RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/7KLpXDl5RMPObT9DcUiLc55C5C4.cer (download)

Subject key identifier:   EC:A2:E9:5C:39:79:44:C3:CE:6D:3F:43:71:48:8B:73:9E:42:E4:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/ec/5954db-9cd5-4357-a211-7993972840b6/1/7KLpXDl5RMPObT9DcUiLc55C5C4.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/ec/5954db-9cd5-4357-a211-7993972840b6/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: AS: 210760
    1: IP: 188.95.68.0/24
    2: IP: 2a11:14c0::/29

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/7KLpXDl5RMPObT9DcUiLc55C5C4.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 709919430733 (0xa54a7ed84d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:00:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eca2e95c397944c3ce6d3f4371488b739e42e42e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0e:0c:7a:eb:9a:09:33:8b:2b:bc:f4:c5:dd:
                    aa:73:e1:f1:2f:06:4a:95:2e:ad:c1:c9:32:67:d2:
                    fc:6d:7e:ca:90:88:b3:0e:da:65:2e:e6:ec:d4:b5:
                    02:a5:76:1b:2d:c4:f4:d4:9d:f6:7e:22:2d:e5:fd:
                    24:aa:3d:96:c9:ab:15:4d:09:15:3d:20:5e:c9:e3:
                    30:b2:0d:38:07:70:ef:72:95:e2:1a:dc:2e:74:21:
                    53:20:0a:a5:d4:d5:c7:bf:ea:df:b7:84:73:ff:68:
                    bf:19:fd:ff:23:98:53:98:34:96:35:c6:56:9a:f4:
                    55:a4:e9:08:69:61:d1:9a:e9:6c:87:4a:3e:e6:a9:
                    fe:6e:e4:2a:56:3b:6d:3e:8d:e6:a8:5a:da:35:20:
                    90:33:c2:3d:03:4d:ea:a4:20:16:07:94:9e:30:09:
                    47:41:61:a2:40:04:c2:23:ba:69:19:dd:65:28:d0:
                    fc:5c:77:a0:12:a4:c7:0c:fe:12:96:6a:df:14:c8:
                    74:44:03:6f:2d:8d:d7:3a:cc:07:f1:f0:5c:6b:09:
                    14:9c:a4:07:cf:ab:cd:a4:ff:d8:f3:6e:5d:d7:62:
                    63:d5:71:47:a8:e0:d1:6e:96:5c:64:ea:7a:8c:55:
                    a9:6b:9e:ed:29:3d:56:b2:bc:1f:48:f6:23:4f:16:
                    ab:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                EC:A2:E9:5C:39:79:44:C3:CE:6D:3F:43:71:48:8B:73:9E:42:E4:2E
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5954db-9cd5-4357-a211-7993972840b6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5954db-9cd5-4357-a211-7993972840b6/1/7KLpXDl5RMPObT9DcUiLc55C5C4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.95.68.0/24
                IPv6:
                  2a11:14c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210760

    Signature Algorithm: sha256WithRSAEncryption
         3e:b7:c1:6a:33:ac:ec:fe:14:7f:fd:b6:20:dc:80:d8:b1:46:
         be:a2:9d:03:2b:af:83:82:1f:bb:00:10:86:e2:c5:8a:c2:f0:
         59:1e:a1:01:b5:46:55:47:11:07:ce:ea:19:1a:fb:ac:b3:05:
         d9:3e:79:f5:3e:b9:d1:cb:ce:eb:11:54:b6:ef:9d:ff:86:1a:
         31:11:5c:f6:8b:c5:e8:96:ea:40:d0:53:56:53:d8:34:05:03:
         ce:33:68:7c:2b:82:b6:e8:b3:7b:cd:25:cb:c1:ed:83:22:69:
         27:08:cc:05:b6:97:04:c4:50:43:f1:0e:c5:55:98:39:f0:07:
         40:68:73:6b:6a:d1:f1:b8:cb:94:80:06:53:93:b4:d9:f4:8f:
         67:c0:cd:b2:65:e0:3a:e9:5d:36:0c:27:8c:b0:24:12:b6:96:
         b1:bc:d7:97:d5:37:6d:ab:d9:6b:d0:c6:44:eb:05:5a:77:88:
         6d:15:1f:f0:64:2f:4b:d9:d5:04:2c:a6:f5:1c:5d:5c:27:c4:
         36:5a:11:3b:1a:0e:f4:d0:67:e9:f7:71:74:dc:4c:51:c8:d7:
         2a:9b:60:17:83:06:52:19:e2:a1:4e:ca:a6:ef:bb:ac:58:63:
         b2:b6:73:ea:38:32:6e:5c:05:eb:e5:91:4c:7c:95:af:dc:99:
         1d:4c:82:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 13:34:27 2022 by LibreSSL & rpki-client.