RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer (download)

Subject key identifier:   3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: AS: 50461
    1: IP: 91.108.192.0/18
    2: IP: 193.106.196.0/22

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 730301652478 (0xaa095eddfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:03:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:da:5f:b1:41:c6:7b:dd:c5:17:e4:0e:04:86:
                    14:03:62:b8:ad:a6:5e:82:12:63:8f:5b:58:4f:59:
                    6d:5f:8f:3f:d1:76:87:e5:be:c7:96:95:c3:1e:76:
                    dc:bb:ed:4c:b8:bb:8d:b4:8a:c4:cf:24:83:47:8b:
                    49:d3:b0:3f:ee:8f:1b:81:72:07:55:2c:b8:4c:a3:
                    54:df:80:37:12:c7:dc:1e:4d:58:60:0c:a2:cd:b4:
                    c3:e0:a5:d5:04:21:81:c4:eb:0c:d9:60:f4:8f:01:
                    3b:57:76:a6:57:ae:a0:ea:53:5b:14:77:a3:aa:19:
                    dd:93:47:4c:4b:03:ab:7d:54:cc:82:29:77:39:0d:
                    fd:49:a3:01:fe:4f:69:ce:20:ad:9c:91:c6:cf:fd:
                    ab:63:a0:04:b9:09:a8:ef:fd:c4:e3:0e:b6:22:3e:
                    ef:c3:5a:ba:91:fe:18:c1:18:a0:3d:99:0a:f7:e9:
                    00:05:fa:5e:a2:7a:96:0c:8b:08:12:10:75:a4:8e:
                    96:2a:51:ab:72:9a:25:a7:a8:f1:77:d0:a4:c3:91:
                    60:1e:07:b8:0a:46:cd:c6:cc:78:6f:30:1f:0d:e5:
                    64:0b:5d:de:f3:2e:a3:8b:9c:f4:df:d7:e6:d2:73:
                    5c:1c:ab:9d:42:6f:37:8c:cf:67:d5:3c:92:a3:d1:
                    62:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.108.192.0/18
                  193.106.196.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50461

    Signature Algorithm: sha256WithRSAEncryption
         37:df:88:dc:90:cd:5a:8d:00:92:1b:0d:80:18:c0:7a:5f:16:
         45:e7:d3:29:0c:a8:c1:ee:a3:3e:29:eb:26:16:33:ca:58:88:
         2b:28:8d:79:f1:5a:0a:91:35:60:29:87:bb:83:a5:c0:de:1e:
         6c:fd:41:88:59:61:91:16:50:f6:53:41:31:a2:98:b3:8e:9b:
         9b:c6:20:9d:53:f6:93:9d:42:fd:06:15:ed:9d:ce:1e:1f:76:
         70:10:1e:eb:47:3c:53:dd:f4:f0:72:e2:8c:eb:08:ce:cb:97:
         40:7b:a3:4f:23:39:8a:c1:3a:11:b6:0e:98:9d:49:ff:a8:31:
         a1:5b:f8:8d:8e:6e:d0:b0:86:ff:d4:92:e2:fd:ed:e4:00:e4:
         aa:19:a7:a5:7b:0d:7b:ef:46:1a:e6:c4:3b:a4:be:8b:e3:4d:
         06:e0:bf:a3:9f:47:4a:65:d6:68:17:c2:57:d0:21:d7:de:df:
         8a:56:8c:c3:cc:30:bc:f3:fc:e3:d1:8e:c3:67:ab:19:66:fd:
         85:dc:15:14:46:fc:4f:34:42:66:36:7a:dc:b9:13:00:9e:5f:
         8e:7c:dd:31:75:61:88:aa:d6:9d:24:03:95:b7:ee:ff:28:9d:
         c5:73:7f:ff:fc:de:09:a8:fa:98:ff:b6:a4:24:dc:25:36:d7:
         9f:fe:f8:aa
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIGAKoJXt3+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTUwMzU0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygzYWRlZWEzYjZh
YWM0ZDgzNGI0ZmQ3YzJlNWQzYzM5N2Y2MWY0M2Q2MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAstpfsUHGe93FF+QOBIYUA2K4raZeghJjj1tYT1ltX48/
0XaH5b7HlpXDHnbcu+1MuLuNtIrEzySDR4tJ07A/7o8bgXIHVSy4TKNU34A3Esfc
Hk1YYAyizbTD4KXVBCGBxOsM2WD0jwE7V3amV66g6lNbFHejqhndk0dMSwOrfVTM
gil3OQ39SaMB/k9pziCtnJHGz/2rY6AEuQmo7/3E4w62Ij7vw1q6kf4YwRigPZkK
9+kABfpeonqWDIsIEhB1pI6WKlGrcpolp6jxd9Ckw5FgHge4CkbNxsx4bzAfDeVk
C13e8y6ji5z039fm0nNcHKudQm83jM9n1TySo9FiwwIDAQABo4ICpjCCAqIwHQYD
VR0OBBYEFDre6jtqrE2DS0/XwuXTw5f2H0PWMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhmLzAxNWY0NC0wZjRjLTQ3MTQt
ODYxNS0yM2IwNzJmNWIxODgvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvMDE1ZjQ0LTBmNGMtNDcxNC04
NjE1LTIzYjA3MmY1YjE4OC8xL090N3FPMnFzVFlOTFQ5ZkM1ZFBEbF9ZZlE5WS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQGW2zAAwQCwWrEMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDFHTAN
BgkqhkiG9w0BAQsFAAOCAQEAN9+I3JDNWo0AkhsNgBjAel8WRefTKQyowe6jPinr
JhYzyliIKyiNefFaCpE1YCmHu4OlwN4ebP1BiFlhkRZQ9lNBMaKYs46bm8YgnVP2
k51C/QYV7Z3OHh92cBAe60c8U9308HLijOsIzsuXQHujTyM5isE6EbYOmJ1J/6gx
oVv4jY5u0LCG/9SS4v3t5ADkqhmnpXsNe+9GGubEO6S+i+NNBuC/o59HSmXWaBfC
V9Ah197filaMw8wwvPP849GOw2erGWb9hdwVFEb8TzRCZjZ63LkTAJ5fjnzdMXVh
iKrWnSQDlbfu/yidxXN///zeCaj6mP+2pCTcJTbXn/74qg==
-----END CERTIFICATE-----

Generated at Sat Jan 1 16:58:13 2022 by LibreSSL & rpki-client.