RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer (download)

Subject key identifier:   F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: IP: 2001:678:688::/48

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541410056005 (0x7e0e8dd745)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:42:30 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f56769a42e44266f037ecb390d4115febe3861a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ef:da:8d:d7:4e:d7:17:45:b6:b7:f2:e9:1a:
                    ef:c9:ce:d8:b0:a2:02:c1:29:f8:ca:84:ed:93:f2:
                    76:d7:6c:b5:43:03:95:23:94:ae:39:96:53:c3:e4:
                    9c:be:b9:d2:96:04:47:3b:3c:53:eb:c1:3c:57:09:
                    97:39:91:98:b8:f6:72:3b:82:bb:ee:51:39:e6:52:
                    ad:e0:bf:6f:3a:28:34:90:4d:e8:38:d4:18:ba:b1:
                    8b:47:e7:ea:20:1c:99:38:49:b8:fe:fb:b1:5b:ac:
                    6f:07:07:38:a0:d9:ec:e7:dd:3e:d1:f7:75:c5:4b:
                    bc:1f:97:ab:53:af:04:79:36:6e:2b:27:3c:11:3d:
                    09:db:7e:d9:7f:01:e5:ed:a7:80:15:6f:2e:ab:40:
                    2f:cc:3c:17:f0:73:21:db:0a:11:3c:5e:56:a6:28:
                    2d:00:89:e1:75:d0:5d:26:0c:45:73:de:b7:f5:c6:
                    cb:8b:b9:f8:a6:1c:d9:fc:56:5e:fc:a0:0f:98:2f:
                    45:3a:10:bf:e3:30:85:98:22:fa:3e:09:e0:fb:6a:
                    70:74:1c:98:86:44:a1:62:31:42:53:9b:e9:6c:2a:
                    54:7c:47:25:bb:69:12:7b:b6:79:c3:30:c8:5e:0b:
                    dd:3b:26:69:5c:c5:37:5c:cd:61:20:20:48:30:50:
                    bf:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.... ..x..
    Signature Algorithm: sha256WithRSAEncryption
         5f:5c:1d:06:3c:8a:09:8c:16:cf:4c:d4:62:bd:9d:b1:90:91:
         c4:e9:e9:59:4c:73:60:6b:20:74:68:f2:06:a4:9b:a6:11:89:
         a0:bf:7a:3e:f0:ff:93:7d:d3:af:7c:73:ff:64:c0:0d:d6:8b:
         1f:26:ef:03:d7:39:3f:ee:8e:8a:b1:6d:6b:47:c1:33:19:70:
         89:9a:98:7d:86:b0:ab:6e:db:35:5b:a6:a6:e2:da:5a:68:35:
         21:8c:dc:09:0d:a4:c9:6d:60:75:47:de:a0:65:72:c8:9d:80:
         82:77:8d:31:7c:1e:e2:91:47:a2:86:ca:3b:0e:88:7c:85:2a:
         fc:a3:67:4b:17:40:d5:0f:30:71:82:ed:85:f8:20:1c:5f:4e:
         36:78:15:07:a9:bb:4b:60:4b:6a:de:16:98:65:06:62:20:b4:
         a9:02:43:b8:6d:e2:b0:b8:ea:02:a9:fb:65:a7:ce:05:3e:05:
         28:8c:d9:c6:4f:46:ba:d2:82:5d:a4:45:d9:7e:66:9d:06:a0:
         77:92:96:c7:f1:60:63:d2:69:9f:5b:b9:fe:36:0d:44:de:52:
         7c:f0:fd:c9:3b:0a:a5:f3:df:4a:4a:ce:4a:28:31:37:ce:25:
         2e:cf:e1:9d:ad:d4:1f:9c:8d:fb:97:ed:06:27:41:2b:af:6a:
         ef:a4:72:2a
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIFfg6N10UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMzQyMzBaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGY1Njc2OWE0MmU0
NDI2NmYwMzdlY2IzOTBkNDExNWZlYmUzODYxYTQwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC179qN107XF0W2t/LpGu/JztiwogLBKfjKhO2T8nbXbLVD
A5UjlK45llPD5Jy+udKWBEc7PFPrwTxXCZc5kZi49nI7grvuUTnmUq3gv286KDSQ
Teg41Bi6sYtH5+ogHJk4Sbj++7FbrG8HBzig2ezn3T7R93XFS7wfl6tTrwR5Nm4r
JzwRPQnbftl/AeXtp4AVby6rQC/MPBfwcyHbChE8XlamKC0AieF10F0mDEVz3rf1
xsuLufimHNn8Vl78oA+YL0U6EL/jMIWYIvo+CeD7anB0HJiGRKFiMUJTm+lsKlR8
RyW7aRJ7tnnDMMheC907JmlcxTdczWEgIEgwUL9jAgMBAAGjggKHMIICgzAdBgNV
HQ4EFgQU9WdppC5EJm8Dfss5DUEV/r44YaQwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvYTFkMmZkLTRkYmQtNDM2Mi1h
YzdiLTdhM2ZmYjAwYjcxNi8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMWQyZmQtNGRiZC00MzYyLWFj
N2ItN2EzZmZiMDBiNzE2LzEvOVdkcHBDNUVKbThEZnNzNURVRVZfcjQ0WWFRLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQZ4BogwDQYJKoZIhvcNAQELBQADggEBAF9cHQY8igmMFs9M1GK9
nbGQkcTp6VlMc2BrIHRo8gakm6YRiaC/ej7w/5N90698c/9kwA3Wix8m7wPXOT/u
joqxbWtHwTMZcImamH2GsKtu2zVbpqbi2lpoNSGM3AkNpMltYHVH3qBlcsidgIJ3
jTF8HuKRR6KGyjsOiHyFKvyjZ0sXQNUPMHGC7YX4IBxfTjZ4FQepu0tgS2reFphl
BmIgtKkCQ7ht4rC46gKp+2WnzgU+BSiM2cZPRrrSgl2kRdl+Zp0GoHeSlsfxYGPS
aZ9buf42DUTeUnzw/ck7CqXz30pKzkooMTfOJS7P4Z2t1B+cjfuX7QYnQSuvau+k
cio=
-----END CERTIFICATE-----

Generated at Wed Jun 23 13:11:34 2021 by LibreSSL & rpki-client.