RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/9WD-KFFydTblv2cKCKLstWLhWs4.cer (download)

Subject key identifier:   F5:60:FE:28:51:72:75:36:E5:BF:67:0A:08:A2:EC:B5:62:E1:5A:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/ec/44b332-7ef9-4ced-910c-5a1266f92c96/1/9WD-KFFydTblv2cKCKLstWLhWs4.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/ec/44b332-7ef9-4ced-910c-5a1266f92c96/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: IP: 45.11.228.0/22

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/9WD-KFFydTblv2cKCKLstWLhWs4.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 582163433006 (0x878ba5062e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 11 08:51:55 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f560fe2851727536e5bf670a08a2ecb562e15ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:53:16:29:d1:c9:34:66:51:20:50:1e:92:64:
                    f8:15:b4:8a:c4:77:40:ad:43:c5:7e:a8:ae:eb:cc:
                    22:fd:30:cd:d9:65:0e:be:b1:63:41:12:83:c4:b9:
                    d9:d5:31:0a:0a:95:e7:74:cc:a6:bd:b5:67:19:07:
                    a7:a5:d0:fd:f0:98:cc:ea:04:3d:08:0d:ff:a6:41:
                    46:98:6c:ec:df:7a:af:6c:94:08:38:98:ee:ef:ae:
                    93:ad:78:b4:51:1e:ef:64:c3:df:a6:6d:7d:99:2d:
                    31:e6:54:ae:fe:d5:62:df:91:0d:97:93:fe:fe:ac:
                    cf:d1:1e:2c:67:39:8b:0c:3e:c9:e6:81:1b:b5:70:
                    2a:27:1d:11:48:ef:57:80:1a:ba:f5:ad:55:cc:bb:
                    77:17:65:79:29:9a:74:ee:71:ab:c6:85:47:88:8e:
                    16:f8:63:cd:f7:ad:21:fd:a6:62:0b:fc:64:0f:55:
                    f1:03:cd:80:ed:ea:86:cf:b6:80:81:5a:79:86:44:
                    19:c4:59:a6:77:ff:2c:b6:f3:83:9f:42:72:9b:93:
                    5c:af:72:00:96:d1:34:71:57:e1:e3:ea:71:76:b9:
                    af:4f:7f:12:ab:ed:56:2b:1f:42:04:33:23:54:28:
                    6e:f2:3c:a3:bd:ad:51:74:9b:f5:72:a2:c2:10:c0:
                    a9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F5:60:FE:28:51:72:75:36:E5:BF:67:0A:08:A2:EC:B5:62:E1:5A:CE
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/44b332-7ef9-4ced-910c-5a1266f92c96/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/44b332-7ef9-4ced-910c-5a1266f92c96/1/9WD-KFFydTblv2cKCKLstWLhWs4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:b7:be:31:b2:f5:72:ca:73:6c:ff:ca:9f:11:5a:3c:87:a8:
         d9:57:3a:34:1b:a2:11:ea:76:74:b0:77:0b:93:40:7e:dd:b9:
         d1:03:d5:fa:e8:a9:2e:e4:f0:c7:64:d9:ee:ba:31:d7:62:15:
         a0:f5:59:ba:4b:ca:ec:bf:70:fc:cf:93:7a:b8:3a:62:b8:3e:
         13:52:62:c3:9e:66:04:09:a4:50:4f:e5:6a:44:27:f3:7f:58:
         07:1d:2c:2a:04:75:3d:33:18:a1:56:3e:fb:58:a7:ce:5c:3c:
         3b:ed:56:44:63:e7:52:b4:42:1d:df:2c:b6:94:f1:0a:35:c9:
         c8:d3:2e:58:d0:17:c0:81:f7:3f:bc:87:8b:fb:7d:df:36:9d:
         49:70:a6:9a:78:92:ba:7d:6d:e9:ff:c3:1d:f3:2c:48:44:d0:
         50:57:5e:0f:2f:9d:9a:00:b9:be:78:ef:6b:dd:06:46:f1:47:
         22:48:50:79:a7:0b:c8:e4:8c:ff:7f:74:6c:de:8b:3a:41:74:
         ad:23:cc:a0:17:c2:ba:5d:e7:1a:33:fd:8d:84:8e:98:81:fd:
         45:69:4c:0a:d6:c0:47:cf:33:1a:f9:ce:63:06:05:11:61:ba:
         d2:2e:b9:e3:ff:a9:04:4f:62:cd:b9:b3:b8:9e:c8:13:85:72:
         cf:bb:51:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Thu Sep 23 09:02:52 2021 by LibreSSL & rpki-client.