RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/LQ0mVhzfZ1QhxukVf7VWCvlwirg.cer (download)

Subject key identifier:   2D:0D:26:56:1C:DF:67:54:21:C6:E9:15:7F:B5:56:0A:F9:70:8A:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/d5/bf2300-cd1c-4544-b630-bb7b735ceb52/1/LQ0mVhzfZ1QhxukVf7VWCvlwirg.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/d5/bf2300-cd1c-4544-b630-bb7b735ceb52/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: IP: 212.102.107.0/24

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/LQ0mVhzfZ1QhxukVf7VWCvlwirg.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 534046976626 (0x7c57ae2a72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:59:39 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=2d0d26561cdf675421c6e9157fb5560af9708ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bc:df:3c:7d:ef:5a:0a:ef:f3:7b:63:ec:e7:
                    49:95:30:2e:55:a7:cf:84:00:af:55:33:0f:0a:9f:
                    bd:6a:47:d7:0b:23:23:f3:3e:a8:e0:ec:5e:8f:c1:
                    d4:a2:b5:7c:9a:62:b1:04:96:86:ef:ee:e7:a0:88:
                    6a:82:e1:65:78:f9:49:3c:20:ac:43:72:ce:ed:08:
                    2b:58:0f:ff:60:3c:c3:f1:a2:a2:81:24:c3:b3:47:
                    1b:82:44:c6:88:55:9c:6b:53:89:08:17:a4:5e:04:
                    e7:13:8f:85:47:5d:c1:c9:40:14:b8:b6:80:04:14:
                    7a:07:34:82:c8:12:ff:2a:68:93:60:db:a6:fb:12:
                    7c:c6:21:eb:de:48:3a:20:28:9c:0e:7e:58:77:02:
                    1a:7c:21:76:86:b8:26:4d:aa:9c:53:f0:4e:fa:f0:
                    78:9c:46:21:3f:eb:d1:2f:4e:f6:a3:14:a1:6d:60:
                    7e:77:8f:7c:53:27:ed:f3:90:b3:69:9c:86:5b:74:
                    67:a5:9c:a3:56:a3:1d:e9:ef:ab:01:66:f6:77:c1:
                    00:8c:cb:88:bc:ba:e5:a0:ef:ec:14:be:e0:db:52:
                    39:64:8a:cc:ed:a9:44:b6:c0:ec:08:9e:46:ee:a3:
                    2c:b7:28:f4:9d:cd:6e:c0:c7:8d:f9:eb:bf:41:10:
                    8a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                2D:0D:26:56:1C:DF:67:54:21:C6:E9:15:7F:B5:56:0A:F9:70:8A:B8
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf2300-cd1c-4544-b630-bb7b735ceb52/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf2300-cd1c-4544-b630-bb7b735ceb52/1/LQ0mVhzfZ1QhxukVf7VWCvlwirg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.....fk
    Signature Algorithm: sha256WithRSAEncryption
         5b:df:2b:ee:9e:de:73:16:da:6f:9e:da:60:45:f5:16:bd:66:
         e8:a8:87:0b:3c:0f:d2:5e:f5:cc:56:a6:d9:02:d3:f9:6c:67:
         af:09:b7:53:39:c6:10:e7:8d:1e:73:64:00:a0:d7:51:e8:48:
         9e:97:ef:7a:1f:2a:e9:14:18:c7:c5:db:6f:cb:46:35:ea:d3:
         dc:d3:c9:76:ac:62:6d:12:8f:06:74:c4:4a:0c:63:9d:e9:a3:
         1c:06:b5:ec:ab:11:df:09:35:95:81:b7:78:d2:45:c4:b6:de:
         d0:06:ed:ae:11:09:9b:de:d5:5a:bb:d9:bc:f0:6d:dd:ff:c5:
         3b:a7:05:34:6b:6b:2b:ca:b8:b1:1a:02:4f:6b:b4:f9:7f:ef:
         65:95:85:9a:28:30:67:cc:40:45:ec:6f:d8:50:d1:6b:31:92:
         5a:d2:e8:b0:e3:3e:02:30:4c:c8:de:da:68:1b:45:f5:02:83:
         d5:49:0a:83:f0:a3:5b:ff:4b:8b:20:29:50:15:ea:f5:54:17:
         48:cb:d9:64:3b:18:d5:be:52:1b:e6:74:44:09:65:21:11:84:
         45:e9:66:fa:18:bd:d9:62:38:38:f8:26:b3:b1:a4:d5:f6:0e:
         7c:c4:69:cf:81:28:73:f8:bc:01:44:86:2d:ef:25:0b:c7:a0:
         42:ea:bc:2f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Generated at Tue Jul 27 13:54:43 2021 by LibreSSL & rpki-client.