RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/4sIeVLsyBabjmedSUVq_Yt8bhok.cer (download)

Subject key identifier:   E2:C2:1E:54:BB:32:05:A6:E3:99:E7:52:51:5A:BF:62:DF:1B:86:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/85/391cd8-9265-4729-804a-d49fac1195c4/1/4sIeVLsyBabjmedSUVq_Yt8bhok.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/85/391cd8-9265-4729-804a-d49fac1195c4/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: AS: 204669
    1: IP: 185.243.96.0/22

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/4sIeVLsyBabjmedSUVq_Yt8bhok.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 733292254533 (0xaabb9fd545)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:59:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e2c21e54bb3205a6e399e752515abf62df1b8689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1b:35:1d:24:23:8c:56:ac:75:0c:06:ad:6c:
                    64:91:b7:d4:2d:7c:b3:8c:88:14:9f:03:ab:7f:27:
                    bb:5a:07:ad:c6:09:fc:e3:30:1c:18:bb:df:9e:f4:
                    2f:24:0e:30:b3:01:de:36:a0:00:2f:87:62:64:d9:
                    db:bc:33:e1:84:1b:96:c4:74:bd:86:a7:d9:db:e3:
                    89:a6:1b:1a:4a:a8:58:dc:b6:5d:e3:01:61:d5:13:
                    1f:f7:e6:19:38:78:91:85:bd:e8:9f:83:3d:a1:9f:
                    2e:b6:7a:7e:4b:2e:aa:7f:68:13:b3:ad:ac:d9:41:
                    43:b7:c2:e7:56:b9:39:3c:98:4a:80:38:7b:7e:2f:
                    5b:1f:a6:b8:62:bf:f6:b5:16:f1:cb:70:d8:2b:9c:
                    08:3e:dd:58:32:01:ef:bb:d8:01:0c:66:3a:c1:e8:
                    46:f8:42:fe:4a:ea:a0:41:5f:18:b8:d3:96:34:70:
                    ba:09:57:01:c2:9f:20:77:a4:62:cf:9c:ce:30:70:
                    e8:62:cb:79:08:a1:f5:61:61:ba:81:a4:3c:bc:ae:
                    11:e2:c5:90:86:43:44:c8:47:4d:85:ac:68:dc:cf:
                    61:71:03:cb:ff:9e:81:0e:76:a7:ba:0a:bf:22:25:
                    01:ff:db:48:64:7a:86:16:03:af:00:92:a8:12:74:
                    b2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E2:C2:1E:54:BB:32:05:A6:E3:99:E7:52:51:5A:BF:62:DF:1B:86:89
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/391cd8-9265-4729-804a-d49fac1195c4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/391cd8-9265-4729-804a-d49fac1195c4/1/4sIeVLsyBabjmedSUVq_Yt8bhok.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.243.96.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204669

    Signature Algorithm: sha256WithRSAEncryption
         5b:dd:b2:b0:92:43:c2:3d:53:d9:5b:43:a9:45:b1:96:50:be:
         ac:ca:45:e6:7a:36:f4:f9:30:41:5c:00:74:e0:30:f5:be:98:
         22:fe:09:a5:2c:48:34:c9:67:51:d3:1d:98:ba:27:1b:3b:86:
         98:29:0f:bc:a7:6e:9f:88:71:6b:80:cc:17:8c:64:4f:32:5a:
         dc:be:75:84:5d:97:ef:58:c0:14:96:1a:60:15:fa:bc:48:00:
         28:21:40:d4:fb:b3:45:ab:7d:0c:08:db:f2:bd:87:45:5d:18:
         33:ff:bc:e2:1f:0a:11:61:90:e3:e0:a8:d0:2d:48:6a:ab:65:
         06:09:68:36:64:30:a1:7d:c7:ff:da:bb:6a:ed:1f:03:4c:50:
         03:52:b7:23:ac:00:66:0d:3e:f0:5d:85:20:4b:36:81:69:a4:
         ab:6b:20:a6:5a:9c:78:e8:26:9f:19:65:0a:68:72:ab:d1:ef:
         d1:03:3a:09:3a:d0:37:49:68:6c:14:c9:02:5a:7d:3f:24:c5:
         fd:ca:65:95:a6:d1:3a:94:39:18:bc:30:c6:96:0c:f2:17:12:
         52:cf:67:56:8e:65:d2:e6:87:e6:7d:87:d0:92:1f:0b:33:45:
         4a:30:92:10:5b:ab:bd:da:c6:01:c0:f4:52:f2:be:2c:d6:7f:
         e6:b7:bd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 18:42:12 2022 by LibreSSL & rpki-client.