RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/BXoFJal4HCJlK5-9vwKYkA7uFhw.cer (download)

Subject key identifier:   05:7A:05:25:A9:78:1C:22:65:2B:9F:BD:BF:02:98:90:0E:EE:16:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/91/2de3d1-12ed-45bb-a7a9-0eaf7f8c6b92/1/BXoFJal4HCJlK5-9vwKYkA7uFhw.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/91/2de3d1-12ed-45bb-a7a9-0eaf7f8c6b92/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: AS: 44788
    1: IP: 91.199.242.0/24
    2: IP: 91.212.98.0/24
    3: IP: 178.250.0.0/21
    4: IP: 185.235.84.0/22
    5: IP: 2a02:2638::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/BXoFJal4HCJlK5-9vwKYkA7uFhw.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 718852223512 (0xa75eee7218)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:59:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=057a0525a9781c22652b9fbdbf0298900eee161c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:28:4c:07:57:5f:03:47:03:11:58:6a:88:f7:
                    e6:e1:3b:08:2a:b6:ca:02:e2:1c:5c:a9:92:6d:55:
                    79:33:7e:37:19:e5:23:29:c9:c7:1d:95:f0:26:63:
                    7c:25:c3:c8:e9:b0:e6:2c:52:5a:c7:74:e4:b1:34:
                    01:ca:d3:e8:8c:ea:e7:3c:4a:c3:87:1f:43:8c:3e:
                    e2:3d:11:01:c9:69:9b:8f:e8:b2:6f:b0:b4:c5:01:
                    40:02:63:c7:b2:82:0a:e6:41:42:e7:b0:39:bb:69:
                    30:2c:00:cd:38:b1:8c:b5:69:4d:54:c1:bb:b6:a0:
                    f8:20:90:65:bd:8f:21:3a:5d:47:b3:d1:e8:8c:41:
                    e8:d0:84:0b:d9:88:c5:2b:2b:ce:b2:b4:a0:cc:9e:
                    32:7b:d1:7c:ce:c8:55:81:b1:47:fa:d0:00:ee:d1:
                    95:3f:90:69:c5:46:f6:11:67:ec:d7:90:1c:de:69:
                    6b:2c:51:2a:b2:3b:cb:9a:aa:2a:4e:ec:4a:7b:ec:
                    73:2d:57:ac:c6:c8:3c:05:b4:d3:2b:a6:77:97:d2:
                    b2:bf:ab:42:3b:e4:3a:2a:f1:45:33:e9:54:26:fe:
                    45:c1:4b:1c:62:6a:0b:24:0f:e3:f6:db:a9:43:27:
                    28:42:39:72:db:33:2c:07:7f:09:9e:5b:66:6f:3b:
                    01:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                05:7A:05:25:A9:78:1C:22:65:2B:9F:BD:BF:02:98:90:0E:EE:16:1C
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2de3d1-12ed-45bb-a7a9-0eaf7f8c6b92/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2de3d1-12ed-45bb-a7a9-0eaf7f8c6b92/1/BXoFJal4HCJlK5-9vwKYkA7uFhw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.199.242.0/24
                  91.212.98.0/24
                  178.250.0.0/21
                  185.235.84.0/22
                IPv6:
                  2a02:2638::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44788

    Signature Algorithm: sha256WithRSAEncryption
         98:74:42:98:51:0d:77:1a:d1:c1:31:c0:12:43:cf:9f:98:bf:
         ea:e2:ba:ac:5e:c3:60:d9:b5:14:42:69:0a:9c:df:82:c8:bc:
         68:df:93:4f:44:82:34:c3:2d:89:7a:37:20:56:a8:34:b6:e3:
         34:8d:b7:9b:12:18:44:5a:05:3d:d3:6f:3e:10:b0:4b:0e:e6:
         f9:58:f4:db:c6:66:3f:2a:87:5f:d1:c8:3d:68:bc:d1:19:fe:
         17:c5:f1:ef:e9:37:7c:93:ea:a1:6d:dc:e2:d5:7b:d5:db:9c:
         bb:ba:5d:b7:78:b3:b5:af:1a:dc:71:db:2d:c1:c6:b9:8d:79:
         80:51:54:e0:de:1e:fc:d6:23:6a:7b:c6:d2:01:94:c9:90:d2:
         e1:6a:73:8f:6b:c6:e8:0c:4e:a0:86:a1:e7:c0:e4:4a:c4:d3:
         0f:21:ef:f4:4c:f1:04:2b:68:16:11:f6:e5:b9:96:70:ea:e3:
         8d:a8:86:12:31:af:c8:c1:66:26:b8:9d:33:97:8d:ec:0a:cd:
         d2:e2:f3:ca:bb:d9:e4:de:e5:5c:43:d3:99:7f:91:b4:c0:76:
         6a:db:a5:e2:aa:d9:0d:f3:9d:7b:f0:d7:ce:f3:d8:87:ac:23:
         81:0f:e2:2c:19:5c:04:5c:59:aa:15:c0:39:a4:b3:39:80:5f:
         6e:0c:f5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 15:16:48 2022 by LibreSSL & rpki-client.