RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer (download)

Subject key identifier:   44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/RHTPPi-okrX90_MNyCde4QYuHQY.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: IP: 2.58.64.0/22
    2: IP: 185.127.164.0/22
    3: IP: 2a10:b140::/32

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605308289458 (0x8cef2f81b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 24 07:50:02 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=4474cf3e2fa892b5fdd3f30dc8275ee1062e1d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c0:76:33:6e:ed:83:9b:20:e2:b3:09:73:f7:
                    e5:d1:72:39:28:4f:a5:8c:93:29:b3:cf:f0:0b:20:
                    96:87:35:87:49:7f:f8:28:ae:3f:6c:43:43:58:73:
                    22:23:64:ed:58:01:b0:44:0a:e4:f5:c6:93:e4:a6:
                    eb:89:7f:10:8f:77:f7:9f:39:2d:1a:84:59:c0:b9:
                    b5:71:10:e2:8c:f0:c8:e0:4a:8d:be:50:39:47:7c:
                    1a:fb:b0:95:17:25:9a:6f:54:01:ac:00:81:a8:ca:
                    83:8c:5b:fa:b9:3c:a5:38:79:01:eb:33:58:fb:24:
                    1e:19:50:62:c2:4c:52:f9:09:c6:aa:e7:26:1d:32:
                    f9:d0:82:e8:c8:59:54:b7:a0:b2:5a:25:1e:08:77:
                    c4:84:a8:97:ad:4c:2c:75:6f:78:42:97:d5:05:cc:
                    98:4d:61:03:42:37:06:2c:a1:a2:a0:6b:0c:02:cb:
                    2f:44:cb:46:aa:5a:af:68:ea:01:71:d2:f7:44:51:
                    ef:9a:f8:f5:c2:67:a3:a8:f9:c8:e4:ba:86:51:01:
                    d4:87:eb:3a:7c:a7:fd:94:d7:6a:1a:84:89:29:0d:
                    c4:06:99:6a:bb:c0:7f:0f:0d:da:26:b2:71:d1:2a:
                    a1:b5:f7:fc:94:c4:b9:cb:bf:2e:a3:da:2d:6a:6a:
                    5b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/RHTPPi-okrX90_MNyCde4QYuHQY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0#0.....0.....:@......0
....0....*..@
    Signature Algorithm: sha256WithRSAEncryption
         93:1d:44:90:01:44:b4:c1:46:16:5b:7d:48:db:79:2a:3c:7f:
         c9:5c:ac:87:00:d0:bd:50:c8:ee:45:1f:b8:8c:cb:c5:1f:b9:
         45:5c:85:2b:1c:db:36:c3:41:ce:1c:05:cc:3e:ef:e5:5b:36:
         dd:78:d4:7a:c4:f7:90:ca:77:66:12:7c:c3:34:66:40:87:c9:
         d4:cd:1f:f0:4e:02:d9:b1:02:60:5b:6c:87:4f:8e:23:74:a0:
         e4:53:6b:d9:f6:52:6b:1f:49:06:9f:21:fa:51:7d:0f:78:0c:
         c9:d2:6e:40:1c:55:4e:e8:95:54:09:84:e2:d6:d6:7d:6c:97:
         6b:40:ec:24:d3:ef:8f:1e:f0:12:57:38:f6:4c:ae:39:9f:23:
         20:9e:db:69:2e:a0:75:5c:e7:af:85:6d:59:b9:59:f2:93:1f:
         7b:11:60:13:38:09:a1:fe:5b:5d:84:91:b1:e1:ad:62:d0:a8:
         26:a6:5a:a5:2d:9d:76:04:ab:99:9a:b0:56:e5:10:1b:ad:9b:
         68:1e:3b:2a:35:ee:1d:35:26:b3:40:c8:72:06:81:6f:65:05:
         b9:36:a1:3f:4a:3d:82:46:0b:81:2f:b7:61:2e:c1:aa:db:5b:
         4d:2c:ad:ce:77:67:4a:db:13:3f:74:14:54:11:92:3e:da:34:
         a1:16:47:42
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIGAIzvL4GyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjEw
NjI0MDc1MDAyWhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg0NDc0Y2YzZTJm
YTg5MmI1ZmRkM2YzMGRjODI3NWVlMTA2MmUxZDA2MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAzMB2M27tg5sg4rMJc/fl0XI5KE+ljJMps8/wCyCWhzWH
SX/4KK4/bENDWHMiI2TtWAGwRArk9caT5KbriX8Qj3f3nzktGoRZwLm1cRDijPDI
4EqNvlA5R3wa+7CVFyWab1QBrACBqMqDjFv6uTylOHkB6zNY+yQeGVBiwkxS+QnG
qucmHTL50ILoyFlUt6CyWiUeCHfEhKiXrUwsdW94QpfVBcyYTWEDQjcGLKGioGsM
AssvRMtGqlqvaOoBcdL3RFHvmvj1wmejqPnI5LqGUQHUh+s6fKf9lNdqGoSJKQ3E
Bplqu8B/Dw3aJrJx0Sqhtff8lMS5y78uo9otampbeQIDAQABo4ICmTCCApUwHQYD
VR0OBBYEFER0zz4vqJK1/dPzDcgnXuEGLh0GMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QzL2UyMGJhMS02YWU4LTRiNDMt
YTcwOS03NTQ1YzA0ZTE1NzgvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMvZTIwYmExLTZhZTgtNGI0My1h
NzA5LTc1NDVjMDRlMTU3OC8xL1JIVFBQaS1va3JYOTBfTU55Q2RlNFFZdUhRWS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQCAjpAAwQCuX+kMA0EAgACMAcDBQAqELFAMA0GCSqGSIb3DQEBCwUA
A4IBAQCTHUSQAUS0wUYWW31I23kqPH/JXKyHANC9UMjuRR+4jMvFH7lFXIUrHNs2
w0HOHAXMPu/lWzbdeNR6xPeQyndmEnzDNGZAh8nUzR/wTgLZsQJgW2yHT44jdKDk
U2vZ9lJrH0kGnyH6UX0PeAzJ0m5AHFVO6JVUCYTi1tZ9bJdrQOwk0++PHvASVzj2
TK45nyMgnttpLqB1XOevhW1ZuVnykx97EWATOAmh/ltdhJGx4a1i0KgmplqlLZ12
BKuZmrBW5RAbrZtoHjsqNe4dNSazQMhyBoFvZQW5NqE/Sj2CRguBL7dhLsGq21tN
LK3Od2dK2xM/dBRUEZI+2jShFkdC
-----END CERTIFICATE-----

Generated at Tue Jul 27 22:30:41 2021 by LibreSSL & rpki-client.