RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/4xHu_bMIqKsqFSXc-si2Y93H6ys.cer (download)

Subject key identifier:   E3:11:EE:FD:B3:08:A8:AB:2A:15:25:DC:FA:C8:B6:63:DD:C7:EB:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/f5/41274f-c94d-4beb-8e17-944c65a6ee7f/1/4xHu_bMIqKsqFSXc-si2Y93H6ys.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/f5/41274f-c94d-4beb-8e17-944c65a6ee7f/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: IP: 2a11:500::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/4xHu_bMIqKsqFSXc-si2Y93H6ys.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 612150304234 (0x8e87005dea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 29 08:29:19 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e311eefdb308a8ab2a1525dcfac8b663ddc7eb2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1d:2f:8e:4c:5f:ff:ef:2e:00:cd:2e:9e:bf:
                    a2:c8:f4:c6:b3:39:1e:1d:83:99:b0:16:8f:12:30:
                    e1:a1:f1:4f:df:fc:14:cf:d0:a6:fe:89:bc:50:c1:
                    dc:ec:15:06:e1:49:cb:0b:9d:88:b0:ba:71:31:32:
                    6f:64:34:b4:45:67:38:9f:b7:4f:1e:85:40:df:83:
                    e3:95:c8:3b:d4:21:8f:7e:cf:5a:3c:14:a5:05:d9:
                    58:81:7c:0d:98:26:de:c3:a4:9a:9a:65:ce:91:65:
                    b7:8b:43:a1:8d:fc:03:7e:0e:a2:1f:c3:6e:e9:7c:
                    25:3e:03:e7:61:0e:6b:9d:db:b6:54:b3:a4:a0:0b:
                    80:f5:22:26:16:42:cc:a6:c2:7f:c8:fc:05:45:11:
                    f8:92:c0:bf:a6:2b:1e:5c:8c:1d:71:ce:3b:0f:ab:
                    d0:cb:a4:1f:11:3a:fd:2b:0d:ac:10:af:91:96:a4:
                    c9:0a:c5:b8:98:77:5d:74:c2:db:5f:45:e2:12:62:
                    81:13:8d:3c:86:84:f3:57:85:18:b4:c5:6b:6c:b4:
                    f6:7a:f0:ed:ff:e4:8b:c1:0b:e1:ea:00:8a:6e:21:
                    7d:ed:ec:9f:b5:28:a5:92:bf:8a:50:a9:ee:00:ee:
                    33:b6:fc:df:4d:32:4d:4c:7c:39:46:58:d8:7c:3e:
                    09:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E3:11:EE:FD:B3:08:A8:AB:2A:15:25:DC:FA:C8:B6:63:DD:C7:EB:2B
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41274f-c94d-4beb-8e17-944c65a6ee7f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41274f-c94d-4beb-8e17-944c65a6ee7f/1/4xHu_bMIqKsqFSXc-si2Y93H6ys.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:500::/29

    Signature Algorithm: sha256WithRSAEncryption
         24:4a:d7:5c:28:1d:d3:90:87:63:f6:7b:e5:df:b7:31:f6:a0:
         3f:22:f1:b1:21:cb:cd:4a:f2:3f:a4:74:58:6e:92:61:e8:bd:
         c4:01:ea:71:7f:c4:fc:a4:dd:5d:c0:52:6a:20:dc:c2:37:a6:
         5d:c4:87:a5:2a:84:7f:b0:f5:76:b5:60:bf:91:37:7f:a6:80:
         16:bc:46:3d:93:6e:fa:0b:16:1d:f3:5e:db:94:d4:8a:59:ac:
         27:56:dc:b2:00:64:95:b8:2f:a9:b5:71:2e:48:60:c6:9a:12:
         90:6e:52:1e:c0:55:9f:fc:5a:df:32:df:31:3d:1c:9c:dd:34:
         a9:b0:37:d7:89:b8:0c:ef:91:b4:01:0c:cf:1e:ac:20:8a:c2:
         61:9d:ed:f9:3b:b3:f3:4f:24:c3:50:ac:1b:e9:0d:0d:c1:2c:
         cc:0a:16:fe:a5:be:14:4b:af:7d:f3:ec:9b:0e:7c:2d:96:de:
         47:05:26:dc:3c:75:11:38:6d:0e:c2:36:72:34:26:5e:75:1a:
         5a:35:e8:a0:8a:50:3e:1d:59:7b:9b:cf:02:7a:23:0a:13:08:
         71:1f:35:cc:c1:98:3f:94:3a:9e:a7:c6:8b:46:18:e3:eb:ca:
         f6:a0:84:6a:75:51:99:95:11:04:5f:f2:77:37:84:73:0d:99:
         92:30:36:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:18:33 2021 by LibreSSL & rpki-client.