RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/48WV387n0x0QGRTZzNNMRMQuzew.cer (download)

Subject key identifier:   E3:C5:95:DF:CE:E7:D3:1D:10:19:14:D9:CC:D3:4C:44:C4:2E:CD:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/db/6c45b4-80fc-4c70-8320-8270150f4027/1/48WV387n0x0QGRTZzNNMRMQuzew.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/db/6c45b4-80fc-4c70-8320-8270150f4027/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: IP: 2a0e:940::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/48WV387n0x0QGRTZzNNMRMQuzew.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 622750563955 (0x90fed37e73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 10 10:44:06 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e3c595dfcee7d31d101914d9ccd34c44c42ecdec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d7:37:87:74:b0:45:fa:38:dd:e6:5d:a1:20:
                    b7:b6:66:2e:a7:2d:fa:e6:80:be:57:db:93:32:2c:
                    92:f4:50:f5:0a:a5:07:d5:6a:e7:a5:1e:60:79:d3:
                    38:b2:bd:3c:00:0e:26:92:a6:cd:38:82:ff:fa:fe:
                    32:0f:1c:be:70:05:c7:65:95:f6:65:a9:01:f9:13:
                    d4:da:b2:f6:54:f7:06:0d:74:33:9c:a8:9e:9f:0b:
                    fd:96:f5:cd:d9:5b:82:7d:c7:00:3e:ae:69:b2:99:
                    e5:7b:49:ed:bf:89:d2:ef:2b:34:e1:eb:4e:88:58:
                    76:28:17:4e:02:fc:b3:a0:0c:ae:1d:95:ef:e0:ad:
                    d7:94:24:a4:b1:2e:77:6b:42:02:bf:30:85:9d:05:
                    8e:29:8b:b5:6f:cb:f5:66:dc:7b:c5:db:ec:be:d3:
                    8b:a8:be:b5:60:e2:7b:49:c4:0b:9e:9f:6c:d5:82:
                    51:8f:89:a8:63:31:e9:d8:0b:e2:50:98:30:b4:d2:
                    3e:c0:72:81:7b:86:71:ca:46:e1:a9:ad:01:55:15:
                    d4:46:5c:ae:7a:de:d0:c8:5e:a5:4e:d0:99:fd:78:
                    24:55:c2:74:9d:6c:58:c5:b0:af:32:37:63:81:d6:
                    71:57:cd:5e:3a:9c:2f:6d:a8:2f:15:e7:6a:b8:7a:
                    75:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E3:C5:95:DF:CE:E7:D3:1D:10:19:14:D9:CC:D3:4C:44:C4:2E:CD:EC
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/6c45b4-80fc-4c70-8320-8270150f4027/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/6c45b4-80fc-4c70-8320-8270150f4027/1/48WV387n0x0QGRTZzNNMRMQuzew.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:940::/29

    Signature Algorithm: sha256WithRSAEncryption
         70:1e:5c:f1:f2:bf:e2:98:43:2c:a1:c2:14:89:1b:19:c9:49:
         e1:98:1c:e1:cb:bb:17:95:5c:d2:3a:1f:e0:4a:f8:1e:13:e5:
         2a:4c:f1:4f:01:73:db:71:c5:fc:b7:5a:48:55:0d:3f:56:61:
         ad:05:3b:73:0d:71:8b:8a:c2:8f:03:c0:d5:fb:64:27:17:11:
         6f:a5:da:87:38:36:d5:8b:16:b8:2e:cb:16:d0:af:5d:34:f3:
         83:e9:11:7d:3f:13:69:83:91:98:63:62:e9:43:74:45:9a:27:
         b3:72:ac:e2:16:21:6a:e8:33:de:4c:d3:14:4f:55:13:b3:f6:
         cf:d9:53:62:76:ea:55:f4:f6:92:30:2e:16:db:b1:10:07:e6:
         1f:3a:bf:bd:eb:38:31:da:a6:7d:99:6c:26:e9:ce:05:11:69:
         f6:a0:af:74:1d:63:d0:e4:c5:23:e5:ff:97:d0:53:86:5a:4e:
         16:d2:33:c8:dd:42:91:c8:d4:0c:9e:9d:46:93:77:be:34:73:
         62:8b:ce:df:65:6b:55:8d:20:35:93:8e:43:60:cb:fb:9a:b2:
         52:75:65:8c:21:87:1d:14:29:bd:63:34:3d:f2:a2:48:6a:e3:
         d1:d5:0a:bb:51:7c:a6:c3:f1:4a:01:02:4e:05:85:88:bc:ee:
         ac:34:3a:36
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIGAJD+035zMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjEw
OTEwMTA0NDA2WhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhlM2M1OTVkZmNl
ZTdkMzFkMTAxOTE0ZDljY2QzNGM0NGM0MmVjZGVjMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAq9c3h3SwRfo43eZdoSC3tmYupy365oC+V9uTMiyS9FD1
CqUH1WrnpR5gedM4sr08AA4mkqbNOIL/+v4yDxy+cAXHZZX2ZakB+RPU2rL2VPcG
DXQznKienwv9lvXN2VuCfccAPq5pspnle0ntv4nS7ys04etOiFh2KBdOAvyzoAyu
HZXv4K3XlCSksS53a0ICvzCFnQWOKYu1b8v1Ztx7xdvsvtOLqL61YOJ7ScQLnp9s
1YJRj4moYzHp2AviUJgwtNI+wHKBe4Zxykbhqa0BVRXURlyuet7QyF6lTtCZ/Xgk
VcJ0nWxYxbCvMjdjgdZxV81eOpwvbagvFedquHp1TwIDAQABo4IChTCCAoEwHQYD
VR0OBBYEFOPFld/O59MdEBkU2czTTETELs3sMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiLzZjNDViNC04MGZjLTRjNzAt
ODMyMC04MjcwMTUwZjQwMjcvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvNmM0NWI0LTgwZmMtNGM3MC04
MzIwLTgyNzAxNTBmNDAyNy8xLzQ4V1YzODduMHgwUUdSVFp6Tk5NUk1RdXpldy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUDKg4JQDANBgkqhkiG9w0BAQsFAAOCAQEAcB5c8fK/4phDLKHCFIkb
GclJ4Zgc4cu7F5Vc0jof4Er4HhPlKkzxTwFz23HF/LdaSFUNP1ZhrQU7cw1xi4rC
jwPA1ftkJxcRb6Xahzg21YsWuC7LFtCvXTTzg+kRfT8TaYORmGNi6UN0RZons3Ks
4hYhaugz3kzTFE9VE7P2z9lTYnbqVfT2kjAuFtuxEAfmHzq/ves4MdqmfZlsJunO
BRFp9qCvdB1j0OTFI+X/l9BThlpOFtIzyN1CkcjUDJ6dRpN3vjRzYovO32VrVY0g
NZOOQ2DL+5qyUnVljCGHHRQpvWM0PfKiSGrj0dUKu1F8psPxSgECTgWFiLzurDQ6
Ng==
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:10:34 2021 by LibreSSL & rpki-client.