RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer (download)

Subject key identifier:   4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: AS: 6675
    2: AS: 8220
    3: AS: 8372
    4: AS: 9126
    5: AS: 12640
    6: AS: 12755
    7: AS: 12761
    8: AS: 12878
    9: AS: 15404
    1: IP: 27.110.0.0 -- 27.110.19.255
    2: IP: 46.248.128.0/19
    3: IP: 62.23.0.0/16
    4: IP: 62.72.96.0/19
    5: IP: 62.84.192.0/19
    6: IP: 62.96.0.0/16
    7: IP: 62.97.64.0/18
    8: IP: 62.152.96.0/19
    9: IP: 62.192.0.0/19
    10: IP: 78.143.0.0/18
    11: IP: 78.156.64.0/19
    12: IP: 80.80.0.0/19
    13: IP: 80.169.0.0/16
    14: IP: 80.251.160.0/19
    15: IP: 82.112.192.0/19
    16: IP: 84.14.0.0/16
    17: IP: 84.16.160.0/19
    18: IP: 85.88.128.0/19
    19: IP: 87.241.0.0/18
    20: IP: 118.67.224.0/19
    21: IP: 157.120.224.0/21
    22: IP: 157.120.236.0 -- 157.120.255.255
    23: IP: 193.82.0.0/18
    24: IP: 193.93.80.0/22
    25: IP: 193.114.160.0/19
    26: IP: 193.116.128.0/18
    27: IP: 193.118.160.0/19
    28: IP: 193.118.224.0/19
    29: IP: 193.188.132.0/23
    30: IP: 194.223.128.0/19
    31: IP: 195.68.0.0/17
    32: IP: 195.110.64.0/19
    33: IP: 212.0.96.0/19
    34: IP: 212.23.224.0/19
    35: IP: 212.31.224.0/19
    36: IP: 212.35.96.0/19
    37: IP: 212.36.128.0/18
    38: IP: 212.74.64.0/19
    39: IP: 212.78.160.0/19
    40: IP: 212.121.128.0/19
    41: IP: 212.123.192.0/18
    42: IP: 212.161.0.0/17
    43: IP: 212.203.64.0/18
    44: IP: 213.27.128.0/17
    45: IP: 213.41.0.0/17
    46: IP: 213.61.0.0/16
    47: IP: 213.86.0.0/16
    48: IP: 213.164.0.0/19
    49: IP: 213.173.160.0/19
    50: IP: 213.185.160.0/19
    51: IP: 213.208.192.0/18
    52: IP: 213.215.128.0/17
    53: IP: 213.229.128.0/18
    54: IP: 213.246.192.0/18
    55: IP: 217.110.0.0/15
    56: IP: 217.173.96.0/20
    57: IP: 2001:920::/29

