RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer (download)

Subject key identifier:   39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: AS: 21321
    2: AS: 58140
    1: IP: 85.158.56.0/21
    2: IP: 85.237.192.0/19
    3: IP: 185.89.76.0/22
    4: IP: 185.93.32.0/22
    5: IP: 193.109.192.0/21
    6: IP: 194.169.217.0/24
    7: IP: 2a01:b840::/32
    8: IP: 2a03:8ea0::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 656397525298 (0x98d4576132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:50:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=390b67368c91b85e84888c5ed2e824d1390810bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ab:5a:89:c0:91:75:71:64:c4:b0:65:b5:88:
                    bb:11:5b:45:12:54:50:e4:96:3d:70:dd:df:39:a7:
                    42:6d:47:c9:ac:88:7e:9f:8b:93:68:4e:d0:2e:d0:
                    f6:0d:20:77:d8:08:df:76:49:0e:cb:f7:1c:1b:ce:
                    be:c3:29:2a:3f:30:68:86:8a:9b:b8:44:31:f0:c9:
                    d1:ef:5a:c1:c0:8b:69:bf:6e:b1:c2:bb:43:fc:f3:
                    3c:55:fc:ac:87:ca:f2:50:72:71:37:4e:eb:f4:59:
                    52:a9:4e:c6:7b:2e:fa:39:fa:ce:b8:6e:ed:80:f8:
                    42:68:c2:97:17:e1:1c:06:a7:eb:11:a5:8a:90:d7:
                    5a:73:d2:87:11:7b:97:c7:ef:bc:31:37:59:3b:f6:
                    d1:c0:fe:4c:5c:62:a5:69:29:20:7b:d1:f0:27:6a:
                    75:9b:3d:6d:b1:9c:c3:5a:e5:f0:e6:02:97:a9:11:
                    4b:22:60:0f:cf:28:e9:87:80:61:66:42:b6:c0:5f:
                    11:8a:8d:4a:85:87:0f:28:19:f7:80:7b:03:c9:69:
                    98:c8:84:52:2c:ed:0f:79:cf:71:f4:60:a4:87:a2:
                    c3:4b:9a:1c:39:0f:4e:9a:c7:f4:1d:f3:18:57:03:
                    6c:8d:4e:ae:1a:65:5d:4a:90:cb:70:cb:b9:5d:80:
                    48:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.158.56.0/21
                  85.237.192.0/19
                  185.89.76.0/22
                  185.93.32.0/22
                  193.109.192.0/21
                  194.169.217.0/24
                IPv6:
                  2a01:b840::/32
                  2a03:8ea0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21321
                  58140

    Signature Algorithm: sha256WithRSAEncryption
         61:5e:89:fc:ba:be:be:bf:3e:e9:df:fa:5e:ce:3f:71:53:87:
         a4:dc:22:b7:60:51:5e:f9:a1:aa:86:71:47:d4:b5:b2:ca:84:
         04:1e:6a:cb:b7:d6:1c:66:4e:38:0b:6f:dd:80:db:de:23:25:
         5f:0e:3d:05:b8:60:8e:ab:66:de:76:3c:74:aa:d1:7f:03:9c:
         06:7e:94:12:86:fa:26:59:06:fb:90:af:34:78:9c:b1:d1:01:
         27:9e:24:9f:59:c9:dc:53:13:bf:39:27:03:57:5d:e8:eb:3d:
         1c:b0:08:77:0f:83:ee:d8:cf:d6:81:73:c7:8d:94:0a:f7:c7:
         63:2e:72:cb:71:99:40:83:ad:b3:47:23:01:b5:8d:8c:27:c6:
         3c:53:18:29:97:fc:4f:70:de:bb:60:f2:e3:86:52:bc:e1:61:
         f4:8b:f9:3f:96:8f:67:bb:7b:b6:15:0d:06:86:05:b2:2f:90:
         6f:38:31:de:33:07:5a:0f:91:29:bf:75:33:57:79:2a:29:72:
         06:59:a3:f4:14:f0:81:cb:0e:0b:22:d8:a1:ce:9b:e7:87:e4:
         79:6c:ee:d8:40:43:2c:0b:ec:c3:17:e2:d5:5e:d0:27:90:8f:
         37:84:5d:8c:2e:f4:67:e2:41:3d:b9:75:e8:06:9e:55:38:61:
         fe:35:47:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 02:57:17 2022 by LibreSSL & rpki-client.