RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer (download)

Subject key identifier:   42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: AS: 47420
    2: AS: 197573
    1: IP: 176.52.184.0/21
    2: IP: 2a02:f180::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 564132287972 (0x8358e795e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:08:00 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=427ce5719caa681adbd493a8d9a38a675d6bd639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b5:67:99:2b:a3:a1:5d:e8:3d:b7:89:d8:5c:
                    98:0a:2f:a9:87:12:35:d2:df:ee:48:ad:c2:b0:15:
                    59:e3:08:6d:dc:39:85:73:51:90:c7:4d:e7:54:97:
                    d0:a7:be:34:97:1a:e8:b8:49:8c:34:17:b9:61:67:
                    83:e7:33:6f:26:b0:d1:c0:ff:18:6d:51:2d:60:fa:
                    54:1c:5b:00:d7:cf:3d:27:48:be:0f:c3:ff:dd:25:
                    79:c3:5f:18:90:40:e9:54:16:fa:85:89:e9:b9:33:
                    0b:bd:2b:c7:76:5e:82:69:3e:b7:32:ee:62:10:b1:
                    06:af:bd:06:3f:ef:91:11:7f:57:3d:2f:0b:38:e4:
                    80:6e:af:79:17:2e:55:af:09:dd:50:d9:9b:85:6b:
                    b7:23:b3:62:c3:03:ba:86:16:8a:68:e4:0b:26:57:
                    e9:e4:97:ac:f8:b5:d1:c3:fd:b8:58:8d:a0:7f:35:
                    0c:16:d2:fa:00:1f:67:8e:a1:7b:9d:d5:47:72:11:
                    1b:cc:cd:77:3b:e2:6a:c4:91:b5:a6:b5:24:51:5d:
                    44:45:4f:bf:ab:dd:e0:2e:ed:77:5b:7b:f2:8b:1a:
                    7c:f4:f2:ff:20:ea:18:ae:6d:3a:47:f6:77:41:f4:
                    22:b4:78:b8:dc:0d:41:a2:90:27:5e:ef:68:2b:c8:
                    5e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.52.184.0/21
                IPv6:
                  2a02:f180::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47420
                  197573

    Signature Algorithm: sha256WithRSAEncryption
         9d:3b:90:73:77:b9:7e:85:f4:c4:bf:41:ab:8c:78:a9:5d:e4:
         a4:24:a6:7a:a3:1b:d6:cb:72:3c:02:ef:0a:25:d8:2e:a3:55:
         fb:b4:0e:cb:e4:ec:09:d7:bc:78:8a:bf:d2:08:ee:fa:12:42:
         a8:66:10:da:44:52:3e:f4:d1:e1:56:a4:6c:19:11:37:12:7e:
         90:20:9b:8f:e8:03:ac:91:a8:7c:4c:bf:f0:fe:bf:4b:08:25:
         98:69:64:7c:c7:ad:1d:0f:e6:ea:8c:ff:50:ef:01:19:64:30:
         a6:18:d0:b8:00:12:40:4c:a3:62:56:e1:20:b1:d6:71:8c:9a:
         d7:83:e2:77:85:5d:cf:75:c0:e9:bb:d6:5b:90:0d:f9:e9:f1:
         2d:55:d8:27:47:43:3b:e8:f1:d1:0b:e5:44:da:98:f0:90:bc:
         93:ca:ce:61:20:ff:34:ae:68:79:27:67:0c:e8:82:5d:7d:2d:
         96:46:66:00:5b:23:39:6a:a5:9c:48:3d:18:ba:a3:f4:ef:8d:
         a6:80:30:21:4f:1f:16:40:ad:a4:a1:6b:12:c0:e3:96:b1:de:
         29:4e:ae:57:68:d8:6d:03:c9:6f:72:f1:ee:87:19:68:86:e0:
         04:65:b3:dc:68:3f:8a:18:5d:b1:d5:21:44:c1:11:c9:b2:0b:
         a6:b6:d4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:24:41 2021 by LibreSSL & rpki-client.