RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer (download)

Subject key identifier:   E1:F2:CA:95:18:23:31:4A:5F:4D:10:A6:6A:78:22:39:8F:B8:89:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: AS: 51329 -- 51330
    2: AS: 51332
    3: AS: 51479
    4: AS: 51498
    5: AS: 61076
    1: IP: 185.20.248.0/22
    2: IP: 2a02:2300::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 706431485143 (0xa47a9904d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:05:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e1f2ca951823314a5f4d10a66a7822398fb8896b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7c:9b:ca:8c:76:66:a8:80:7f:6c:16:f5:95:
                    e0:d4:e8:ed:e7:d0:56:a4:0e:6c:2f:d2:ff:70:08:
                    10:6b:47:ab:eb:51:ed:b9:4c:47:08:43:92:a5:f0:
                    ed:5d:61:da:b1:4b:14:91:0f:0f:34:31:bb:1b:9a:
                    75:59:14:12:3b:d0:1e:53:76:ce:2d:1b:2f:69:93:
                    e7:ee:31:f4:ce:7c:87:dc:ca:19:90:0f:f4:f1:f8:
                    34:cf:68:9f:b1:a1:01:b1:0b:56:0e:f8:af:18:ed:
                    ac:2b:ac:9a:62:d4:81:95:e6:49:5a:9c:40:5e:7e:
                    b7:29:07:10:21:95:80:98:d8:89:27:92:42:6b:c5:
                    a6:46:5a:8f:ca:15:de:5e:f5:f4:7e:38:70:5f:9f:
                    58:0f:92:09:0c:e1:d4:01:7b:8d:65:0b:44:db:d6:
                    d7:14:59:a7:8d:3f:94:3f:7d:de:77:6a:33:6f:b2:
                    11:e7:67:76:53:ac:37:72:69:df:ed:75:1f:a6:3d:
                    96:3f:64:50:70:23:17:5c:c2:68:0d:bd:4f:85:98:
                    77:e2:1a:b2:34:3e:a5:cd:cf:f1:66:6b:d3:17:36:
                    19:11:11:45:24:59:06:fb:0f:0e:53:b3:51:4e:3d:
                    3c:58:7c:52:93:de:91:51:8e:51:21:0e:85:72:50:
                    54:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E1:F2:CA:95:18:23:31:4A:5F:4D:10:A6:6A:78:22:39:8F:B8:89:6B
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.20.248.0/22
                IPv6:
                  2a02:2300::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51329-51330
                  51332
                  51479
                  51498
                  61076

    Signature Algorithm: sha256WithRSAEncryption
         71:58:ab:b7:c6:fd:ce:b4:16:5c:43:cf:45:2b:c6:f4:cd:6c:
         1f:4c:46:ae:29:ea:b2:f2:57:f6:bf:0a:b2:cd:ea:77:36:16:
         b0:bf:83:0d:e3:3a:72:8a:c7:a5:84:09:a7:cd:b7:35:a2:55:
         b5:15:f9:d3:f8:c4:01:3e:af:cc:7d:a2:94:a0:ee:0c:43:11:
         2c:02:7f:5e:9a:d8:f5:3d:b2:61:49:10:5c:a5:61:22:e5:6a:
         ce:6f:48:d1:c8:46:22:57:4e:8f:c9:b7:ef:55:a1:1c:d5:2e:
         43:30:ac:64:af:74:2a:15:49:ff:ad:0d:8e:44:48:69:b8:5d:
         39:ec:11:e9:11:78:00:c8:1f:4e:18:c3:da:a1:18:d1:30:bc:
         04:ce:ab:4a:99:b1:36:55:7f:33:63:73:dd:5d:c9:19:fe:ca:
         aa:a8:17:f9:b8:83:1f:93:69:31:d4:6f:da:23:f4:fd:61:0a:
         c4:7b:0c:97:1a:91:f2:1f:6b:96:67:6f:f0:59:e9:be:93:01:
         3e:d9:82:03:ee:16:1b:b7:39:fc:59:87:ad:38:26:c1:de:80:
         40:35:60:3f:01:a7:ac:88:07:94:71:77:e1:f9:97:ee:38:37:
         a3:5e:db:4b:48:85:09:35:69:dd:47:fe:e5:dd:73:56:76:60:
         d0:73:60:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 11:54:03 2022 by LibreSSL & rpki-client.