RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.cer (download)

Subject key identifier:   EE:4D:30:37:96:0E:D1:9C:07:9E:3E:21:E1:FE:A6:75:0C:0C:45:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: AS: 43660
    1: IP: 91.197.172.0/22
    2: IP: 176.121.128.0/18

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 694226706076 (0xa1a322de9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:58:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ee4d3037960ed19c079e3e21e1fea6750c0c45be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:26:0f:4f:68:a3:fc:5d:da:00:aa:91:92:21:
                    30:b0:57:42:8e:01:96:b5:e6:37:d6:48:23:f0:72:
                    3f:96:fb:4f:36:90:08:ea:82:f4:93:fd:7b:15:85:
                    bc:b5:d7:eb:0b:e2:09:11:8f:db:03:6e:7b:f9:06:
                    be:86:32:ee:9b:1d:99:13:2f:2e:8f:7f:3a:cd:e8:
                    a5:34:aa:32:fe:41:dc:1d:2a:33:90:4b:36:5b:75:
                    7d:6f:92:f8:8d:e7:0a:e5:6c:ed:2f:fd:ca:86:e5:
                    88:70:53:3a:49:32:3d:f1:7a:1d:bf:82:d1:c8:06:
                    ba:88:17:f3:db:72:5f:84:d0:aa:f5:bd:b1:cb:ec:
                    7e:f5:7c:b6:4f:65:5b:7c:b2:57:a1:f0:cd:1c:2c:
                    95:fa:10:a1:97:f9:c1:e9:c5:8a:66:8c:0f:f1:25:
                    62:24:fa:ef:85:f6:64:8e:d9:9e:e1:84:96:28:d9:
                    22:0c:e1:07:fd:fc:3c:b5:38:59:9e:4c:d4:95:11:
                    97:93:53:4e:d2:c5:57:dd:d0:fc:3e:9a:30:25:23:
                    d0:d5:5f:0e:6c:15:8e:5a:39:63:f2:4f:9d:dd:1f:
                    60:ac:55:df:1e:69:2c:14:94:7a:98:4b:f9:77:79:
                    09:41:73:14:5f:a0:16:6f:17:83:10:37:4f:d9:76:
                    09:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                EE:4D:30:37:96:0E:D1:9C:07:9E:3E:21:E1:FE:A6:75:0C:0C:45:BE
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.197.172.0/22
                  176.121.128.0/18

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43660

    Signature Algorithm: sha256WithRSAEncryption
         25:db:a5:55:c5:08:7e:29:c1:e9:f1:93:6d:f9:87:58:bb:ee:
         1c:c8:f8:a8:00:fe:dc:7b:01:c4:7c:4e:3e:c8:fc:c8:04:bd:
         e4:97:53:45:ef:b6:f8:6c:7c:46:e4:d0:86:73:e8:70:3b:05:
         c5:dc:6d:91:1c:c3:70:f1:1c:59:bf:57:dc:a1:66:1c:5d:d0:
         99:08:4b:08:f6:a4:f4:b6:2f:36:49:4f:8d:f6:79:f3:20:92:
         1c:f4:60:96:0d:bc:17:06:56:7c:01:12:bd:70:3f:cb:54:98:
         92:f8:ae:78:aa:fa:60:24:76:19:6d:65:d6:37:b0:15:b7:67:
         03:02:60:87:91:b6:68:dd:ed:12:08:df:bf:f2:1a:b0:b1:c8:
         24:d7:30:8f:62:88:28:10:5b:6a:c9:c7:0e:84:01:ff:6b:83:
         59:f9:e5:10:76:a0:08:db:83:0f:9f:b6:a9:01:00:be:87:59:
         17:1a:91:65:63:60:55:c2:86:1b:69:e2:bf:10:6a:87:01:c0:
         4a:4f:c3:34:7a:02:3b:c7:9b:a6:f0:53:47:e7:a0:71:e7:39:
         e2:3f:89:e9:f6:95:df:53:61:ff:56:2d:6c:d6:6b:c5:48:c3:
         3b:92:59:9b:92:75:46:9c:c8:4a:2e:66:12:0b:90:75:dd:06:
         36:78:bf:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 10:11:05 2022 by LibreSSL & rpki-client.