RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer (download)

Subject key identifier:   4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: AS: 51714
    1: IP: 45.86.156.0/22
    2: IP: 85.117.240.0/22
    3: IP: 185.236.8.0/22
    4: IP: 185.255.112.0/22
    5: IP: 192.144.32.0/22
    6: IP: 193.38.248.0/22
    7: IP: 194.110.172.0/22
    8: IP: 2a09:7900::/29
    9: IP: 2a09:fd00::/29
    10: IP: 2a09:ff00::/29
    11: IP: 2a0d:5a80::/29
    12: IP: 2a0d:dcc0::/29
    13: IP: 2a0d:ecc0::/29
    14: IP: 2a0e:e380::/29

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 691735856321 (0xa10eab84c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:04:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:46:48:0d:d7:4b:d5:f4:80:f2:17:e3:3b:32:
                    82:82:4a:49:84:09:86:02:11:9d:1a:23:a7:c6:75:
                    f0:71:c6:8e:aa:0f:28:19:ab:1d:66:76:34:2c:10:
                    94:97:87:22:88:b9:05:d0:30:c8:ee:1e:63:a7:ed:
                    bd:91:f0:4e:df:40:44:bf:9e:ed:77:fe:d0:fa:51:
                    c1:7e:15:e6:78:84:9e:05:74:9b:b2:57:b4:60:24:
                    46:75:6a:a5:53:a8:a4:7e:e6:ae:79:da:e5:c2:ed:
                    f1:8d:85:01:a7:0c:a9:a8:ed:da:18:d4:59:0e:e3:
                    7b:f7:87:35:56:5e:29:b8:f8:d7:84:1a:ec:85:d6:
                    71:fe:d6:af:a0:0d:ca:5e:2d:31:6b:e6:3f:83:de:
                    35:fe:3c:a8:ae:fa:01:21:cd:08:61:6e:a1:15:18:
                    84:51:34:90:92:c6:79:4a:de:fc:6f:28:49:38:13:
                    17:a9:78:e3:2d:2d:f1:74:ad:a6:5a:d2:39:3c:2c:
                    63:ea:68:2b:e8:1a:e9:a6:8d:81:26:6c:f0:2b:4a:
                    00:2d:44:f6:ec:0f:26:86:b0:38:eb:3a:4f:74:b7:
                    8e:b0:04:52:dd:34:01:77:2a:df:dc:1d:a3:97:da:
                    a1:d9:f2:db:e5:1d:54:e0:93:db:a7:e0:00:4d:0b:
                    16:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.86.156.0/22
                  85.117.240.0/22
                  185.236.8.0/22
                  185.255.112.0/22
                  192.144.32.0/22
                  193.38.248.0/22
                  194.110.172.0/22
                IPv6:
                  2a09:7900::/29
                  2a09:fd00::/29
                  2a09:ff00::/29
                  2a0d:5a80::/29
                  2a0d:dcc0::/29
                  2a0d:ecc0::/29
                  2a0e:e380::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51714

    Signature Algorithm: sha256WithRSAEncryption
         53:66:11:06:00:b3:e8:d3:5c:08:14:73:eb:48:47:7d:e9:17:
         2a:44:77:5f:c6:60:45:6a:fb:d9:43:08:fa:76:81:51:ee:d7:
         f5:eb:7b:5a:bd:86:44:82:6a:11:6e:f3:40:aa:70:1a:9b:f6:
         6d:95:c8:59:cb:42:66:3a:9d:34:d2:85:4e:26:9c:e0:ce:15:
         a1:1c:eb:4e:ae:35:40:be:34:5a:c6:38:21:da:87:5d:0d:3d:
         53:43:43:e2:42:81:3e:bd:1d:6c:e9:13:20:3f:94:d6:78:c6:
         a4:c7:35:52:b4:79:a4:2b:38:63:77:54:09:af:34:65:b2:ce:
         71:a8:88:c5:e7:8a:b9:d3:c3:29:a2:c2:af:3c:62:90:47:64:
         b6:a4:24:08:b8:5e:5a:de:8c:ea:1f:c5:b1:01:55:96:ba:c6:
         7d:ea:bb:3f:74:98:32:20:15:ee:f2:a9:aa:dc:90:bb:5c:01:
         61:ba:18:cd:18:c9:1b:6d:51:a0:a5:8b:39:3d:c0:68:5c:72:
         9b:4a:c2:66:9e:31:81:8a:a7:9b:0e:cd:93:50:ad:d6:be:fa:
         d4:be:4b:3e:c3:dc:67:61:04:fe:51:4d:e1:cb:ad:d5:fa:86:
         b2:cf:b6:6b:e3:02:38:18:c5:3c:93:c3:b1:7c:7f:d8:d5:32:
         5c:32:24:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 10:11:39 2022 by LibreSSL & rpki-client.