RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer (download)

Subject key identifier:   35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: AS: 2118
    2: AS: 21082
    1: IP: 62.76.224.0/20
    2: IP: 185.72.8.0/22
    3: IP: 192.91.186.0/24
    4: IP: 192.124.170.0 -- 192.124.173.255
    5: IP: 192.124.175.0 -- 192.124.191.255
    6: IP: 192.124.209.0/24
    7: IP: 192.124.216.0/24
    8: IP: 193.108.112.0/22
    9: IP: 193.124.0.0/24
    10: IP: 193.124.2.0 -- 193.124.9.255
    11: IP: 193.124.15.0 -- 193.124.19.255
    12: IP: 193.124.22.0 -- 193.124.24.255
    13: IP: 193.124.30.0/24
    14: IP: 193.124.33.0 -- 193.124.36.255
    15: IP: 193.124.40.0 -- 193.124.42.255
    16: IP: 193.124.44.0/22
    17: IP: 193.124.49.0 -- 193.124.50.255
    18: IP: 193.124.55.0 -- 193.124.60.255
    19: IP: 193.124.64.0/22
    20: IP: 193.124.80.0/24
    21: IP: 193.124.88.0/21
    22: IP: 193.124.112.0/22
    23: IP: 193.124.117.0 -- 193.124.119.255
    24: IP: 193.124.121.0/24
    25: IP: 193.124.124.0/23
    26: IP: 193.124.128.0/22
    27: IP: 193.124.133.0/24
    28: IP: 193.124.158.0/23
    29: IP: 193.124.200.0/21
    30: IP: 193.124.224.0/22
    31: IP: 193.124.254.0/24
    32: IP: 194.58.31.0 -- 194.58.34.255
    33: IP: 194.58.36.0 -- 194.58.47.255
    34: IP: 194.58.56.0 -- 194.58.61.255
    35: IP: 194.58.66.0 -- 194.58.71.255
    36: IP: 194.58.82.0/23
    37: IP: 194.58.154.0/23
    38: IP: 194.58.222.0/23
    39: IP: 194.58.241.0/24
    40: IP: 194.58.246.0/24
    41: IP: 194.85.248.0/22
    42: IP: 194.87.0.0/16
    43: IP: 194.135.1.0 -- 194.135.2.255
    44: IP: 194.135.16.0 -- 194.135.18.255
    45: IP: 194.135.20.0/24
    46: IP: 194.135.22.0 -- 194.135.25.255
    47: IP: 194.135.30.0/24
    48: IP: 194.135.32.0/21
    49: IP: 194.135.44.0 -- 194.135.46.255
    50: IP: 194.135.104.0/23
    51: IP: 194.135.119.0/24
    52: IP: 194.135.124.0/24
    53: IP: 195.58.32.0/19
    54: IP: 195.133.0.0 -- 195.133.95.255
    55: IP: 195.133.144.0/22
    56: IP: 195.133.192.0 -- 195.133.201.255
    57: IP: 212.192.0.0/19
    58: IP: 212.192.208.0/20
    59: IP: 212.192.240.0 -- 212.193.31.255
    60: IP: 2a00:1c88::/29
    61: IP: 2a01:57c0::/29
    62: IP: 2a03:3ae0::/29
    63: IP: 2a07:e4c0::/29
    64: IP: 2a0b:7300::/29
    65: IP: 2a0c:ff40::/29

