RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/IBfMWA0nPFS6MGTNLNavObgEuIc.cer (download)

Subject key identifier:   20:17:CC:58:0D:27:3C:54:BA:30:64:CD:2C:D6:AF:39:B8:04:B8:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 chloe.sobornost.net/rpki/uplift/IBfMWA0nPFS6MGTNLNavObgEuIc.mft
CA Repository:            chloe.sobornost.net/rpki/uplift/
Notification URL:         https://chloe.sobornost.net/rpki/news-public.xml
Subordinate resources:
    1: IP: 2001:67c:2938::/48

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/IBfMWA0nPFS6MGTNLNavObgEuIc.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 579282742682 (0x86dff12d9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 23 17:54:45 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=2017cc580d273c54ba3064cd2cd6af39b804b887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9d:38:df:ee:41:95:30:7b:89:14:35:5b:8e:
                    1d:30:19:79:02:8a:78:23:75:be:52:89:78:0e:f8:
                    92:67:94:ea:2d:1e:92:e1:bc:ab:b2:ec:75:0e:88:
                    a3:1a:43:92:80:12:9f:1c:da:f7:d5:74:bb:ac:7a:
                    82:c1:c3:51:33:b6:db:df:04:bb:70:a0:12:01:95:
                    02:42:db:bd:7e:1c:15:37:64:2e:33:b0:96:7f:f7:
                    b1:7c:fa:0c:95:45:bb:21:ca:b3:45:50:28:de:dd:
                    7e:90:6c:dd:45:d1:1b:ca:5d:fd:a5:9b:e1:d5:ce:
                    f5:08:16:74:fe:41:34:67:94:20:e7:87:73:f0:4a:
                    98:7f:c6:3d:65:68:fb:95:ad:5d:eb:29:37:13:e7:
                    20:42:dc:5a:a3:5f:d4:bd:dc:05:be:98:21:6a:73:
                    2a:6d:f5:1a:3b:73:ea:58:e2:d9:60:54:99:26:b4:
                    ce:08:f3:d2:35:9f:32:9a:2c:c1:46:69:6c:dc:c1:
                    7d:1b:64:ba:77:6a:5e:df:f5:10:54:4a:6d:e7:bb:
                    ae:48:40:f9:8d:d6:57:c0:5a:74:a9:fe:79:ad:5e:
                    11:e8:11:d5:ca:a0:5c:b2:4a:d6:79:7e:55:d5:11:
                    3d:1e:d6:5c:ee:37:d4:c8:50:96:6d:ab:67:7b:55:
                    b5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                20:17:CC:58:0D:27:3C:54:BA:30:64:CD:2C:D6:AF:39:B8:04:B8:87
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://chloe.sobornost.net/rpki/uplift/
                RPKI Manifest - URI:rsync://chloe.sobornost.net/rpki/uplift/IBfMWA0nPFS6MGTNLNavObgEuIc.mft
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news-public.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.... ..|)8
    Signature Algorithm: sha256WithRSAEncryption
         99:b6:40:b2:5d:c2:9e:16:0a:ce:38:d1:33:83:26:12:ac:17:
         42:93:c0:1d:0f:6c:eb:26:5f:8a:ac:8f:8d:c2:f9:1f:0b:c1:
         27:09:bc:3a:33:70:c5:12:db:c8:27:68:78:0b:e9:15:48:47:
         35:d6:1f:b5:72:4e:d6:2e:52:a8:e5:f3:3b:2c:47:61:6c:d0:
         8e:5b:90:84:15:10:3d:81:ab:b3:3a:94:79:05:6f:80:6f:f8:
         43:c0:04:40:77:49:88:c3:52:5b:9f:65:7f:8d:cd:3d:38:a6:
         66:bb:1b:1c:6f:d8:55:3b:1f:14:50:3d:13:b8:af:47:a7:ca:
         28:55:6b:71:90:fb:82:3a:21:9f:3b:6a:55:b7:02:cf:00:ab:
         82:b4:08:da:b4:29:5c:d0:9d:f6:e0:f4:bf:65:dd:f3:10:1d:
         e2:07:20:1c:de:7c:d3:6b:4d:c6:ea:8f:ed:1a:1c:07:ea:75:
         35:fe:42:f2:82:7f:30:ce:d1:3f:5b:df:e5:40:6a:9e:e2:65:
         6c:00:2c:34:03:48:b1:85:99:3e:65:dc:9f:1f:61:6f:50:65:
         68:8b:f0:ed:63:5b:a6:df:65:c4:16:24:7a:df:0c:12:07:fb:
         9a:87:e9:7c:d3:fd:b6:fa:4d:87:14:00:a6:5d:7c:37:e1:17:
         93:78:8b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Jul 30 02:02:20 2021 by LibreSSL & rpki-client.