RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/7BG20O5rnsz-NOxQaidQeMOezLM.cer (download)

Subject key identifier:   EC:11:B6:D0:EE:6B:9E:CC:FE:34:EC:50:6A:27:50:78:C3:9E:CC:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/7BG20O5rnsz-NOxQaidQeMOezLM.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: AS: 208172
    1: IP: 45.156.60.0/22
    2: IP: 2a0f:1680::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/7BG20O5rnsz-NOxQaidQeMOezLM.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545216736047 (0x7ef1732b2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:05:01 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=ec11b6d0ee6b9eccfe34ec506a275078c39eccb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:03:a9:d6:17:6c:39:77:ea:81:71:bf:be:15:
                    53:8c:b0:26:47:bf:a1:9b:64:8f:db:4b:d1:1c:29:
                    f5:44:23:cc:a3:7c:49:79:12:a6:52:a7:c3:6f:2d:
                    4b:7c:23:8c:7f:b6:0b:96:f5:c8:77:68:59:42:dd:
                    85:eb:00:8b:39:c5:4d:22:77:c4:9c:67:bb:f2:68:
                    d8:57:1b:d4:d0:59:bf:39:36:a3:08:22:bb:dd:94:
                    db:9b:c9:ae:fa:ee:f9:7e:9e:bd:db:25:09:7a:42:
                    a5:cc:94:62:ea:73:6c:d5:64:73:bb:3e:3a:6b:d1:
                    7b:15:f3:7c:84:f8:d3:ce:14:c3:97:fd:cf:e8:ef:
                    7e:1e:b5:27:99:b3:6d:2e:c1:b1:64:e7:97:76:a6:
                    7f:f8:9a:d2:16:d8:b2:b8:f0:00:be:bd:b5:69:4e:
                    4e:f9:5a:9a:7a:36:b9:f2:9b:7e:ad:6f:b3:8c:23:
                    db:f4:89:80:3a:ff:26:bf:fe:84:6b:3e:13:b0:cd:
                    6f:bc:41:c4:e2:45:0b:ae:06:6f:74:1b:c8:92:53:
                    b3:7d:d6:fc:0e:95:38:ae:23:20:4c:6c:93:19:da:
                    67:e5:ad:38:7c:f6:c5:81:fa:ef:4a:a5:1c:f0:26:
                    f0:f4:c7:43:3e:10:7a:0e:19:ab:83:d5:43:a3:05:
                    85:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                EC:11:B6:D0:EE:6B:9E:CC:FE:34:EC:50:6A:27:50:78:C3:9E:CC:B3
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/7BG20O5rnsz-NOxQaidQeMOezLM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.156.60.0/22
                IPv6:
                  2a0f:1680::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208172

    Signature Algorithm: sha256WithRSAEncryption
         44:ed:0e:ee:f2:4d:ed:a4:54:1e:b3:f1:72:da:6e:15:4e:5b:
         94:ca:90:30:94:c9:1d:7f:0f:53:8c:e2:c1:3c:85:dd:4f:7e:
         28:98:a5:85:c0:91:26:30:54:cc:24:73:8d:58:de:97:32:92:
         59:e2:ad:68:ab:bf:e0:a0:77:7f:82:88:78:de:58:e5:e7:74:
         f5:6c:c2:3f:c4:48:15:2c:95:f9:e6:09:c6:b9:0c:29:f8:d0:
         dc:d8:94:e3:31:26:58:b3:d2:c0:cc:0b:34:d5:e4:be:f8:0b:
         69:e0:29:bb:60:2c:60:4e:de:71:dc:06:0c:45:9d:68:53:37:
         13:c0:f8:e9:b8:7a:75:12:01:58:93:7d:8e:6d:72:8f:b4:21:
         05:63:30:db:7f:b9:01:28:82:ce:fa:9b:42:ff:48:c3:58:35:
         fa:b6:ae:3a:6b:de:69:16:7e:db:69:09:ba:f8:31:22:fe:b5:
         29:ee:2c:1d:83:ea:9f:2e:48:44:c7:29:bd:1c:6d:a9:5c:5a:
         cb:51:cb:1d:fd:c5:3a:4c:36:5b:7d:93:e0:8b:cb:fa:31:6b:
         20:88:62:92:34:a5:e2:92:88:a7:7c:2c:2a:3f:7f:be:2b:78:
         e2:3e:cb:34:82:58:d9:d1:44:86:0a:7f:05:7f:cc:a5:4e:b2:
         f8:18:3a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Sep 17 14:44:13 2021 by LibreSSL & rpki-client.