RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/5NBQg5nWe_-xLlN4p6C0UOYDd4Y.cer (download)

Subject key identifier:   E4:D0:50:83:99:D6:7B:FF:B1:2E:53:78:A7:A0:B4:50:E6:03:77:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/01/b22298-9dec-435c-aa2c-ad5075b7a9c5/1/5NBQg5nWe_-xLlN4p6C0UOYDd4Y.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/01/b22298-9dec-435c-aa2c-ad5075b7a9c5/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: IP: 45.138.220.0/22

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/5NBQg5nWe_-xLlN4p6C0UOYDd4Y.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 610453493087 (0x8e21dd155f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 19 15:00:43 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e4d0508399d67bffb12e5378a7a0b450e6037786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:01:42:3d:23:79:64:d8:79:bc:8d:a2:ad:f9:
                    73:2a:9e:32:d8:5e:77:49:d2:27:14:de:d0:4d:1e:
                    92:04:c4:60:d1:17:9b:2d:3f:f3:55:5f:d9:37:52:
                    27:90:96:76:46:2f:fc:6d:b8:fa:36:65:10:0a:42:
                    1f:19:64:06:41:d5:7d:74:a4:2d:2a:cf:bc:36:16:
                    37:d0:40:e6:5f:db:40:d5:bd:80:f4:41:0a:dd:83:
                    fd:0c:23:36:43:ad:3c:45:a1:2a:be:fb:01:66:8c:
                    ce:55:a4:a4:f9:db:49:d7:33:2d:b6:15:67:8e:b5:
                    f0:ae:90:94:35:13:a5:b1:cb:6c:bb:91:7f:0e:ef:
                    9c:74:02:f5:07:8c:4f:26:85:42:38:2a:9a:76:d9:
                    fa:7a:34:ba:ab:6c:4e:6b:e7:53:e6:10:13:67:2c:
                    e6:1d:d6:7f:2d:f1:92:a9:55:26:93:b5:cd:5c:58:
                    53:29:29:ae:8e:90:b9:b0:89:85:a2:30:c4:4a:23:
                    49:38:bb:7c:3f:dc:2a:59:73:79:cd:32:72:48:f7:
                    b6:04:b6:21:d2:4b:9f:a5:c3:93:0c:72:35:a6:fc:
                    76:27:d5:67:f4:b0:50:bb:78:38:eb:82:95:f2:88:
                    18:1c:4b:18:38:cb:9c:29:6f:ee:79:16:4a:0a:d2:
                    80:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E4:D0:50:83:99:D6:7B:FF:B1:2E:53:78:A7:A0:B4:50:E6:03:77:86
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/b22298-9dec-435c-aa2c-ad5075b7a9c5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/b22298-9dec-435c-aa2c-ad5075b7a9c5/1/5NBQg5nWe_-xLlN4p6C0UOYDd4Y.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.138.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:b1:ce:25:3e:e9:f6:3a:8b:a6:07:33:00:29:15:fa:b8:03:
         5f:27:d9:86:d8:e2:39:a3:b6:15:aa:e4:d2:82:85:41:3d:d5:
         10:7a:46:2e:89:e4:5d:56:1e:fb:19:58:53:9b:95:fc:9f:39:
         c5:ad:46:e8:6b:a4:32:f5:12:40:3e:e5:7b:e8:51:89:3f:23:
         90:be:85:d5:f3:39:61:02:88:d1:ca:23:cc:55:09:9d:0e:d0:
         07:b2:3f:f3:c8:08:58:8d:13:bc:a7:ab:e1:59:16:88:de:ed:
         1a:da:cb:c0:a2:2d:9d:be:f5:61:a6:e4:a2:88:65:0e:bd:19:
         f3:7f:57:46:00:23:d8:1e:bc:b3:55:68:26:1c:ce:e1:eb:dc:
         49:7b:2a:9b:84:f0:c7:d0:3e:17:e4:a6:b7:5b:ad:e5:96:43:
         59:68:e1:1f:b6:56:79:34:18:3d:77:ce:44:35:69:a3:80:43:
         76:20:00:e2:dc:23:bb:27:f1:51:33:40:ed:fb:59:4b:0d:84:
         53:01:63:65:fc:71:e3:a0:33:96:aa:24:ea:14:94:32:ac:4c:
         a2:c4:46:a8:21:93:9c:56:11:86:17:8e:a6:7d:bf:b2:1e:ef:
         f4:24:46:fc:92:9f:cd:23:28:8d:2f:41:c3:ac:3a:f0:83:9a:
         cc:44:d3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Mon Sep 20 13:42:49 2021 by LibreSSL & rpki-client.