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 664717791269 (0x9ac4449025)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:58:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:70:94:db:4c:39:f0:0a:9c:24:13:ec:34:fe:
                    ef:35:ba:a6:55:7f:64:06:d4:2a:4c:76:0b:30:0d:
                    db:77:8c:8f:e7:6c:ce:b8:c2:6f:71:18:0f:c0:b3:
                    c6:b5:ae:c7:42:80:f8:d3:8c:5f:e0:ed:e3:69:13:
                    81:41:37:90:1c:e1:24:76:86:80:27:ea:4e:42:7f:
                    cf:6c:de:08:ce:f4:ab:8c:b2:ba:0c:be:87:41:25:
                    0b:3b:1c:0a:93:76:92:0f:13:80:11:db:2d:c2:03:
                    f5:5e:e0:80:2b:05:83:f8:28:2e:04:17:79:cb:ea:
                    6f:34:f6:1e:9f:8a:9a:3f:ad:56:77:58:f3:ea:d1:
                    35:4c:74:00:de:75:86:30:da:83:87:37:36:dc:af:
                    9b:58:60:04:45:19:11:71:56:d2:1d:32:47:96:4d:
                    6b:0b:40:07:87:6e:22:0d:bb:f5:c2:a1:7a:79:d4:
                    be:08:6b:55:52:12:5a:00:5b:d0:c1:f8:8b:18:db:
                    63:5a:b0:8a:13:eb:5f:37:d9:b9:37:46:29:c5:e8:
                    ee:9e:45:06:a5:2c:e5:da:c3:dc:a3:70:10:99:38:
                    a1:fa:03:8e:6d:56:33:47:5b:fc:4f:c7:ab:56:fc:
                    00:39:22:50:a2:43:d4:22:ad:0e:dd:87:89:3f:4c:
                    8a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.76.224.0/20
                  185.72.8.0/22
                  192.91.186.0/24
                  192.124.170.0-192.124.173.255
                  192.124.175.0-192.124.191.255
                  192.124.209.0/24
                  192.124.216.0/24
                  193.108.112.0/22
                  193.124.0.0/24
                  193.124.2.0-193.124.9.255
                  193.124.15.0-193.124.19.255
                  193.124.22.0-193.124.24.255
                  193.124.30.0/24
                  193.124.33.0-193.124.36.255
                  193.124.40.0-193.124.42.255
                  193.124.44.0/22
                  193.124.49.0-193.124.50.255
                  193.124.55.0-193.124.60.255
                  193.124.64.0/22
                  193.124.80.0/24
                  193.124.88.0/21
                  193.124.112.0/22
                  193.124.117.0-193.124.119.255
                  193.124.121.0/24
                  193.124.124.0/23
                  193.124.128.0/22
                  193.124.133.0/24
                  193.124.158.0/23
                  193.124.200.0/21
                  193.124.224.0/22
                  193.124.254.0/24
                  194.58.31.0-194.58.34.255
                  194.58.36.0-194.58.47.255
                  194.58.56.0-194.58.61.255
                  194.58.66.0-194.58.71.255
                  194.58.82.0/23
                  194.58.154.0/23
                  194.58.222.0/23
                  194.58.241.0/24
                  194.58.246.0/24
                  194.85.248.0/22
                  194.87.0.0/16
                  194.135.1.0-194.135.2.255
                  194.135.16.0-194.135.18.255
                  194.135.20.0/24
                  194.135.22.0-194.135.25.255
                  194.135.30.0/24
                  194.135.32.0/21
                  194.135.44.0-194.135.46.255
                  194.135.104.0/23
                  194.135.119.0/24
                  194.135.124.0/24
                  195.58.32.0/19
                  195.133.0.0-195.133.95.255
                  195.133.144.0/22
                  195.133.192.0-195.133.201.255
                  212.192.0.0/19
                  212.192.208.0/20
                  212.192.240.0-212.193.31.255
                IPv6:
                  2a00:1c88::/29
                  2a01:57c0::/29
                  2a03:3ae0::/29
                  2a07:e4c0::/29
                  2a0b:7300::/29
                  2a0c:ff40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  2118
                  21082

    Signature Algorithm: sha256WithRSAEncryption
         31:ff:d7:33:d7:3e:79:6c:b0:99:08:f7:54:12:ad:05:b9:6b:
         0a:46:15:89:c0:46:80:91:ae:67:44:8c:c2:23:70:09:00:1b:
         c0:4f:8f:d2:02:b8:7e:11:90:4b:27:74:2a:33:7d:3d:de:3f:
         b5:c7:82:2e:ba:39:52:05:78:de:7b:1b:e5:de:73:d8:d6:1e:
         8e:e1:b8:16:dc:79:a6:32:7e:01:29:66:68:0e:f5:14:ec:26:
         7b:80:41:91:a2:6e:9a:2b:20:3e:73:fe:b6:3d:c1:c8:7b:67:
         f4:2f:80:1f:00:f8:0d:83:20:de:45:5d:6e:b8:38:a7:bb:d7:
         46:94:a7:f4:99:dd:d7:3e:d5:84:c0:48:30:36:b2:10:cf:3e:
         6a:2d:ef:c4:ad:63:98:03:dd:57:64:16:21:2a:10:de:99:46:
         88:46:ad:39:39:83:46:4a:77:71:35:7a:57:7b:44:4e:0f:26:
         99:f2:95:33:1f:86:b8:be:c3:49:43:c3:f9:82:b2:04:49:44:
         1b:b2:52:43:e6:0a:47:c1:f9:b7:72:67:06:e0:6c:4d:16:61:
         1f:06:99:9f:31:d7:ae:69:42:d1:5b:ed:bb:ca:d3:17:ac:41:
         93:28:db:2e:18:f0:3b:20:06:6e:12:8e:27:35:8e:f8:7c:2c:
         ac:26:56:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 04:38:49 2022 by LibreSSL & rpki-client.