RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer (download)

Subject key identifier:   2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: AS: 211561
    1: IP: 193.3.54.0/24
    2: IP: 2a11:e400::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609492866499 (0x8de89b15c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 14 13:38:06 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:19:5b:89:1d:70:6b:1d:1c:f4:59:e8:64:1b:
                    81:5e:1b:94:a2:97:d7:4e:af:fb:a3:a4:b9:76:54:
                    f6:ad:bf:ac:dc:fc:73:7f:8d:20:ba:e2:4a:96:1c:
                    36:74:58:4d:95:97:31:2f:3b:2a:b1:f9:d0:2a:b0:
                    75:d0:41:fa:5b:ee:53:71:dc:18:45:04:45:38:42:
                    b6:a4:b9:73:01:c7:ab:0e:e5:43:f9:a2:ee:81:74:
                    7a:31:03:3c:dd:90:e9:54:a0:42:39:6c:9d:53:db:
                    a4:40:54:f1:00:66:60:dd:27:6f:5b:7d:95:42:a0:
                    5e:c2:5b:2b:a8:3e:5c:1c:97:f5:63:7c:e2:09:1e:
                    a0:a2:13:51:d6:11:3b:b9:60:b5:e9:cb:05:86:66:
                    f7:02:68:28:57:62:88:03:76:db:c6:f6:ae:28:ef:
                    05:93:f1:bf:17:16:81:da:97:f4:c9:dd:56:c5:b9:
                    12:f3:4d:22:d6:a1:3d:81:57:e1:1e:c0:c8:71:95:
                    47:c1:bb:af:60:b6:a2:88:2b:7f:78:d1:4c:a2:de:
                    de:40:00:db:e5:43:18:7a:f7:26:2c:46:49:05:bf:
                    1f:47:8c:39:61:6a:82:36:10:61:0b:82:a6:8c:52:
                    a4:b3:f8:17:1d:1d:33:89:f1:41:5c:b8:c0:40:7e:
                    ad:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.54.0/24
                IPv6:
                  2a11:e400::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211561

    Signature Algorithm: sha256WithRSAEncryption
         66:50:a1:4c:cd:07:95:27:04:e2:df:9d:f1:27:7b:be:1b:54:
         20:bc:6a:cd:db:8f:ae:4d:ec:cb:0f:7b:85:54:e5:07:28:cb:
         b9:4e:5d:29:3f:b0:e5:94:d3:7c:78:32:a9:6f:41:04:1f:b2:
         04:e7:c8:78:03:9c:39:37:a0:11:12:f1:65:01:f8:1b:49:9d:
         b5:60:45:16:14:2b:dc:a9:79:64:48:ac:6c:e7:68:1e:ea:f9:
         01:f2:b3:a6:40:b2:80:78:69:5c:85:6a:da:de:63:71:1e:3e:
         e8:93:59:16:55:c5:06:f1:ce:6a:24:c1:78:fd:81:cb:40:9a:
         82:5a:ae:2a:fc:68:c7:e9:96:fe:eb:fc:96:2f:16:fb:77:8e:
         1d:24:fd:34:a9:52:d6:56:4c:d5:46:f4:23:c8:c0:d0:82:c8:
         ba:d6:b4:f8:d5:60:91:a1:1e:47:79:ad:bd:c8:a7:3a:d7:ec:
         2a:89:c3:28:75:0a:b9:7f:b9:8f:ca:71:f3:be:d7:d5:58:f0:
         10:9d:dd:59:eb:68:c1:f7:5c:fa:66:cf:5d:31:10:f1:23:5a:
         15:ae:8e:dc:e7:78:77:e1:ff:77:ad:25:61:61:3c:33:1f:1f:
         5b:0a:e4:0d:a2:20:f7:23:43:a7:6e:71:c0:dc:f0:e8:a2:a3:
         5e:df:c8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:23:07 2021 by LibreSSL & rpki-client.