RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/7MZuhmPIwE4nZlhD-_PCtv8A5pc.cer (download)

Subject key identifier:   EC:C6:6E:86:63:C8:C0:4E:27:66:58:43:FB:F3:C2:B6:FF:00:E6:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/be/f1ae55-591e-4941-9cf9-0f3d4228ba81/1/7MZuhmPIwE4nZlhD-_PCtv8A5pc.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/be/f1ae55-591e-4941-9cf9-0f3d4228ba81/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: IP: 185.139.24.0/22
    2: IP: 2a07:1240::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/7MZuhmPIwE4nZlhD-_PCtv8A5pc.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 509468365716 (0x769eae5394)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:31:56 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=ecc66e8663c8c04e27665843fbf3c2b6ff00e697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:64:b6:df:7f:fa:16:c7:99:dc:37:dd:4d:73:
                    38:4e:ec:73:5a:49:65:64:d8:a4:65:67:53:06:e7:
                    65:04:48:c9:29:ae:98:2d:59:f2:6f:6c:8e:f8:61:
                    b6:29:90:6f:74:cd:f6:ab:b1:9d:ba:e7:65:16:47:
                    91:1f:8e:ba:a4:24:23:7e:b5:36:86:6b:c5:fb:65:
                    5d:31:92:65:5a:98:e7:c6:d5:29:92:96:73:e5:ee:
                    29:20:78:61:e3:fb:04:46:b0:16:7a:aa:d5:e8:d5:
                    e7:97:5d:3d:10:1a:ff:72:67:75:93:5f:d6:4e:4c:
                    a5:c7:47:bf:0e:45:b6:b9:cc:9a:ee:b8:46:94:53:
                    49:f1:6c:68:d3:4e:8d:52:04:c4:c9:c3:c4:7a:58:
                    d8:85:29:a2:3e:87:75:f0:58:df:fe:4a:af:83:f2:
                    26:d7:3b:e5:a0:2b:8c:c8:bc:e1:6d:1a:5a:28:0f:
                    ea:46:5d:e4:75:e0:ab:58:a9:8c:f8:06:82:bf:1c:
                    7e:88:8d:4d:19:5c:7a:83:5e:49:3e:53:92:61:66:
                    8e:ba:9b:15:3e:31:28:98:af:b3:75:98:22:60:04:
                    cb:db:2a:26:93:4c:10:ca:78:0a:55:19:18:26:15:
                    55:57:fd:4a:b5:ce:e4:94:a7:76:e0:cd:b4:bb:43:
                    2d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                EC:C6:6E:86:63:C8:C0:4E:27:66:58:43:FB:F3:C2:B6:FF:00:E6:97
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f1ae55-591e-4941-9cf9-0f3d4228ba81/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f1ae55-591e-4941-9cf9-0f3d4228ba81/1/7MZuhmPIwE4nZlhD-_PCtv8A5pc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.......0
....0....*..@
    Signature Algorithm: sha256WithRSAEncryption
         5f:23:3e:df:58:24:1c:05:12:fa:59:6d:d9:43:c0:bf:e5:43:
         7e:3c:e6:a4:f9:de:68:66:74:20:bb:70:37:1a:79:c3:27:4a:
         69:24:98:13:9d:bd:f4:52:27:f4:55:f3:a2:e6:86:52:86:c0:
         6b:af:b7:a6:6d:e7:c7:39:ac:23:aa:bd:1e:4f:c9:9e:3d:96:
         c7:84:a7:b6:89:48:7c:97:86:c3:3e:d1:3f:49:82:d1:9e:eb:
         20:bd:7e:85:5e:5c:fc:74:f9:15:46:a8:f3:6b:6f:09:bb:6a:
         7f:1d:8e:5d:1b:c2:5c:1f:ce:9a:ef:ff:65:84:5d:5c:18:ab:
         99:72:68:26:69:5b:4d:40:44:0c:c5:c5:5a:9b:1f:83:f7:8f:
         84:29:85:1f:d3:82:7c:1b:8d:38:ac:ce:57:91:c9:ed:5c:2f:
         8b:0f:26:a0:2b:0a:07:ee:52:d5:a3:55:e6:51:37:69:e9:6d:
         04:44:a7:d5:b2:89:46:7c:ff:7d:5b:6b:37:72:e6:36:d0:50:
         7b:74:e9:dc:2c:69:84:a8:d5:50:a5:e0:92:0c:12:53:f9:89:
         ec:68:7f:be:0c:c0:b0:a9:fe:3e:14:31:2a:a5:0c:57:fa:28:
         e9:0e:75:57:9d:1d:c5:9c:bf:ca:8b:96:a4:1d:07:a5:aa:01:
         19:2b:7c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Jun 25 08:19:47 2021 by LibreSSL & rpki-client.