RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer (download)

Subject key identifier:   F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: IP: 45.133.204.0/22
    2: IP: 2a0e:78c0::/29

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 703279694487 (0xa3bebc8297)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:56:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4d:85:5d:ec:c1:41:fa:a8:56:aa:55:1c:da:
                    31:7c:60:0b:04:e0:00:bb:8c:99:9c:c5:03:59:0c:
                    18:a9:dc:30:c1:7c:60:5c:8b:eb:cd:3b:e9:bd:3c:
                    e0:ad:6e:50:34:42:82:08:fe:d1:c9:a9:3c:2e:32:
                    b6:69:3e:f7:a4:79:1c:de:87:64:71:73:47:f6:d9:
                    c4:75:4f:d5:7d:7d:b3:c0:67:0b:f2:61:9d:6f:76:
                    d1:01:8b:3c:24:31:6f:61:2d:5e:21:69:72:0e:40:
                    73:ee:f3:35:8d:10:ae:2a:c7:d2:04:1b:26:b0:8f:
                    5a:ac:c3:16:a6:41:4d:90:6c:e2:45:d7:8d:44:84:
                    dc:15:34:c9:a0:e5:fb:eb:4d:cf:62:09:7e:c1:b5:
                    5b:f2:9b:30:8a:cb:bc:1d:7f:02:47:19:92:bf:49:
                    df:64:89:79:c0:62:1a:be:fa:1b:54:cf:85:24:86:
                    05:57:90:3a:41:67:ea:60:66:f7:7e:0a:47:72:9f:
                    29:be:fa:d4:f3:6f:a2:37:33:dc:83:11:ac:5c:71:
                    6d:a8:b9:4f:7a:13:64:ce:36:7b:55:cf:86:cc:55:
                    45:5a:33:c4:de:17:f4:16:a4:47:0c:5a:cc:6b:00:
                    64:b9:71:53:1a:41:a7:5b:56:11:f1:ad:55:75:4a:
                    0b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.133.204.0/22
                IPv6:
                  2a0e:78c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         49:53:e4:06:28:0a:28:4b:98:f5:0e:cb:b2:f5:41:af:76:18:
         52:d1:16:4a:fb:14:30:8c:dc:4c:04:f3:08:38:10:60:46:ed:
         00:71:85:3f:9a:58:8c:1d:89:0c:97:e0:11:5a:e1:32:65:cd:
         4e:9f:45:02:b2:8e:1a:c3:1d:d9:20:77:1b:12:9f:93:9d:a6:
         e5:e0:bf:1d:0a:21:71:9e:95:ea:e0:2f:45:03:10:53:36:7e:
         7a:65:7e:e4:cf:af:d4:cf:2f:77:9c:b3:c4:9b:a0:ec:fb:04:
         9e:6e:ed:64:cc:ef:f4:ea:fa:e6:3b:80:64:a8:2a:74:e0:fd:
         67:b6:08:5c:26:02:d0:1a:bb:a8:58:ce:9f:93:46:8a:04:61:
         57:f2:9d:35:1e:0f:21:0d:1a:49:e2:bb:a1:5e:c6:b4:54:86:
         8f:85:c3:d7:c5:fd:03:8e:d4:a9:07:a4:0a:e4:9c:ce:c5:b6:
         b8:1d:47:f5:eb:36:60:5b:42:c0:99:88:da:e5:f8:43:76:4f:
         cd:ab:5c:dd:3d:a4:a9:a1:22:e5:aa:32:15:78:92:38:9b:c1:
         2e:7f:d7:d9:a8:92:08:c5:c5:d0:c0:22:e1:30:84:11:b7:96:
         f1:8e:a0:67:64:93:56:66:ff:6a:a6:d7:3b:7f:d3:5d:c1:45:
         56:44:82:50
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIGAKO+vIKXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDk1NjM5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmNjVjNmRjZDlm
ZGJkMjRjMTZlNTBhZTE1NTFlZThmNDNhYzhiZmQ0MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEArU2FXezBQfqoVqpVHNoxfGALBOAAu4yZnMUDWQwYqdww
wXxgXIvrzTvpvTzgrW5QNEKCCP7Ryak8LjK2aT73pHkc3odkcXNH9tnEdU/VfX2z
wGcL8mGdb3bRAYs8JDFvYS1eIWlyDkBz7vM1jRCuKsfSBBsmsI9arMMWpkFNkGzi
RdeNRITcFTTJoOX7603PYgl+wbVb8pswisu8HX8CRxmSv0nfZIl5wGIavvobVM+F
JIYFV5A6QWfqYGb3fgpHcp8pvvrU82+iNzPcgxGsXHFtqLlPehNkzjZ7Vc+GzFVF
WjPE3hf0FqRHDFrMawBkuXFTGkGnW1YR8a1VdUoLIQIDAQABo4ICkzCCAo8wHQYD
VR0OBBYEFPZcbc2f29JMFuUK4VUe6PQ6yL/UMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IyLzY1YTkzZS0zM2VmLTQ3NjAt
YmQ0ZS0xOTczNjM1MTY3YjIvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvNjVhOTNlLTMzZWYtNDc2MC1i
ZDRlLTE5NzM2MzUxNjdiMi8xLzlseHR6Wl9iMGt3VzVRcmhWUjdvOURySXY5US5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCLYXMMA0EAgACMAcDBQMqDnjAMA0GCSqGSIb3DQEBCwUAA4IBAQBJ
U+QGKAooS5j1Dsuy9UGvdhhS0RZK+xQwjNxMBPMIOBBgRu0AcYU/mliMHYkMl+AR
WuEyZc1On0UCso4awx3ZIHcbEp+Tnabl4L8dCiFxnpXq4C9FAxBTNn56ZX7kz6/U
zy93nLPEm6Ds+wSebu1kzO/06vrmO4BkqCp04P1ntghcJgLQGruoWM6fk0aKBGFX
8p01Hg8hDRpJ4ruhXsa0VIaPhcPXxf0DjtSpB6QK5JzOxba4HUf16zZgW0LAmYja
5fhDdk/Nq1zdPaSpoSLlqjIVeJI4m8Euf9fZqJIIxcXQwCLhMIQRt5bxjqBnZJNW
Zv9qptc7f9NdwUVWRIJQ
-----END CERTIFICATE-----

Generated at Sat Jan 1 11:54:10 2022 by LibreSSL & rpki-client.