RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer (download)

Subject key identifier:   F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: AS: 64396
    1: IP: 2001:678:f34::/48

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 697869750992 (0xa27c4752d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:55:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f464605eaf14b8b5d28ee8d076c1e3738f758253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:14:bc:3f:ab:10:2b:26:7e:e4:98:53:b7:66:
                    3c:6b:56:d4:18:12:cd:44:00:71:6c:fa:58:69:9e:
                    5f:f7:ad:9d:7b:ee:c9:ce:1c:74:1d:5b:ef:1f:3b:
                    8a:6b:a9:6a:64:1a:19:39:dc:98:83:b0:1d:c1:36:
                    36:8e:7f:94:1d:a8:96:f9:f3:19:71:ad:3c:96:86:
                    23:66:88:a3:bc:f4:02:ea:0a:eb:74:c0:7b:a3:27:
                    c5:6d:6c:91:48:26:9a:2d:e7:62:e8:0f:4c:0d:46:
                    1d:00:bf:6a:ff:68:ac:e0:1b:4b:fa:58:36:70:6b:
                    25:95:2e:2a:c9:b1:17:04:58:c2:85:a4:a0:ce:0f:
                    fe:21:3e:65:7c:5e:51:65:cc:2c:fb:be:e0:c5:73:
                    36:06:9b:c9:87:90:b5:06:1b:76:ef:fb:32:cf:26:
                    14:03:d0:c8:4c:a9:e2:81:97:44:6e:c4:b6:25:ea:
                    b8:4b:48:c8:06:59:77:02:c0:28:9a:29:60:38:09:
                    a2:48:4e:ea:61:4c:54:47:41:5d:a9:ee:df:a4:9d:
                    8d:f8:7b:c3:e1:ba:90:0a:f6:9c:39:d2:0c:0f:72:
                    f2:ce:29:21:3a:18:bf:70:a5:6b:c0:4d:df:b6:bb:
                    7a:b4:8f:53:5a:66:88:db:75:ce:35:44:ca:b7:ee:
                    df:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:f34::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64396

    Signature Algorithm: sha256WithRSAEncryption
         ac:91:79:98:ad:dd:48:b5:fc:3c:ec:8b:a6:97:9e:4b:5e:f3:
         58:79:24:19:ee:f3:3f:8e:64:91:4e:6d:d6:dd:3a:28:51:33:
         a0:81:7e:31:f8:e4:c1:39:7a:e6:8b:d8:9a:ac:3c:75:a0:53:
         f4:e2:cf:09:d8:39:b2:2f:44:3c:ae:d0:ad:00:07:cd:09:4d:
         c5:c0:4a:c7:d1:23:3c:a1:89:92:99:9c:79:e5:42:22:30:8f:
         d4:3e:ae:48:27:f9:b0:fb:82:8c:60:82:4b:24:15:b6:d1:bf:
         3b:e9:d3:c8:0c:62:1c:50:cf:27:d5:fd:76:ad:63:56:5d:73:
         22:f2:23:39:3b:65:2c:59:8f:aa:36:67:4f:61:d9:98:f9:e0:
         ed:28:19:83:40:e6:1f:cc:44:0a:34:a2:0e:fc:1f:4f:b5:f7:
         c7:05:36:96:e8:c8:6b:dd:6a:08:f4:57:9d:b0:bf:c8:e4:cc:
         7b:e7:99:fc:b6:3c:3c:c3:dc:f8:5b:a8:e4:6c:6a:34:35:dc:
         bb:36:a5:d3:a8:6c:37:57:c5:40:ae:96:12:36:6a:66:77:7d:
         25:a7:37:78:78:72:e9:7f:87:2a:86:f8:22:02:2a:b2:67:b8:
         9f:3a:79:83:80:40:3a:2f:d1:05:4d:a5:7b:6f:39:0f:65:ab:
         3c:f7:4b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 11:54:09 2022 by LibreSSL & rpki-client.