RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer (download)

Subject key identifier:   2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: IP: 45.141.232.0/22
    2: IP: 93.152.205.0--93.152.227.255
    3: IP: 93.152.230.0/24
    4: IP: 93.152.233.0/24

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 581188521112 (0x8751890c98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar  5 10:55:03 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e2:1f:17:f1:74:76:2a:5d:34:89:32:b6:77:
                    d3:7e:99:ea:32:52:ba:2e:5b:fd:66:53:bd:46:a6:
                    db:cf:1d:cd:24:89:17:25:8d:50:64:6b:33:dd:d8:
                    f4:18:51:5d:8f:46:57:a8:ed:d9:98:b4:15:96:61:
                    b6:bd:ee:f2:c1:cb:f7:97:1d:c5:da:63:a2:fa:f7:
                    ff:7d:ee:bb:50:f0:b5:33:cc:d8:a2:9b:7d:9e:82:
                    6c:59:e6:0d:45:07:71:a7:c5:3f:f1:01:a9:6a:0f:
                    7b:5f:e0:f8:a2:30:46:1d:4a:f7:f3:e9:69:77:26:
                    6d:ae:3c:11:3d:0b:af:0f:f8:e1:14:2f:f9:89:73:
                    2f:0e:83:8f:66:8b:2e:d8:cb:e4:15:ba:38:9e:25:
                    ef:fd:a1:e6:ed:07:d2:11:4c:fd:b9:83:04:ce:9c:
                    d4:31:02:a2:a8:ae:83:8c:06:a3:ee:e6:d5:5e:0f:
                    aa:86:28:f6:2d:cf:77:46:5d:cc:9d:4c:ca:9e:74:
                    c4:ea:e2:31:b0:e1:4e:c5:b0:ec:98:80:57:8c:d4:
                    25:13:0b:ed:99:72:47:11:8d:23:d6:43:da:5a:5a:
                    85:07:ce:ab:63:2d:bb:ff:02:9b:7d:96:db:d4:60:
                    c5:9a:86:78:d2:26:88:74:79:1c:c5:f6:2a:27:75:
                    13:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.232.0/22
                  93.152.205.0-93.152.227.255
                  93.152.230.0/24
                  93.152.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:be:84:63:39:40:dc:10:f8:4c:a3:85:af:36:71:66:26:94:
         dc:6c:3e:73:24:5d:36:3a:09:d2:92:54:9a:d9:e5:ee:87:21:
         d0:74:ad:e4:d7:ff:7e:c2:9d:7d:fb:ef:66:d5:b9:04:56:62:
         43:fc:75:60:8d:c7:bb:20:3e:2a:bd:93:b6:9d:e6:78:da:36:
         e3:57:c4:cd:e6:1a:5e:fe:bf:67:cb:4a:a1:62:24:0f:a5:da:
         e6:75:8a:5f:a6:97:60:b5:0d:f5:f0:8e:99:80:d8:20:1a:04:
         d6:d2:e5:f7:85:51:38:48:7d:10:6f:2b:f1:e6:a5:da:a2:c8:
         8c:a1:34:d6:62:3b:3b:7a:0b:66:1a:f4:a9:2c:2e:45:ce:5b:
         92:6a:1e:7d:ec:40:af:7b:ba:dd:37:52:9b:4f:67:29:83:54:
         7a:14:1e:fd:5c:9b:2d:6d:16:e5:b0:68:16:b0:72:7b:a0:ec:
         de:2a:54:bc:c2:16:da:6a:d8:7a:3e:50:f0:c6:fb:b5:87:24:
         f1:c5:e0:12:f8:57:0d:07:83:be:5d:5d:2b:83:53:7a:85:6f:
         d4:d8:60:2b:9b:16:79:1f:e8:b0:7c:46:b4:43:51:ec:e6:af:
         48:0b:09:58:83:f2:7b:29:89:07:a7:e2:3c:e3:1f:26:24:95:
         a6:c9:b5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:23:12 2021 by LibreSSL & rpki-client.