RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer (download)

Subject key identifier:   F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: AS: 50520
    2: AS: 212699
    1: IP: 89.38.105.0/24
    2: IP: 185.134.112.0/22
    3: IP: 2a02:fa80::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 662284465701 (0x9a333af625)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:52:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f5:d6:e6:6b:65:38:04:59:84:d2:79:be:0a:
                    a6:47:cd:8c:19:fd:3c:40:d6:03:1a:9d:05:e0:93:
                    0a:8a:d4:00:8b:16:72:e4:5a:75:6a:bb:53:47:92:
                    f3:12:d4:97:90:a0:ad:8b:33:ac:5d:06:c7:3d:21:
                    3e:df:d2:43:9a:40:68:17:29:9f:0f:f3:ca:1d:38:
                    31:91:3c:67:e8:93:08:2c:39:6a:17:5c:dd:e0:47:
                    33:63:1f:72:02:89:ee:8c:eb:6f:a7:40:d9:6a:b6:
                    d2:d7:b5:9c:ef:fc:67:99:f4:a7:18:7d:14:37:9f:
                    fd:50:58:51:80:62:5b:94:97:dc:bd:6e:0a:d9:1f:
                    6b:f9:01:82:34:4f:aa:31:49:ce:15:ee:50:13:fd:
                    4f:64:15:1a:72:76:4e:f6:ea:29:7d:80:1e:ee:b4:
                    e3:5c:64:15:c1:22:4d:3c:05:d8:2e:4a:d1:06:25:
                    d6:e9:4a:b2:1c:f9:4e:fc:1a:d9:30:8b:7a:5f:9a:
                    61:40:2f:28:4e:23:ef:26:e6:19:b9:08:39:60:15:
                    f4:81:19:32:4d:2d:02:58:50:28:d0:4f:20:88:7d:
                    2d:ac:0c:b5:41:ea:73:9e:d6:be:e2:e7:d3:a0:7e:
                    79:67:cf:6d:41:99:8e:38:90:aa:1b:ae:cb:6c:71:
                    1a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.38.105.0/24
                  185.134.112.0/22
                IPv6:
                  2a02:fa80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50520
                  212699

    Signature Algorithm: sha256WithRSAEncryption
         17:b6:a0:55:6a:61:6a:0b:58:a1:05:0b:d3:37:90:57:38:a1:
         c3:16:05:df:11:84:72:95:e0:79:b8:14:52:b6:f3:44:71:5d:
         01:96:ae:86:89:1a:28:e0:f9:70:d0:37:1d:82:f6:77:a9:3b:
         db:c7:1f:25:7a:9f:55:b9:ee:11:a0:4a:10:fd:c8:32:f1:32:
         5a:70:b2:08:21:26:0c:64:38:5d:4d:1c:c7:8f:28:f4:6f:47:
         22:53:54:7d:0f:b4:bc:13:0d:11:96:e9:e5:56:e1:f9:35:1f:
         39:10:b9:2f:93:79:f5:d9:c0:6f:48:ee:9f:cc:3e:68:43:02:
         d8:81:fb:dd:12:c6:73:bf:fe:37:03:37:83:7c:d0:d2:c0:7d:
         66:41:2a:ce:5c:34:5d:b2:73:0e:54:ac:08:bd:ac:e5:85:fd:
         8b:14:5c:0b:d8:f3:3d:40:13:e6:12:ec:94:93:0b:ef:85:56:
         d5:ce:32:1a:57:f3:e8:30:25:ee:04:b7:75:85:63:36:1b:26:
         f0:96:af:22:28:d8:98:a3:50:9e:e7:58:22:c8:bb:0d:63:9e:
         6f:01:32:8a:65:0e:fe:8d:d6:60:f9:00:46:28:68:0d:4a:b2:
         11:f6:ef:5a:b7:c8:52:79:05:6e:ef:fc:12:3d:57:ff:e9:ac:
         62:57:97:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 04:38:27 2022 by LibreSSL & rpki-client.