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 656484516357 (0x98d986c205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:51:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a3:94:da:e4:b5:6d:20:41:31:fd:17:3e:4a:
                    20:af:31:a0:4d:03:6b:7a:aa:ec:ac:76:56:3e:72:
                    f9:33:60:b6:0a:aa:d0:ef:48:9d:f0:5c:a9:ea:70:
                    84:c5:f3:b9:cc:e2:df:c2:5e:63:3e:1b:df:16:b8:
                    b8:ab:e2:cc:e8:f5:36:9a:2f:68:e0:90:09:26:e9:
                    30:10:1a:5c:3e:8b:6f:2b:1b:36:0c:f5:95:2d:16:
                    27:c1:bf:a4:e7:4a:de:cc:b8:e6:c4:b2:52:f8:18:
                    72:3b:b0:b0:a7:a4:fd:3a:5c:c7:b7:a0:9a:71:cb:
                    f4:5b:b1:8c:6f:49:af:43:55:c7:f3:b9:c0:6f:12:
                    9f:e8:16:60:e4:23:4c:4c:f2:ce:33:40:60:bc:14:
                    94:67:27:9e:35:ab:4e:07:5b:af:b7:ed:a5:e1:bd:
                    57:4c:64:a9:1c:c4:58:12:77:70:4d:07:94:b5:0c:
                    fd:c4:1a:3b:11:90:ed:67:f7:dd:5d:68:3b:91:9a:
                    82:45:47:92:ad:a4:91:04:3c:70:58:42:01:ad:53:
                    34:da:ff:97:50:a0:7f:a7:f4:4d:0e:65:f3:8d:90:
                    3c:11:6c:b3:8d:8e:09:2e:9f:4a:d3:4a:13:8a:5d:
                    a2:65:1e:68:32:43:1b:cf:67:85:69:3c:29:45:6c:
                    aa:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.0.0-27.110.19.255
                  46.248.128.0/19
                  62.23.0.0/16
                  62.72.96.0/19
                  62.84.192.0/19
                  62.96.0.0/16
                  62.97.64.0/18
                  62.152.96.0/19
                  62.192.0.0/19
                  78.143.0.0/18
                  78.156.64.0/19
                  80.80.0.0/19
                  80.169.0.0/16
                  80.251.160.0/19
                  82.112.192.0/19
                  84.14.0.0/16
                  84.16.160.0/19
                  85.88.128.0/19
                  87.241.0.0/18
                  118.67.224.0/19
                  157.120.224.0/21
                  157.120.236.0-157.120.255.255
                  193.82.0.0/18
                  193.93.80.0/22
                  193.114.160.0/19
                  193.116.128.0/18
                  193.118.160.0/19
                  193.118.224.0/19
                  193.188.132.0/23
                  194.223.128.0/19
                  195.68.0.0/17
                  195.110.64.0/19
                  212.0.96.0/19
                  212.23.224.0/19
                  212.31.224.0/19
                  212.35.96.0/19
                  212.36.128.0/18
                  212.74.64.0/19
                  212.78.160.0/19
                  212.121.128.0/19
                  212.123.192.0/18
                  212.161.0.0/17
                  212.203.64.0/18
                  213.27.128.0/17
                  213.41.0.0/17
                  213.61.0.0/16
                  213.86.0.0/16
                  213.164.0.0/19
                  213.173.160.0/19
                  213.185.160.0/19
                  213.208.192.0/18
                  213.215.128.0/17
                  213.229.128.0/18
                  213.246.192.0/18
                  217.110.0.0/15
                  217.173.96.0/20
                IPv6:
                  2001:920::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6675
                  8220
                  8372
                  9126
                  12640
                  12755
                  12761
                  12878
                  15404

    Signature Algorithm: sha256WithRSAEncryption
         6a:9b:82:c2:e4:88:46:0f:d4:3a:34:c5:df:46:1c:19:b9:08:
         47:e3:7d:6a:74:d9:50:5e:ce:53:61:25:84:be:c5:b3:d7:fc:
         d0:6e:31:76:cc:b5:50:a0:5a:ec:aa:e3:d1:e3:f0:70:1f:73:
         c5:47:04:1c:8a:83:56:b2:de:a4:bd:35:6d:08:28:73:4b:fc:
         85:16:3d:b9:16:9f:fa:f2:5d:03:f4:39:e0:44:d2:ac:14:da:
         9c:0c:32:a8:2b:28:6a:5c:12:ec:00:33:4d:54:d7:25:cc:b0:
         cc:4d:95:cc:49:c7:0c:56:0d:49:a9:27:91:81:e1:19:28:e5:
         83:ca:6f:76:29:c7:85:2e:06:46:69:1c:b9:42:55:03:39:74:
         d1:d9:96:a7:98:63:9b:a7:c7:07:2d:a9:63:ff:44:99:9f:12:
         1b:9f:26:81:90:76:1b:29:03:28:e7:4c:5d:f3:23:8d:b8:d9:
         f6:b1:6e:c7:3d:4f:cc:ca:4a:6c:29:3a:8b:77:80:7a:54:2c:
         59:8d:bc:85:d2:48:13:db:d4:67:97:6f:d1:00:dc:06:2d:e1:
         a3:e2:30:ff:6a:7a:58:cd:4a:45:a1:ae:77:16:87:64:ac:a9:
         44:18:3f:f0:b2:5e:4f:4a:e9:3a:e3:50:37:4b:e3:a6:d7:49:
         b6:34:ac:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 02:57:21 2022 by LibreSSL & rpki-client.