RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/T4u0ylDc494uLI9faKa3bhwb_Pc.cer (download)

Subject key identifier:   4F:8B:B4:CA:50:DC:E3:DE:2E:2C:8F:5F:68:A6:B7:6E:1C:1B:FC:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/ee/ebdaa2-79dc-415f-9c22-cfb1a6058d91/1/T4u0ylDc494uLI9faKa3bhwb_Pc.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/ee/ebdaa2-79dc-415f-9c22-cfb1a6058d91/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: IP: 45.80.208.0/22
    2: IP: 2a11:100::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/T4u0ylDc494uLI9faKa3bhwb_Pc.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 595165854750 (0x8a92a63c1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 11 15:32:30 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=4f8bb4ca50dce3de2e2c8f5f68a6b76e1c1bfcf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1f:92:61:1b:cd:60:df:c3:fc:46:3b:fc:92:
                    5e:3a:15:0d:b5:e7:da:13:d9:30:7b:cc:fc:e7:1f:
                    45:38:2f:38:58:c7:39:9f:21:1f:c0:56:a2:36:45:
                    b9:26:05:11:57:aa:6b:c3:42:55:59:3a:29:92:12:
                    b4:5f:8c:32:8f:bc:74:5b:ce:be:81:3e:4f:2c:c3:
                    9b:1e:f6:3e:0e:ab:37:a3:94:0f:d7:51:a3:90:a4:
                    0b:1d:08:e2:23:38:66:2a:d3:53:cb:12:fa:fc:22:
                    f5:0a:00:ef:d1:f6:00:90:2c:c3:a6:78:bb:1e:35:
                    08:fc:ac:e2:e1:4c:7e:db:36:6e:45:fe:3c:6e:fd:
                    04:b7:b7:30:5a:81:1f:3b:84:f1:1e:3d:5b:9e:e2:
                    41:e1:3b:e0:54:02:65:0a:48:fa:e1:14:49:35:e0:
                    60:df:de:3a:a9:e4:09:ea:80:85:2b:29:08:c4:13:
                    29:4c:b0:55:66:2e:66:9b:4f:e1:7b:f1:15:2c:89:
                    ad:d0:19:b5:d6:ff:a7:fb:7c:ce:3c:3b:af:0e:ae:
                    7b:9d:10:8b:3a:6c:d0:38:71:9c:12:e3:78:9c:41:
                    df:c9:bb:52:23:f5:97:ad:60:47:60:43:df:a5:20:
                    25:85:0b:66:6d:6b:8c:fe:db:78:fb:73:97:27:8b:
                    a7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4F:8B:B4:CA:50:DC:E3:DE:2E:2C:8F:5F:68:A6:B7:6E:1C:1B:FC:F7
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebdaa2-79dc-415f-9c22-cfb1a6058d91/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebdaa2-79dc-415f-9c22-cfb1a6058d91/1/T4u0ylDc494uLI9faKa3bhwb_Pc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.208.0/22
                IPv6:
                  2a11:100::/29

    Signature Algorithm: sha256WithRSAEncryption
         3e:c2:09:7d:9f:93:4f:23:c4:3e:30:6f:2e:9c:cc:6e:3e:9a:
         f3:0c:ea:f9:56:81:65:53:53:22:da:3c:df:ec:36:60:24:31:
         65:09:77:3d:45:af:55:b1:07:4b:d9:e6:a2:80:1c:60:0a:82:
         ea:84:7a:36:b5:f5:1c:65:00:b2:ca:b9:6e:2f:16:fb:b7:ae:
         27:0c:b4:aa:38:dc:a8:8c:6d:7d:a2:4d:7f:0f:7c:e5:7d:1a:
         1f:ac:a7:0e:09:a8:b5:f4:ec:75:b6:19:91:c1:fc:77:c8:e8:
         69:24:7b:f1:51:d6:2c:79:a4:83:1f:03:52:08:a8:3a:5c:da:
         15:df:ae:dc:27:43:ea:44:81:14:09:89:75:a3:3a:5f:e2:a2:
         de:42:19:74:c3:9e:a7:35:08:e0:0d:44:f2:20:1a:7c:1e:24:
         56:63:47:57:e5:3f:c2:4b:f0:c7:01:97:5b:10:2b:57:0a:2b:
         e3:b4:f1:f6:80:37:2a:2d:89:b8:d9:5a:22:84:6d:a2:59:67:
         a3:2e:05:c5:ae:d9:b3:b9:ac:21:5c:d3:31:10:8f:cd:e4:62:
         a4:fa:d1:ae:0f:17:13:75:61:97:dd:2e:e4:67:f4:bd:51:bb:
         4f:68:ed:b7:44:55:e8:a1:ab:90:0c:e4:8a:3d:73:60:a2:74:
         8c:f8:68:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:25:22 2021 by LibreSSL & rpki-client.