:77:47:6b:95:23:62:be:49:c9:40:cf:65:29:8f:
                    be:53:ee:67:82:52:f3:64:05:a1:64:26:81:e5:d5:
                    78:68:96:7f:f6:b6:6f:ba:88:6a:d8:46:cd:42:82:
                    8a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D7:93:A8:D7:36:BE:B9:2B:E1:6D:19:3B:10:1F:93:BE:55:32:59:19
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/15Oo1za-uSvhbRk7EB-TvlUyWRk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.152.0/22
                  45.12.12.0/22
                  45.145.96.0/22
                IPv6:
                  2a0d:3900::/29
                  2a10:4bc0::/29
                  2a10:8840::/29
                  2a10:bdc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         82:ac:8f:e7:d9:43:65:0f:32:34:03:eb:e0:e9:6c:61:73:7c:
         99:7a:21:5e:56:83:64:d4:a8:91:47:f4:31:23:f9:05:ac:f3:
         b6:71:f6:a2:84:00:f6:41:58:64:ea:71:70:cb:a5:f2:ca:55:
         2a:67:0e:4c:69:68:86:a4:80:ee:8c:ed:17:80:6e:1f:bf:50:
         94:f6:08:53:cf:85:0e:0a:72:86:ed:7a:44:90:51:31:14:40:
         3d:8f:4f:df:79:3f:a7:48:cf:7c:e3:a0:0a:6c:4c:95:78:07:
         71:5a:fd:89:50:53:9e:70:52:74:ec:d3:1d:1a:48:12:c0:58:
         26:19:2a:a0:6e:93:5b:c9:f9:22:85:27:04:7e:1b:af:02:97:
         8d:fc:27:86:f0:74:4c:8c:e1:f0:a6:d5:ee:da:dd:9d:38:46:
         fe:ba:7f:de:01:53:f5:65:5d:ca:f0:27:71:d8:c9:1f:30:ee:
         bd:be:33:5f:6c:64:4e:16:40:b0:a7:2a:5f:31:cb:9d:c1:ed:
         f7:47:d7:2f:cd:71:7e:95:7f:a4:f6:57:16:8e:89:25:34:e5:
         ae:4b:02:4b:2d:af:52:27:d9:38:a8:d5:c5:c2:1b:aa:c1:d9:
         05:45:8b:22:26:a0:f3:c1:0d:d6:3a:0f:4f:72:3a:dc:69:2e:
         3f:0d:ce:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 13:34:16 2022 by LibreSSL & rpki-client.