RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer (download)

Subject key identifier:   F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: AS: 212476
    1: IP: 193.3.31.0/24

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 708443453836 (0xa4f285398c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:56:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f37063a85445019ab845a5b7e54395cdd39927f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:63:ab:63:4b:dc:45:05:4c:d3:d0:75:29:55:
                    3b:51:19:f8:23:0c:b6:70:4f:ed:4c:72:54:0b:83:
                    37:4c:e9:c8:99:e4:07:94:ea:28:64:a7:1a:1e:0a:
                    fc:28:56:2d:1b:03:49:ee:07:58:c6:0c:e0:f3:9b:
                    27:54:d6:68:0a:e6:61:82:c1:fe:28:62:b5:95:de:
                    99:8a:84:32:af:68:41:70:ed:ee:ad:ac:a2:e1:7d:
                    e0:08:54:0b:6b:50:2b:90:64:4f:d1:3e:20:b6:2f:
                    70:98:ac:12:d0:1b:ed:ed:4e:b4:57:8e:fc:88:56:
                    9e:4b:f8:4c:79:fb:f5:d0:ec:66:9b:bd:5a:ae:74:
                    66:76:98:d0:85:90:f1:b1:39:78:ee:f7:db:37:49:
                    93:9c:44:e6:bc:32:10:ba:be:1c:a3:68:c8:ec:cc:
                    52:e4:c3:25:10:64:3c:34:bc:1a:cf:e3:be:0b:44:
                    0c:66:02:81:72:22:ed:51:22:b4:c9:11:d9:30:37:
                    4f:56:71:09:ed:bb:89:e8:06:cc:d6:f2:e8:f6:a6:
                    6f:73:f1:98:50:c1:5e:15:b2:e4:d9:bb:ae:68:5a:
                    72:01:89:8b:96:75:2e:bd:95:e9:3e:ec:bd:fc:93:
                    fa:be:ab:e9:84:97:8a:67:e3:3a:aa:2d:37:19:a9:
                    40:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.31.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212476

    Signature Algorithm: sha256WithRSAEncryption
         67:2b:1b:a5:1b:f0:b4:71:d9:b7:af:d8:51:3c:10:75:aa:34:
         40:5e:f4:be:b3:1b:ec:18:b5:9e:4e:29:3e:29:e1:4b:a2:ec:
         dc:b4:fd:08:52:32:18:79:75:c0:75:0c:c7:41:f0:1f:c7:fe:
         58:ee:e1:bd:ad:39:ec:0a:ec:1b:54:fe:5c:5a:ba:5a:41:d6:
         01:25:44:ba:ac:c2:6c:e2:de:85:cc:b5:37:a4:56:e1:e3:9b:
         c1:25:4c:87:de:8b:94:96:57:ae:0e:07:71:39:b2:3c:61:f8:
         86:93:98:68:67:aa:e0:29:cd:55:66:80:be:23:b1:1a:4d:62:
         1e:b9:90:60:11:a8:43:30:db:1a:f8:00:33:b7:d1:24:5b:9c:
         99:59:3e:f7:0f:33:d1:42:ad:8b:fa:78:83:a7:38:4a:2b:0b:
         ce:9b:c6:c7:02:17:2f:bb:f6:ef:d2:e4:30:71:39:4a:26:6a:
         76:92:37:c5:c2:a1:63:5f:05:66:3d:18:1b:6c:ce:d5:41:93:
         df:62:87:f4:60:39:a0:5a:ac:48:e4:2e:02:75:71:0f:2b:15:
         ab:09:a4:94:03:eb:36:d2:35:74:3e:6a:b8:e7:b2:35:f6:15:
         bc:09:9c:f2:1d:8a:e7:6c:00:3e:ae:be:4d:8c:3c:04:74:3a:
         fa:40:70:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 13:34:28 2022 by LibreSSL & rpki-client.