RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer (download)

Subject key identifier:   ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: AS: 51897
    2: AS: 57405
    3: AS: 61008
    1: IP: 46.143.192.0/18
    2: IP: 109.122.240.0/20
    3: IP: 185.84.220.0/22
    4: IP: 2a05:a380::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 543761253491 (0x7e9ab24473)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:55:42 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b2:15:9d:ec:17:d2:96:48:28:e2:3e:37:bc:
                    3a:57:be:d0:33:92:9e:5a:fc:07:58:09:9e:c9:0c:
                    8b:c1:56:ad:73:ca:c9:4d:ea:3c:1a:a8:af:63:c5:
                    00:ce:a0:06:3e:69:03:d9:13:43:04:96:22:26:1d:
                    45:d8:40:a8:0e:cc:1e:f9:9a:80:0e:04:6a:56:77:
                    78:2d:ac:7b:c6:d2:e9:73:2f:53:9a:6f:2c:40:26:
                    e6:fa:91:c2:7f:81:7d:ed:bd:13:78:02:08:3e:4b:
                    2c:36:3b:49:28:be:3f:3a:fa:d9:b8:d2:71:d2:ff:
                    4c:ca:4b:1f:53:3c:e7:1c:6c:bd:25:97:2d:a3:62:
                    cf:09:32:46:21:43:e9:38:2b:25:1f:65:bb:07:87:
                    c3:e5:81:6d:b4:84:01:c2:ed:de:19:c7:75:6b:97:
                    8a:26:18:9e:1c:2c:86:98:95:36:26:ad:08:69:16:
                    e6:f8:f4:83:8a:c1:28:40:94:bf:6a:02:bc:01:ed:
                    73:a5:d2:fb:bf:83:e0:5f:3a:4e:8c:6c:67:5a:dc:
                    60:9a:de:fe:92:66:ae:82:a9:ad:c3:b6:07:6e:f5:
                    3c:68:ad:a5:9c:f9:6c:64:cc:0c:2d:38:52:89:31:
                    f2:b3:ff:d3:78:b9:14:f9:4d:81:15:44:97:b7:b7:
                    ca:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0)0.....0..........mz.....T.0
....0....*...
            sbgp-autonomousSysNum: critical
                0...0..........=....P
    Signature Algorithm: sha256WithRSAEncryption
         0d:e8:ce:4c:e0:ac:f6:ae:f1:0b:d0:1e:e0:b7:3c:89:92:2e:
         3b:0b:7d:a3:70:d1:58:cf:9e:f1:a3:6f:10:7b:95:af:64:08:
         2f:a8:d0:24:1c:6c:9c:97:8c:66:89:0c:b8:56:82:a4:d3:dd:
         b4:a8:14:73:5f:d1:36:f5:70:7f:cf:1d:8f:c2:91:32:eb:bd:
         c0:bc:55:af:4c:87:bf:85:f2:f5:45:92:91:b7:6b:3d:83:76:
         bd:2c:0d:70:93:64:de:e6:76:1e:2d:41:ed:53:ef:d2:1c:18:
         6d:7e:bc:ce:1e:39:65:ba:0d:e5:7e:0c:af:0f:9a:9e:4d:1b:
         e8:ef:ce:19:fe:66:43:a4:c2:d5:6a:4f:f0:22:06:f9:9f:68:
         27:47:b5:3e:c9:5f:4d:4e:f6:a8:e8:90:ca:a8:14:20:ad:ed:
         d8:4b:96:ad:fb:56:84:0b:96:d9:8b:97:2a:dc:dc:53:62:de:
         34:54:ce:a3:df:0f:e4:e0:0f:f0:0f:5a:b2:03:df:41:87:55:
         b8:88:2d:51:1f:9e:98:76:bf:bb:22:cf:38:b9:c7:ba:fc:2e:
         44:ac:0e:de:c7:c8:07:70:bf:ae:5e:22:0d:8e:18:43:77:9f:
         75:cf:da:a7:4a:cc:9c:86:73:5f:fe:15:4b:c5:ae:5d:2e:3e:
         6c:ed:c2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Jul 30 02:01:13 2021 by LibreSSL & rpki-client.