RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer (download)

Subject key identifier:   E7:AE:03:32:9E:3C:0F:73:EA:83:FB:63:7C:A2:0A:EC:E1:6A:8E:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: AS: 204558
    1: IP: 79.170.72.0/21
    2: IP: 85.118.168.0/21
    3: IP: 185.29.0.0/22
    4: IP: 188.95.200.0/21
    5: IP: 2a00:91c0::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 719093814777 (0xa76d54d5f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:59:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e7ae03329e3c0f73ea83fb637ca20aece16a8eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:74:e1:f4:e2:b0:d8:c4:d9:47:37:ab:56:2a:
                    8f:f1:0a:89:71:65:2e:6e:3b:8e:fb:b8:66:e0:46:
                    e8:74:1e:ec:3f:8a:85:f5:be:55:e7:5b:d4:8f:bd:
                    c5:d6:bd:76:9f:5c:3b:c4:ed:71:52:c3:b8:26:6f:
                    d2:53:e4:e5:54:6a:77:a9:df:59:7e:d2:b9:a3:66:
                    2f:71:73:79:d9:bf:ee:de:ee:4b:b9:26:8b:c5:b6:
                    78:42:f6:27:06:44:ec:06:9f:9e:44:78:79:5b:83:
                    79:3b:0c:68:c8:39:b2:34:6e:7e:0b:3a:d8:f8:75:
                    b1:0c:1e:2c:1b:ac:40:8d:38:37:47:e6:38:69:86:
                    a0:4b:3d:71:91:c9:88:db:45:ef:62:58:33:98:07:
                    38:cf:49:b0:6e:0b:55:71:91:a6:63:df:0f:a8:cb:
                    4d:f0:5f:71:8d:e8:73:11:ab:31:28:18:b7:84:6e:
                    f2:8c:28:97:24:58:13:0a:d1:ca:62:0a:bd:38:4f:
                    85:12:64:01:fe:9e:8f:43:25:f6:ab:15:69:66:79:
                    64:85:cb:7e:0b:8b:76:4b:7a:74:3e:2a:30:7f:21:
                    62:6f:58:ba:20:0c:5f:fe:12:df:dd:f4:66:39:f4:
                    cb:1f:ba:8f:6a:cd:e9:45:9e:61:be:85:92:f4:23:
                    f9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E7:AE:03:32:9E:3C:0F:73:EA:83:FB:63:7C:A2:0A:EC:E1:6A:8E:B4
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.170.72.0/21
                  85.118.168.0/21
                  185.29.0.0/22
                  188.95.200.0/21
                IPv6:
                  2a00:91c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204558

    Signature Algorithm: sha256WithRSAEncryption
         a1:64:d8:68:5e:0f:50:f0:bd:cb:c8:2d:8c:08:31:8c:93:3f:
         f7:d8:fc:66:49:04:72:b2:7d:d2:ae:aa:68:31:14:87:87:8f:
         a4:33:b6:42:e0:42:a2:42:54:63:60:9c:c7:69:37:ba:ef:ec:
         b2:33:dc:60:68:2b:32:5a:4b:6d:9b:ab:2c:76:1b:bc:29:9a:
         34:2a:f3:3c:11:22:e0:b5:de:3b:1d:b4:15:5a:cf:cc:4f:3e:
         20:74:e0:7e:7e:85:df:f5:f3:0f:a6:12:a6:55:0c:e1:3c:3a:
         32:5f:e0:06:52:8e:c4:e9:3d:23:73:d9:17:73:9a:82:58:77:
         96:ba:4a:86:b4:14:ff:eb:35:e1:05:81:e4:43:9f:cd:05:12:
         b6:dc:c6:62:3b:18:0a:8b:c7:a8:bc:96:62:8a:5f:e3:36:43:
         d5:91:ad:5c:e8:09:e3:6c:b9:d5:d9:29:71:7c:a0:a1:76:ce:
         1b:f7:0a:99:d3:37:dd:e1:e5:59:3f:92:09:d9:75:93:85:75:
         63:de:b6:3c:8b:31:05:ba:ff:3e:f8:58:47:43:ea:ea:fb:d4:
         e9:9a:3c:9c:26:71:a0:7c:50:52:4b:32:d7:b4:99:cb:00:2e:
         48:9b:2e:78:b3:cd:38:13:9c:8c:5b:12:59:e8:d0:3d:37:8b:
         6d:a7:ed:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 15:16:43 2022 by LibreSSL & rpki-client.