RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer (download)

Subject key identifier:   4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: AS: 51714
    1: IP: 45.86.156.0/22
    2: IP: 85.117.240.0/22
    3: IP: 185.236.8.0/22
    4: IP: 185.255.112.0/22
    5: IP: 192.144.32.0/22
    6: IP: 193.38.248.0/22
    7: IP: 194.110.172.0/22
    8: IP: 2a09:7900::/29
    9: IP: 2a09:fd00::/29
    10: IP: 2a09:ff00::/29
    11: IP: 2a0d:5a80::/29
    12: IP: 2a0d:dcc0::/29
    13: IP: 2a0d:ecc0::/29
    14: IP: 2a0e:e380::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531715814285 (0x7bccbb738d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:46:21 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:46:48:0d:d7:4b:d5:f4:80:f2:17:e3:3b:32:
                    82:82:4a:49:84:09:86:02:11:9d:1a:23:a7:c6:75:
                    f0:71:c6:8e:aa:0f:28:19:ab:1d:66:76:34:2c:10:
                    94:97:87:22:88:b9:05:d0:30:c8:ee:1e:63:a7:ed:
                    bd:91:f0:4e:df:40:44:bf:9e:ed:77:fe:d0:fa:51:
                    c1:7e:15:e6:78:84:9e:05:74:9b:b2:57:b4:60:24:
                    46:75:6a:a5:53:a8:a4:7e:e6:ae:79:da:e5:c2:ed:
                    f1:8d:85:01:a7:0c:a9:a8:ed:da:18:d4:59:0e:e3:
                    7b:f7:87:35:56:5e:29:b8:f8:d7:84:1a:ec:85:d6:
                    71:fe:d6:af:a0:0d:ca:5e:2d:31:6b:e6:3f:83:de:
                    35:fe:3c:a8:ae:fa:01:21:cd:08:61:6e:a1:15:18:
                    84:51:34:90:92:c6:79:4a:de:fc:6f:28:49:38:13:
                    17:a9:78:e3:2d:2d:f1:74:ad:a6:5a:d2:39:3c:2c:
                    63:ea:68:2b:e8:1a:e9:a6:8d:81:26:6c:f0:2b:4a:
                    00:2d:44:f6:ec:0f:26:86:b0:38:eb:3a:4f:74:b7:
                    8e:b0:04:52:dd:34:01:77:2a:df:dc:1d:a3:97:da:
                    a1:d9:f2:db:e5:1d:54:e0:93:db:a7:e0:00:4d:0b:
                    16:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.86.156.0/22
                  85.117.240.0/22
                  185.236.8.0/22
                  185.255.112.0/22
                  192.144.32.0/22
                  193.38.248.0/22
                  194.110.172.0/22
                IPv6:
                  2a09:7900::/29
                  2a09:fd00::/29
                  2a09:ff00::/29
                  2a0d:5a80::/29
                  2a0d:dcc0::/29
                  2a0d:ecc0::/29
                  2a0e:e380::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51714

    Signature Algorithm: sha256WithRSAEncryption
         87:86:d6:46:c6:d0:f4:e5:a9:77:9f:25:10:7a:5f:c7:03:59:
         bd:c0:8f:74:c8:d4:c5:cd:74:21:78:a9:56:52:3f:c9:20:24:
         7c:e8:3d:52:8a:55:90:b0:85:b8:2f:46:e7:4f:77:f5:5f:1a:
         6b:77:c0:b0:39:12:03:90:75:e4:49:f1:a8:d5:c4:77:a3:0f:
         dc:36:91:06:30:32:01:37:8c:11:ed:86:90:5b:33:e8:c7:8a:
         b7:ff:a6:60:7a:b9:3d:24:e3:44:31:92:6e:70:6a:85:56:8e:
         d1:78:77:ae:f6:66:e0:a9:97:b3:2f:1d:4f:32:b8:83:cb:73:
         0c:58:01:f9:9f:4b:32:4a:c2:54:35:5e:be:f6:d8:05:cf:82:
         33:3c:ea:76:db:fb:5b:55:47:c1:c4:44:12:fa:73:40:30:8d:
         b0:47:c6:66:6b:a4:a3:60:f5:83:4b:92:30:19:61:62:34:a7:
         d8:a9:de:03:2c:c9:04:9b:1b:3e:eb:45:08:d5:02:95:a2:ac:
         f6:8f:9f:88:c1:64:f3:9a:5c:2d:0f:1a:d0:43:55:ac:0e:09:
         b7:b7:18:d6:9c:8b:4f:48:f1:0f:78:da:7f:84:39:22:72:1f:
         01:30:90:ab:21:09:e9:57:d3:7b:3e:ae:40:03:7d:a1:14:1d:
         dd:41:3b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:25:21 2021 by LibreSSL & rpki-client.