RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer (download)

Subject key identifier:   D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: IP: 188.244.120.0/24
    2: IP: 2a11:4cc0::/29

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 701379892327 (0xa34d7fd467)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:04:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4d:cf:5a:e9:95:e0:e6:bd:da:ba:8e:24:b6:
                    10:0a:62:8c:45:fb:8c:29:05:5e:06:60:6f:86:be:
                    3e:d0:b1:94:5d:df:9c:3b:5d:14:82:5f:c3:3c:32:
                    1f:d7:53:d9:f9:11:9e:29:f6:1f:d2:6f:af:9d:7a:
                    5d:b4:1e:86:8f:fb:fe:0e:b3:ad:dd:53:2f:7b:40:
                    c1:ad:97:d7:d8:55:1f:31:d3:7e:ff:a0:9f:c5:99:
                    05:ba:d5:1e:14:a2:ff:de:cb:68:fa:da:b6:f6:0e:
                    4c:07:8d:20:53:72:5d:51:f1:5a:b1:f0:bd:77:ab:
                    88:14:72:2e:e4:7d:ec:bc:bd:ce:e2:3b:c5:b1:f7:
                    2a:86:a3:f8:43:89:a6:e5:37:b9:d2:08:44:02:23:
                    b4:72:1a:32:ea:5f:4f:10:3e:f1:4c:a0:69:8e:53:
                    fd:ac:ef:d4:64:7f:f0:19:67:da:d4:07:1a:62:19:
                    d4:b1:e1:35:be:f7:17:e8:85:c9:3c:13:69:01:03:
                    6a:96:5c:1f:d6:03:bb:e9:b8:b1:2f:fb:31:f6:ea:
                    83:bf:c4:1c:9c:d8:87:c3:b0:09:d7:8b:9f:d8:04:
                    3d:64:da:78:7a:00:0e:47:33:e3:ff:c1:d4:2c:34:
                    32:1c:b9:89:e4:f8:2c:d5:bd:67:cf:8d:72:31:70:
                    e2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.244.120.0/24
                IPv6:
                  2a11:4cc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         63:21:6f:8a:be:b2:bd:0d:49:9f:9a:52:78:a0:d0:2d:6d:70:
         79:2c:92:b8:25:e1:51:f9:5b:80:ff:d1:45:29:b9:79:e3:78:
         6c:9a:1c:06:84:75:00:6b:d1:64:aa:4e:f7:3b:34:d4:d6:15:
         ae:7c:8c:12:1e:73:4c:b9:62:af:31:c6:32:e6:b9:79:3a:6c:
         75:b5:26:40:e5:99:71:62:a1:83:f3:f2:9b:3d:7d:86:16:37:
         8d:65:b7:e7:a2:3b:d6:da:5c:3b:0f:3e:dc:49:b5:43:ce:f8:
         d2:53:d5:f0:ec:07:cd:df:97:cd:91:3f:db:ba:cb:d1:ec:38:
         80:71:2b:8a:1a:32:d8:32:d7:f8:fd:6d:46:81:45:bd:5d:d1:
         bd:95:a6:ad:ad:dd:74:53:8a:99:97:d9:2a:b9:3b:cf:5d:f1:
         0b:38:32:1d:c0:b8:7e:b4:fb:3f:7c:a8:0b:4d:fb:d5:07:3e:
         6e:c9:6f:c6:9e:cb:dc:17:f9:20:86:6a:76:84:b2:b4:b0:1d:
         11:bb:c0:cf:89:41:81:fb:32:71:15:aa:9b:0a:26:8c:4f:cf:
         43:d4:57:6a:44:a0:65:9a:4d:b9:7d:07:95:bf:56:24:df:99:
         34:d2:7c:05:f0:dc:e9:b7:da:50:4a:f5:79:51:45:fd:6f:fd:
         0d:60:e8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 11:53:58 2022 by LibreSSL & rpki-client.