RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer (download)

Subject key identifier:   00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: AS: 12574
    2: AS: 31333
    3: AS: 33956
    4: AS: 34685
    5: AS: 41637
    6: AS: 48823
    1: IP: 31.15.64.0/21
    2: IP: 79.140.32.0/20
    3: IP: 80.78.80.0/20
    4: IP: 80.244.240.0/20
    5: IP: 83.151.16.0/20
    6: IP: 95.129.48.0/21
    7: IP: 134.0.24.0/21
    8: IP: 185.11.136.0/22
    9: IP: 185.138.24.0/22
    10: IP: 185.166.4.0/22
    11: IP: 194.50.113.0/24
    12: IP: 194.126.196.0/24
    13: IP: 213.160.64.0/19
    14: IP: 2001:4d88::/29
    15: IP: 2a00:17d8::/29
    16: IP: 2a01:7f0::/32
    17: IP: 2a03:2900::/29

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 706993228221 (0xa49c1489bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:54:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c8:c1:2e:4e:f5:ee:34:9f:85:83:53:43:3a:
                    cc:5a:45:3e:be:fb:39:d4:ea:77:ce:34:e7:70:c7:
                    95:f4:83:c4:91:45:29:aa:34:d8:b5:78:75:64:5e:
                    be:bd:98:a8:e3:d0:8f:a1:56:e5:1a:3d:b2:25:27:
                    60:4b:3f:3a:c1:4c:0f:7b:76:c6:19:e4:3b:68:70:
                    91:78:91:8f:66:d6:a8:1b:88:19:a3:fc:42:79:4e:
                    91:f2:b3:85:d7:82:f4:f2:54:21:f8:0f:83:88:50:
                    c0:f0:19:2d:84:15:95:20:d7:27:6f:35:0a:b9:67:
                    86:cb:2c:48:63:53:79:b6:57:14:7c:2a:70:4c:78:
                    c5:82:14:99:84:6f:c4:6b:21:82:74:da:ad:fb:49:
                    33:f5:d4:b6:c6:98:38:7d:95:ee:af:d6:4f:1f:60:
                    6b:e8:69:b7:ee:f5:2c:90:de:71:bd:99:f4:78:23:
                    55:2d:86:f5:ca:b5:20:c1:01:9d:40:ef:8f:6d:10:
                    4e:0c:b8:cc:e8:0a:35:00:22:89:4f:60:23:cc:62:
                    76:72:c4:98:52:e6:f2:a5:c3:d2:32:b4:a8:b2:a8:
                    cc:52:6c:b3:58:a1:af:f0:05:04:c4:90:b0:76:cc:
                    d4:bd:4e:22:7a:e9:0b:49:43:ed:43:34:7f:67:c0:
                    e7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.15.64.0/21
                  79.140.32.0/20
                  80.78.80.0/20
                  80.244.240.0/20
                  83.151.16.0/20
                  95.129.48.0/21
                  134.0.24.0/21
                  185.11.136.0/22
                  185.138.24.0/22
                  185.166.4.0/22
                  194.50.113.0/24
                  194.126.196.0/24
                  213.160.64.0/19
                IPv6:
                  2001:4d88::/29
                  2a00:17d8::/29
                  2a01:7f0::/32
                  2a03:2900::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12574
                  31333
                  33956
                  34685
                  41637
                  48823

    Signature Algorithm: sha256WithRSAEncryption
         89:2f:6b:fa:14:16:f7:0a:0e:3a:fc:47:4b:02:d6:87:b0:75:
         85:29:b3:ce:93:0e:5d:23:0f:62:0a:f4:f4:da:6b:7e:4e:a3:
         75:96:6b:36:90:ec:81:21:4f:6e:4c:71:b4:f5:e2:14:43:14:
         bd:e6:5a:5f:46:5a:72:92:d1:d2:76:15:df:88:31:62:1a:d3:
         4e:f4:23:13:03:11:31:9d:12:a2:5b:d0:f4:63:74:04:7e:bb:
         3e:3d:89:a0:0d:0a:61:08:72:64:b0:6a:11:90:ee:6a:b0:41:
         1e:2d:7c:b0:da:6a:ed:3d:f3:d0:5b:ea:e6:89:76:4d:44:69:
         6e:14:ff:99:89:c5:3b:ac:bb:94:7c:58:ee:5a:30:f4:2f:a1:
         a9:b7:d9:78:95:40:9d:64:9d:3f:de:1b:8b:27:4a:ea:2b:fd:
         08:dd:ee:39:7c:15:8f:8c:fd:cf:24:8e:d7:bf:b4:ba:68:ce:
         76:86:0e:aa:8c:7f:6f:2f:3b:3e:02:46:2a:a8:a4:cd:94:d4:
         a6:be:13:6c:83:8c:c8:70:88:cf:8e:b9:a4:72:e0:5b:ca:9a:
         c3:f2:37:2f:91:83:cc:ac:8f:6a:6d:2f:dd:85:8b:c4:6a:fd:
         4b:6f:59:30:3c:5c:eb:be:6a:6a:1b:47:b4:6d:80:06:a6:8f:
         fc:ca:be:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 13:34:31 2022 by LibreSSL & rpki-client.