RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer (download)

Subject key identifier:   07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: IP: 45.14.196.0/22
    2: IP: 95.178.37.0/24
    3: IP: 212.118.58.0/23
    4: IP: 2a0e:1480::/29

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 694659344268 (0xa1bcec678c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:59:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=07ea4e88466de4c896094028f1cf0db665360d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:62:9e:74:11:12:70:70:70:69:81:bc:58:a2:
                    bd:98:a8:f2:97:8e:02:9c:bb:27:52:9b:f8:24:17:
                    2b:a9:6c:d1:9f:61:e4:2f:9b:ef:32:ea:8c:eb:42:
                    13:15:3e:76:7e:ed:fa:be:69:c2:23:56:59:5f:aa:
                    9d:52:dc:47:10:4b:3e:43:12:31:49:c1:a7:de:d2:
                    80:44:08:1c:e7:a6:79:7a:c3:1c:10:d0:43:04:f9:
                    f4:71:dd:07:df:19:f6:02:37:1a:7d:12:eb:c9:45:
                    9d:58:b3:bd:45:97:2c:af:51:f3:d9:92:e6:b7:93:
                    bc:72:1a:e5:60:0f:3d:6a:8d:8d:4c:cc:b8:87:57:
                    6f:9f:6a:26:c2:85:3f:d6:2f:3d:42:a4:8d:20:8e:
                    7f:64:35:ed:39:31:01:74:be:ed:f5:5a:37:81:1e:
                    1f:46:2c:fc:41:bb:4e:5b:84:98:ff:61:93:79:47:
                    df:42:e2:65:2c:ed:d3:24:eb:81:2c:8f:ea:0a:c2:
                    93:9e:69:18:9e:ae:c2:60:ca:f5:7e:d3:99:0f:41:
                    76:a6:bf:b7:9d:30:24:5e:10:56:6b:6b:b9:9b:df:
                    22:b7:1f:92:1c:ca:20:2c:72:62:7a:45:21:b2:ed:
                    ad:23:74:07:f9:43:d9:d0:c0:4b:5e:e1:dc:0b:54:
                    96:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.14.196.0/22
                  95.178.37.0/24
                  212.118.58.0/23
                IPv6:
                  2a0e:1480::/29

    Signature Algorithm: sha256WithRSAEncryption
         13:9e:4a:f2:d7:66:ea:ce:9e:59:09:38:74:b8:44:75:23:aa:
         96:bc:d1:c0:43:20:e0:b8:86:e0:75:a2:63:e3:fa:9e:d3:74:
         7f:3d:8f:96:00:06:b7:65:25:18:ec:28:ad:c6:33:fc:b7:27:
         59:49:b3:d8:95:8a:66:1c:30:6d:ea:21:09:d4:b8:00:a1:d0:
         6c:29:60:f7:a5:8b:3a:bd:d1:7f:c7:27:d7:ad:3f:75:c4:73:
         26:e0:3c:db:b9:fc:7b:e2:cf:00:ac:a2:b7:2c:eb:58:5b:db:
         4a:2b:fd:5a:a7:e6:ca:31:10:62:ab:44:fb:03:48:15:e6:fb:
         af:07:dc:08:58:a8:e6:3e:9e:43:b5:98:3d:a4:93:d4:fe:bd:
         bf:f5:6b:26:e6:72:41:8a:69:dc:a9:21:cc:fe:00:22:73:35:
         d8:11:3a:a1:82:6e:2b:cf:11:65:21:55:6e:93:07:fe:a5:c7:
         94:9b:d6:a1:1b:b6:cf:dd:91:3e:3f:15:58:0d:4f:d1:1f:b8:
         39:5c:14:b1:25:6d:95:c3:72:b9:92:53:1d:35:9f:58:84:cc:
         2d:cb:b2:a8:59:b7:e1:9c:ec:2c:b7:e9:a8:9c:3c:42:d3:e5:
         d7:e3:71:ee:98:cc:fe:85:e7:49:7a:31:05:a0:20:7e:bc:b1:
         0f:d4:b6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 10:11:10 2022 by LibreSSL & rpki-client.