RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/5xY0KR-jBxo-SRkOdxqcPUWDv8k.cer (download)

Subject key identifier:   E7:16:34:29:1F:A3:07:1A:3E:49:19:0E:77:1A:9C:3D:45:83:BF:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/10/9c3caf-9bc4-4e7c-b7ac-3079da214221/1/5xY0KR-jBxo-SRkOdxqcPUWDv8k.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/10/9c3caf-9bc4-4e7c-b7ac-3079da214221/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: IP: 45.157.176.0/22

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/5xY0KR-jBxo-SRkOdxqcPUWDv8k.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 731266954224 (0xaa42e833f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:06:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e71634291fa3071a3e49190e771a9c3d4583bfc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b6:19:a7:28:43:e7:f5:a2:21:f2:01:84:ce:
                    49:a4:82:12:2e:a9:7a:e4:6b:5b:ca:6d:59:e2:8b:
                    c7:97:46:99:87:52:26:bb:5e:11:c8:b4:f4:9c:e7:
                    85:b1:cf:86:8c:6a:f0:ea:4c:55:0d:c6:32:85:29:
                    bd:5c:34:aa:c5:64:4a:e4:6f:b2:a5:9e:29:c7:99:
                    70:83:7b:46:25:29:81:d4:6d:e7:62:b9:71:5a:c1:
                    3c:34:a7:ee:59:2b:56:fc:cc:e2:ee:a4:2b:53:82:
                    7b:a5:0c:2e:2d:60:1a:a5:27:2c:f7:88:d2:a7:96:
                    bb:59:3d:be:bd:38:08:e5:d1:f9:a5:19:ab:c8:a2:
                    96:14:13:a9:e3:3f:84:f5:3a:d4:94:e1:b2:d6:7d:
                    d7:bf:ef:f5:b6:83:81:79:6b:bc:74:81:fd:ec:dd:
                    3c:32:f3:ce:1e:07:84:b3:55:51:3c:d4:51:4c:87:
                    4a:e7:8e:2a:84:82:df:4b:4f:30:50:c9:b9:ca:df:
                    07:2e:27:22:41:c9:6e:da:85:d7:8c:4c:69:c9:55:
                    c7:1f:9b:61:28:d3:29:81:50:46:fb:0f:4f:15:25:
                    db:9e:3a:27:0d:56:8e:b1:ec:d7:af:4f:9a:64:d6:
                    14:b0:2c:ad:61:5f:76:71:bb:6e:7c:83:d4:54:74:
                    45:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E7:16:34:29:1F:A3:07:1A:3E:49:19:0E:77:1A:9C:3D:45:83:BF:C9
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9c3caf-9bc4-4e7c-b7ac-3079da214221/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9c3caf-9bc4-4e7c-b7ac-3079da214221/1/5xY0KR-jBxo-SRkOdxqcPUWDv8k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.157.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:c1:bb:94:a9:d9:ec:1a:ec:d5:7c:89:0f:ee:56:1e:35:51:
         2f:24:fe:fa:82:eb:1f:73:9e:eb:3d:c6:f1:e9:d0:02:39:34:
         45:ad:d0:09:81:7e:8f:9d:b5:d2:48:92:1a:72:93:50:95:83:
         70:aa:6e:8f:37:4b:e4:79:c8:e4:d8:19:45:a6:7c:16:fe:30:
         ae:ad:ce:97:d7:39:3a:fb:e2:c0:72:c6:8c:c3:1c:fd:74:b7:
         7e:8e:d0:94:49:d6:49:65:93:56:ba:16:a0:ac:05:92:3f:76:
         99:e4:f4:fc:43:ba:9c:60:f6:b3:8b:92:74:f9:1b:68:56:77:
         eb:04:35:e8:19:b0:30:8d:e2:0a:77:b7:4f:0d:fc:d6:3f:a0:
         8d:02:17:5f:e4:b9:ab:36:91:ff:8d:ca:c9:45:5a:f4:c6:6e:
         12:90:ae:8f:92:e9:d9:a7:06:1e:af:05:1b:3e:20:08:e8:11:
         ec:8b:47:87:12:c0:c9:e8:89:ca:bf:e9:f4:e7:d5:d5:be:26:
         b4:4e:0f:d0:32:45:54:8d:4d:bc:4a:38:1d:c7:52:47:51:93:
         67:83:af:45:fb:4b:16:03:6d:ed:42:39:e2:bb:67:25:60:6f:
         03:85:03:40:41:89:ea:11:a9:98:3b:0f:ff:20:16:ac:e8:34:
         72:d7:96:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 16:57:43 2022 by LibreSSL & rpki-client.