RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/4sIeVLsyBabjmedSUVq_Yt8bhok.cer (download)

Subject key identifier:   E2:C2:1E:54:BB:32:05:A6:E3:99:E7:52:51:5A:BF:62:DF:1B:86:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/85/391cd8-9265-4729-804a-d49fac1195c4/1/4sIeVLsyBabjmedSUVq_Yt8bhok.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/85/391cd8-9265-4729-804a-d49fac1195c4/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: AS: 204669
    1: IP: 185.243.96.0/22

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/4sIeVLsyBabjmedSUVq_Yt8bhok.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609029280056 (0x8dccf95138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 12 19:13:06 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e2c21e54bb3205a6e399e752515abf62df1b8689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1b:35:1d:24:23:8c:56:ac:75:0c:06:ad:6c:
                    64:91:b7:d4:2d:7c:b3:8c:88:14:9f:03:ab:7f:27:
                    bb:5a:07:ad:c6:09:fc:e3:30:1c:18:bb:df:9e:f4:
                    2f:24:0e:30:b3:01:de:36:a0:00:2f:87:62:64:d9:
                    db:bc:33:e1:84:1b:96:c4:74:bd:86:a7:d9:db:e3:
                    89:a6:1b:1a:4a:a8:58:dc:b6:5d:e3:01:61:d5:13:
                    1f:f7:e6:19:38:78:91:85:bd:e8:9f:83:3d:a1:9f:
                    2e:b6:7a:7e:4b:2e:aa:7f:68:13:b3:ad:ac:d9:41:
                    43:b7:c2:e7:56:b9:39:3c:98:4a:80:38:7b:7e:2f:
                    5b:1f:a6:b8:62:bf:f6:b5:16:f1:cb:70:d8:2b:9c:
                    08:3e:dd:58:32:01:ef:bb:d8:01:0c:66:3a:c1:e8:
                    46:f8:42:fe:4a:ea:a0:41:5f:18:b8:d3:96:34:70:
                    ba:09:57:01:c2:9f:20:77:a4:62:cf:9c:ce:30:70:
                    e8:62:cb:79:08:a1:f5:61:61:ba:81:a4:3c:bc:ae:
                    11:e2:c5:90:86:43:44:c8:47:4d:85:ac:68:dc:cf:
                    61:71:03:cb:ff:9e:81:0e:76:a7:ba:0a:bf:22:25:
                    01:ff:db:48:64:7a:86:16:03:af:00:92:a8:12:74:
                    b2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E2:C2:1E:54:BB:32:05:A6:E3:99:E7:52:51:5A:BF:62:DF:1B:86:89
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/391cd8-9265-4729-804a-d49fac1195c4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/391cd8-9265-4729-804a-d49fac1195c4/1/4sIeVLsyBabjmedSUVq_Yt8bhok.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.243.96.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204669

    Signature Algorithm: sha256WithRSAEncryption
         4b:05:6c:77:2b:25:fe:fa:92:aa:13:69:0f:6c:32:86:3c:89:
         a6:be:e5:cb:50:77:60:3e:f3:a2:81:4d:28:1f:fd:b1:19:76:
         4e:45:25:40:8b:01:5c:92:a5:a3:b9:8f:73:69:67:04:5f:cf:
         cc:42:f7:1a:c3:34:51:d6:9a:e5:24:a5:28:cd:52:bd:f2:ed:
         0f:07:5c:1f:c1:c9:e7:45:15:02:f1:c6:5e:ca:32:05:c6:c9:
         41:3d:48:be:3b:7e:78:45:b4:49:27:ec:39:a7:8b:5b:4c:05:
         53:72:4a:bf:1c:6f:8a:e0:80:2c:9c:ee:fc:32:8f:26:5f:b7:
         d5:a7:d7:64:a6:6e:ff:b1:f7:ae:29:9c:33:04:c0:e6:86:7f:
         e5:aa:7c:6e:5f:8b:bd:7d:6a:59:d7:22:7d:8e:4c:65:b7:9b:
         df:45:e1:40:07:f3:37:92:60:3f:b7:d1:8a:40:e0:20:d8:7f:
         43:a1:bb:36:c2:1d:c4:f9:2b:9b:dc:07:84:f7:5f:66:39:31:
         46:6d:4b:28:6f:5d:3d:59:f6:b4:a1:1f:1e:88:db:27:e4:0e:
         50:49:5d:c0:16:1e:12:82:68:ae:9e:5e:07:e1:13:bc:b6:cd:
         40:63:be:07:a1:24:37:d9:22:de:3f:72:1f:c7:6c:63:73:08:
         66:38:c8:a4
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgIGAI3M+VE4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjEw
NzEyMTkxMzA2WhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhlMmMyMWU1NGJi
MzIwNWE2ZTM5OWU3NTI1MTVhYmY2MmRmMWI4Njg5MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAjxs1HSQjjFasdQwGrWxkkbfULXyzjIgUnwOrfye7Wget
xgn84zAcGLvfnvQvJA4wswHeNqAAL4diZNnbvDPhhBuWxHS9hqfZ2+OJphsaSqhY
3LZd4wFh1RMf9+YZOHiRhb3on4M9oZ8utnp+Sy6qf2gTs62s2UFDt8LnVrk5PJhK
gDh7fi9bH6a4Yr/2tRbxy3DYK5wIPt1YMgHvu9gBDGY6wehG+EL+SuqgQV8YuNOW
NHC6CVcBwp8gd6Riz5zOMHDoYst5CKH1YWG6gaQ8vK4R4sWQhkNEyEdNhaxo3M9h
cQPL/56BDnanugq/IiUB/9tIZHqGFgOvAJKoEnSyaQIDAQABo4ICoDCCApwwHQYD
VR0OBBYEFOLCHlS7MgWm45nnUlFav2LfG4aJMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg1LzM5MWNkOC05MjY1LTQ3Mjkt
ODA0YS1kNDlmYWMxMTk1YzQvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvMzkxY2Q4LTkyNjUtNDcyOS04
MDRhLWQ0OWZhYzExOTVjNC8xLzRzSWVWTHN5QmFiam1lZFNVVnFfWXQ4Ymhvay5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCufNgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMffTANBgkqhkiG
9w0BAQsFAAOCAQEASwVsdysl/vqSqhNpD2wyhjyJpr7ly1B3YD7zooFNKB/9sRl2
TkUlQIsBXJKlo7mPc2lnBF/PzEL3GsM0Udaa5SSlKM1SvfLtDwdcH8HJ50UVAvHG
XsoyBcbJQT1Ivjt+eEW0SSfsOaeLW0wFU3JKvxxviuCALJzu/DKPJl+31afXZKZu
/7H3rimcMwTA5oZ/5ap8bl+LvX1qWdcifY5MZbeb30XhQAfzN5JgP7fRikDgINh/
Q6G7NsIdxPkrm9wHhPdfZjkxRm1LKG9dPVn2tKEfHojbJ+QOUEldwBYeEoJorp5e
B+ETvLbNQGO+B6EkN9ki3j9yH8dsY3MIZjjIpA==
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:18:31 2021 by LibreSSL & rpki-client.