RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/3asp8eG-fDYUHBaaId6RLp9iStE.cer (download)

Subject key identifier:   DD:AB:29:F1:E1:BE:7C:36:14:1C:16:9A:21:DE:91:2E:9F:62:4A:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/b3/a9235d-bfc1-4722-b74e-bbb14c08e260/1/3asp8eG-fDYUHBaaId6RLp9iStE.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/b3/a9235d-bfc1-4722-b74e-bbb14c08e260/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: IP: 45.12.108.0/22

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/3asp8eG-fDYUHBaaId6RLp9iStE.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 509726851392 (0x76ae168140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:33:13 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=ddab29f1e1be7c36141c169a21de912e9f624ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:90:8e:8e:88:4d:70:15:37:9c:7e:f5:f1:23:
                    ee:7e:b1:14:83:a2:a8:b8:0c:e2:bf:c2:89:aa:f3:
                    69:86:6e:35:9f:5b:2a:79:81:15:b3:6f:df:6f:20:
                    cb:60:9e:10:ae:57:38:81:3c:cb:a2:37:5f:ee:2d:
                    7b:72:cb:64:fa:e7:b7:4f:4f:17:96:73:bd:8d:70:
                    1e:a3:6f:6c:93:88:62:78:cc:0c:49:fa:aa:33:37:
                    a4:13:b1:45:00:11:96:ea:ce:6a:bd:cb:3a:ea:b6:
                    9c:40:e3:6a:5c:1a:19:e1:6a:bd:37:e6:62:94:dc:
                    5f:00:55:34:48:83:ab:05:67:66:71:62:79:97:9f:
                    30:4e:e0:88:ad:13:93:01:27:87:70:92:a1:49:ce:
                    0e:09:f7:d2:f5:ba:74:63:13:07:67:9b:40:cd:16:
                    0d:46:92:b9:af:fc:37:79:37:6e:87:1b:a7:99:ab:
                    ae:6d:b4:e4:6e:9c:21:0f:8a:ea:bf:db:2b:1c:86:
                    54:b3:c1:7c:79:5e:97:bd:20:86:1a:87:23:3a:c9:
                    4d:cf:d9:c5:f4:0c:b7:75:62:0b:bc:20:ef:2c:d6:
                    63:78:93:d6:e7:d5:7f:8b:e2:63:fa:22:97:5d:87:
                    b7:a5:76:09:95:37:b0:d0:07:9c:60:d2:8d:7d:70:
                    64:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DD:AB:29:F1:E1:BE:7C:36:14:1C:16:9A:21:DE:91:2E:9F:62:4A:D1
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a9235d-bfc1-4722-b74e-bbb14c08e260/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a9235d-bfc1-4722-b74e-bbb14c08e260/1/3asp8eG-fDYUHBaaId6RLp9iStE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....-.l
    Signature Algorithm: sha256WithRSAEncryption
         6a:6a:cb:bb:f7:68:26:56:ac:38:64:11:f1:ef:c5:02:bf:55:
         2a:4c:f7:b2:62:50:87:18:76:10:58:0f:a7:94:3e:39:83:bf:
         83:21:bb:1f:12:f6:75:b7:b0:be:bf:a8:64:32:64:37:08:3f:
         fc:a7:02:0b:51:e9:ca:a5:d9:e1:03:0e:8a:bb:a4:9d:a2:20:
         5c:4a:16:b5:30:fc:1b:56:80:98:ad:a6:b7:8c:cc:a5:3f:c0:
         4b:a4:c2:94:bb:8c:da:72:57:51:b5:9f:88:0b:b5:6e:83:75:
         88:69:96:a3:f6:b3:25:71:5e:79:32:62:a8:84:8d:54:e6:75:
         68:4e:16:42:f4:dc:f2:f4:ef:2d:27:57:77:e3:d8:cb:e0:1d:
         28:64:d0:75:3b:5b:af:54:61:1e:d6:82:d5:7e:aa:75:98:8a:
         da:36:83:a0:52:2e:b3:46:69:91:3b:37:e7:0b:e4:b0:79:36:
         2a:fa:de:b8:02:b8:39:69:55:92:a7:a8:f0:35:a2:cc:4a:56:
         90:75:82:4e:14:c4:8d:a3:9f:fb:37:70:21:46:bf:4f:aa:18:
         a0:0c:7b:05:ae:50:e7:25:c9:0a:b5:37:cd:41:83:a7:34:9a:
         72:fc:0a:9f:8f:13:24:c5:53:e0:7f:17:1b:aa:84:c9:ba:cf:
         e7:ed:19:4c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Generated at Tue Aug 24 11:06:14 2021 by LibreSSL & rpki-client.