RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer (download)

Subject key identifier:   EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: AS: 41059
    2: AS: 41313
    1: IP: 31.211.128.0/19
    2: IP: 46.35.160.0/19
    3: IP: 79.110.120.0/21
    4: IP: 80.95.16.0 -- 80.95.21.255
    5: IP: 93.152.240.0/21
    6: IP: 93.175.246.0/23
    7: IP: 95.158.128.0/18
    8: IP: 151.252.192.0/20
    9: IP: 185.1.40.0/24
    10: IP: 185.18.228.0/22
    11: IP: 185.40.164.0/22
    12: IP: 212.21.128.0/19
    13: IP: 2001:7f8:98::/48
    14: IP: 2a00:e200::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 696406013555 (0xa225087673)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:05:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:df:21:55:f0:2e:3b:a4:d5:0e:e6:27:50:6b:
                    70:5d:c0:88:55:58:f8:ae:bf:80:87:68:c3:36:e0:
                    98:81:33:82:c0:f9:fd:5a:34:11:91:7f:81:44:18:
                    9e:2c:d5:2e:80:33:52:2b:98:e3:2c:bb:34:f8:15:
                    3e:ae:44:5e:ae:39:55:b2:1a:17:84:b3:ee:20:3d:
                    63:f8:e1:f1:c2:f6:aa:69:05:88:d2:24:7b:38:ae:
                    26:1f:f1:1c:b7:77:b5:f8:f7:3b:36:45:66:e9:13:
                    55:6c:f0:02:4a:9f:02:f5:e5:c2:d3:cc:cf:f5:60:
                    0a:0c:a0:56:a4:81:59:2d:a2:8f:89:dc:b4:e7:f2:
                    8f:39:76:a5:86:4b:2f:5b:e0:81:89:fb:58:cb:cb:
                    ef:69:95:f4:8d:f9:9c:cf:d1:52:52:63:c1:7d:83:
                    81:52:e2:77:07:9d:cb:b0:3e:a5:82:e5:a2:99:18:
                    11:53:de:55:2a:53:75:0d:b0:43:30:c4:d9:4d:df:
                    63:b4:04:f2:3e:7f:71:bc:72:20:6c:18:cd:a1:0e:
                    bc:a3:01:34:92:ea:40:2f:87:e4:c7:31:60:c0:48:
                    4e:58:00:b7:22:2a:9a:6e:3b:8f:e3:f0:9f:bd:a4:
                    cf:61:22:14:2d:41:e3:d3:e7:67:0b:40:9f:1d:d8:
                    44:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.211.128.0/19
                  46.35.160.0/19
                  79.110.120.0/21
                  80.95.16.0-80.95.21.255
                  93.152.240.0/21
                  93.175.246.0/23
                  95.158.128.0/18
                  151.252.192.0/20
                  185.1.40.0/24
                  185.18.228.0/22
                  185.40.164.0/22
                  212.21.128.0/19
                IPv6:
                  2001:7f8:98::/48
                  2a00:e200::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41059
                  41313

    Signature Algorithm: sha256WithRSAEncryption
         29:97:64:d0:61:7a:40:c5:c1:e0:5e:9e:67:fb:4a:61:a7:fd:
         70:17:58:93:fe:d7:90:f4:d0:dd:7e:bb:49:3c:8a:8f:c3:d0:
         99:91:ff:67:50:85:67:65:92:47:1e:50:42:df:02:e6:6d:b5:
         ce:19:e4:ec:87:54:b2:97:9c:1d:f4:95:8f:9e:49:1a:a6:4a:
         86:d5:df:ef:ce:18:97:77:b6:86:af:61:7f:62:17:a2:dd:57:
         7a:fa:c7:b5:9f:84:f7:1e:93:2e:4e:8b:2c:ff:9a:b0:be:ce:
         eb:92:1f:66:b8:9b:6f:b7:93:c0:d6:0c:fa:dd:6e:8f:58:1b:
         0f:99:49:16:9b:a8:da:46:2f:b3:f2:4f:7f:b8:db:53:60:4f:
         b6:7a:b1:2e:ab:5f:61:37:6f:f0:78:43:46:7d:8d:40:6c:40:
         27:e3:22:07:b4:a4:0d:d2:00:c1:8a:f7:ee:92:88:2e:13:3a:
         41:b0:40:8c:3e:da:c1:bd:74:92:5a:c4:c2:41:f8:fb:f7:a9:
         81:12:4c:93:86:b0:88:ce:82:a1:c6:7e:6a:17:26:c6:ed:4c:
         11:60:11:0a:b8:75:60:a4:d7:e8:d8:c7:0d:32:a4:f1:f6:cb:
         ec:42:cc:32:6e:1d:b7:4b:43:10:31:b0:cf:a7:44:48:e8:e0:
         a0:4a:5f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 10:11:02 2022 by LibreSSL & rpki-client.