RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer (download)

Subject key identifier:   E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: IP: 185.159.196.0/22

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 680409965425 (0x9e6b982371)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:02:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:00:7d:bb:a3:54:b0:c7:ab:96:22:d5:de:4e:
                    99:cf:a7:8d:21:99:c7:76:4f:bd:e9:d7:51:71:e4:
                    16:dd:c5:b4:88:cd:13:96:0c:5f:55:95:76:59:63:
                    f8:45:12:1b:0b:86:8b:14:02:dd:0e:b8:9a:91:a4:
                    2e:41:bb:1b:8d:2b:74:d8:5e:a0:df:a9:a5:4d:ed:
                    d9:e4:89:4d:9f:36:ff:dd:34:b0:a2:5b:0a:c0:b1:
                    7d:55:b7:fc:bf:8b:18:f2:4b:6e:86:e2:98:bf:43:
                    78:2b:a6:07:1e:ab:ae:92:b3:a7:a9:71:28:27:77:
                    4f:3f:f6:83:98:cb:87:ad:aa:50:80:50:7b:db:95:
                    ad:19:e5:29:07:8a:99:dd:b2:3f:9b:5c:b4:43:3c:
                    8d:e7:bd:de:d8:36:4a:8c:d8:f3:a2:7d:ac:6b:5a:
                    d8:ec:36:b9:6c:89:d9:65:ae:ec:59:a4:0f:67:4e:
                    c5:73:a2:79:51:d5:1d:89:1d:d2:b7:b9:0c:d2:79:
                    72:60:38:98:18:cb:3d:bb:4b:00:da:f0:8b:80:65:
                    79:8a:21:98:98:09:28:08:ce:b1:c9:f2:ab:ae:27:
                    d9:09:b4:f3:d5:22:b8:4e:b1:f2:29:db:44:ee:6f:
                    75:f7:26:40:3f:c6:e1:db:68:55:e6:fb:6b:93:99:
                    d6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.159.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:5e:02:06:33:78:85:33:12:ce:2f:b1:89:7e:38:be:75:0e:
         a4:db:14:4d:37:9f:3b:0a:1f:0d:1a:e2:70:d4:94:18:1b:08:
         6a:3c:bb:6e:73:58:30:6a:dc:23:0f:f5:16:5b:a4:5c:a4:8d:
         f1:63:5c:0f:38:74:67:6a:fa:b1:db:2d:7a:9f:c2:2e:60:f5:
         00:56:04:4c:52:9e:fd:76:40:f4:a9:90:99:bb:83:3b:f0:b3:
         fd:9b:53:f8:13:41:c5:7d:4b:15:da:26:9a:69:02:bf:2a:53:
         67:69:10:00:6e:d0:89:5e:4c:8c:ba:c6:c5:2d:48:19:b9:6e:
         60:b4:17:0b:dc:9c:29:67:b5:f1:33:45:7c:50:03:26:ab:16:
         8f:44:45:ea:9c:57:b5:93:44:d6:e2:82:04:ec:7a:f8:1a:3f:
         9e:79:cc:d6:ec:30:50:b2:aa:09:b3:02:53:4f:c9:09:f4:56:
         04:21:f7:c8:bf:46:55:42:c3:7e:05:f0:15:89:d3:25:4e:88:
         9e:97:65:46:f6:e2:ed:29:e4:47:47:0f:03:41:35:27:8e:6e:
         1d:6f:9e:24:b4:77:fd:6b:e1:bd:76:b1:29:d3:b3:8d:28:f2:
         91:74:4a:e6:fb:45:ee:d4:29:51:3c:3e:60:4d:e1:3e:ab:f7:
         87:d8:c8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 08:21:07 2022 by LibreSSL & rpki-client.