RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer (download)

Subject key identifier:   E7:40:EE:D2:8F:2D:99:4E:B2:B8:31:CB:8E:FC:64:70:30:6D:74:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: AS: 42600
    1: IP: 185.46.88.0/22
    2: IP: 185.139.200.0/22
    3: IP: 2a04:a740::/29

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 739027775964 (0xac117cf1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 19 13:59:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e740eed28f2d994eb2b831cb8efc6470306d7461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8d:6d:5a:a6:71:33:d9:20:c2:4b:32:1d:0f:
                    b0:3e:e5:c9:6a:fb:e1:2b:ae:d4:5d:16:a4:cb:a1:
                    b0:82:29:ee:44:4f:6d:00:3b:72:19:e3:88:76:00:
                    55:d0:f9:bc:f7:06:64:11:39:b3:ee:9c:9c:23:4a:
                    14:4c:ec:56:af:de:18:96:56:b0:df:93:88:23:6b:
                    08:de:1e:29:89:28:9d:62:88:7f:ad:f7:05:98:e2:
                    f0:50:10:6b:d2:12:95:fb:82:e1:0c:0c:10:57:0d:
                    76:31:5d:09:d2:26:6f:c3:1b:cd:06:4a:2e:54:5f:
                    da:8e:ae:01:b0:5f:00:84:53:7f:48:9a:4e:87:9a:
                    51:54:ac:92:e2:ba:63:5c:bf:4e:96:3f:80:40:cd:
                    be:18:71:a0:c4:7c:dd:b8:a6:04:e7:c6:55:f2:4e:
                    15:03:a5:e8:ab:5f:e8:13:51:7b:a9:5d:cc:bf:e2:
                    df:a3:c1:7a:c8:67:c1:12:01:07:12:80:c5:22:20:
                    27:d5:da:25:a1:11:b2:76:0b:c1:8d:94:f5:e6:c7:
                    ce:85:78:b8:92:0a:7e:a0:eb:a7:55:de:a6:38:06:
                    69:41:e5:67:29:31:e4:be:f4:1e:e8:3b:ca:9a:a8:
                    ff:de:3e:a1:63:bc:12:0c:aa:7e:77:24:50:f6:06:
                    22:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E7:40:EE:D2:8F:2D:99:4E:B2:B8:31:CB:8E:FC:64:70:30:6D:74:61
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.46.88.0/22
                  185.139.200.0/22
                IPv6:
                  2a04:a740::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42600

    Signature Algorithm: sha256WithRSAEncryption
         28:9f:4e:e8:08:be:c9:80:d3:f7:d4:5e:ef:5d:bc:94:d6:b8:
         4d:8e:cb:0f:91:70:8c:ae:74:b7:c1:90:1a:de:74:57:ac:6c:
         b7:37:76:56:bd:28:2c:54:b8:80:9f:f7:6f:ba:a6:0d:1d:7d:
         fe:e7:9d:44:5e:b9:9a:b6:71:7a:58:01:2d:d7:37:89:89:e5:
         00:2b:08:61:26:0a:c8:f9:de:5a:bb:07:90:f3:30:5c:93:3f:
         6f:ce:76:79:4c:4d:27:6f:0f:6d:5c:26:86:26:f9:62:ce:34:
         64:0a:5c:ff:88:12:b0:ab:0a:08:62:a8:5b:3c:3a:2f:a8:dd:
         75:98:5c:3c:e7:32:99:5a:c8:f7:d2:1f:6b:75:ea:d9:d5:70:
         e4:c0:9e:7e:06:37:ee:b6:4f:5a:ce:ee:1b:b3:50:54:dd:24:
         fd:7d:b3:f3:14:df:62:13:a5:a1:87:0e:59:57:2f:1e:8e:a4:
         ee:6f:d5:07:86:90:39:d9:f1:81:f3:86:75:65:e1:d0:9b:fd:
         81:63:24:e9:d5:b8:a1:05:86:49:03:bd:de:50:45:22:30:04:
         1a:1b:c2:00:6c:11:b6:db:d1:4e:b7:f7:b5:40:d8:00:97:6b:
         7d:8a:bb:60:4f:2e:b8:c9:4a:84:89:8c:ed:7f:fa:0d:68:10:
         2f:05:76:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Jan 19 23:01:23 2022 by LibreSSL & rpki-client.