RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer (download)

Subject key identifier:   53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: AS: 20746
    2: AS: 202950
    1: IP: 62.77.32.0/19
    2: IP: 77.238.0.0/19
    3: IP: 80.241.224.0/20
    4: IP: 83.221.96.0/19
    5: IP: 89.31.48.0/21
    6: IP: 156.54.0.0/16
    7: IP: 185.148.204.0/22
    8: IP: 217.27.64.0/19
    9: IP: 217.169.96.0/19
    10: IP: 2001:4b18::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 714311847746 (0xa6504dcf42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:00:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:75:af:5d:d5:01:06:35:50:78:53:0a:0e:7d:
                    44:98:5f:4c:0d:9d:b3:81:e5:e3:a5:1d:9f:e2:5a:
                    c0:9d:b7:76:ab:1c:97:4f:d8:d0:75:18:6c:99:8b:
                    9b:c2:8f:54:6b:34:7a:4c:bc:ce:61:7e:f8:a3:1d:
                    8e:a0:1a:91:3f:04:72:d3:76:2f:06:62:0f:66:51:
                    fe:fb:0b:97:3a:29:62:43:3b:ff:ed:aa:ad:4b:e9:
                    ab:f6:9d:b2:c0:c1:a9:1b:7a:16:25:ea:e9:90:59:
                    b1:4f:28:1c:fd:bb:ca:90:2a:48:b7:16:11:65:11:
                    08:0e:21:d3:3c:46:38:77:64:84:25:b5:2d:e1:c3:
                    e5:32:d9:c6:f7:cd:9d:a7:43:7d:43:a4:d5:79:12:
                    5c:6a:b3:2b:b5:6a:05:c3:fd:ef:d3:c4:21:e4:26:
                    19:47:f8:1c:f8:74:6a:1d:1f:00:ba:6a:02:20:bc:
                    02:f9:8b:cb:19:4a:94:cb:67:dc:7a:00:12:b9:fa:
                    0c:75:45:72:2c:a5:18:82:cd:d9:91:60:a2:0c:58:
                    da:56:ce:bf:15:83:f7:e7:60:1c:a8:f6:68:a7:d5:
                    67:bc:22:f8:f2:e3:6d:50:0a:16:0c:1e:9a:4b:63:
                    9e:f0:49:c1:74:17:55:bb:99:5e:26:4c:2b:4a:de:
                    95:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.77.32.0/19
                  77.238.0.0/19
                  80.241.224.0/20
                  83.221.96.0/19
                  89.31.48.0/21
                  156.54.0.0/16
                  185.148.204.0/22
                  217.27.64.0/19
                  217.169.96.0/19
                IPv6:
                  2001:4b18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20746
                  202950

    Signature Algorithm: sha256WithRSAEncryption
         36:ae:65:d4:88:7b:c7:55:a5:02:58:de:60:73:75:0e:6c:f7:
         fb:1b:6a:4d:99:47:47:7b:cb:45:68:a4:1f:84:8d:7a:79:7d:
         29:59:8b:6d:65:85:7e:c7:b7:4b:37:cb:24:a9:59:5b:8e:6c:
         56:00:e9:60:4f:ca:f2:66:4b:61:52:ef:59:85:10:a9:94:0b:
         c2:fa:a7:0a:eb:8a:d0:be:c6:43:94:aa:51:a1:d1:d2:39:6c:
         3e:09:c2:33:61:23:b1:1c:60:3f:6b:62:9c:4d:7b:b3:58:00:
         d1:c0:4c:32:0f:04:79:f3:b2:1c:f0:46:33:06:99:01:c0:54:
         a8:1c:41:33:cc:ae:a8:ff:5c:31:5c:64:0b:f8:68:06:60:19:
         98:14:06:44:f5:c4:8c:d7:c4:b5:22:0d:46:0d:39:33:a7:c1:
         54:9d:0e:11:55:85:22:4b:2a:35:fe:b9:28:b8:bb:bf:73:4c:
         be:3f:23:d9:3e:52:a7:69:11:58:a5:8e:b1:20:5c:58:dd:d3:
         f1:fa:f2:dd:c1:cb:2f:5c:17:10:09:7f:7e:02:45:d8:ae:e0:
         21:39:26:d0:cf:1e:50:6b:8d:3a:1e:e4:5e:62:af:93:a4:ff:
         3b:77:24:ab:6b:86:c8:69:af:70:38:c6:0a:ce:1d:03:a1:43:
         af:cb:9b:20
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIGAKZQTc9CMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTIwMDQ3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg1M2MwZTIwNzhl
NGYzZWJhNWY4Nzk1MDNmZGQ4MDljMzgzYmI3NjI4MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAn3WvXdUBBjVQeFMKDn1EmF9MDZ2zgeXjpR2f4lrAnbd2
qxyXT9jQdRhsmYubwo9UazR6TLzOYX74ox2OoBqRPwRy03YvBmIPZlH++wuXOili
Qzv/7aqtS+mr9p2ywMGpG3oWJerpkFmxTygc/bvKkCpItxYRZREIDiHTPEY4d2SE
JbUt4cPlMtnG982dp0N9Q6TVeRJcarMrtWoFw/3v08Qh5CYZR/gc+HRqHR8AumoC
ILwC+YvLGUqUy2fcegASufoMdUVyLKUYgs3ZkWCiDFjaVs6/FYP352AcqPZop9Vn
vCL48uNtUAoWDB6aS2Oe8EnBdBdVu5leJkwrSt6VyQIDAQABo4IC4jCCAt4wHQYD
VR0OBBYEFFPA4geOTz66X4eVA/3YCcODu3YoMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyL2IzNjYzNi0zMzA2LTQ0OGYt
OGVjZi01NjQ4MmIzOTA2NzgvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvYjM2NjM2LTMzMDYtNDQ4Zi04
ZWNmLTU2NDgyYjM5MDY3OC8xL1U4RGlCNDVQUHJwZmg1VURfZGdKdzRPN2RpZy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDA7
BAIAATA1AwQFPk0gAwQFTe4AAwQEUPHgAwQFU91gAwQDWR8wAwMAnDYDBAK5lMwD
BAXZG0ADBAXZqWAwDQQCAAIwBwMFACABSxgwHgYIKwYBBQUHAQgBAf8EDzANoAsw
CQICUQoCAwMYxjANBgkqhkiG9w0BAQsFAAOCAQEANq5l1Ih7x1WlAljeYHN1Dmz3
+xtqTZlHR3vLRWikH4SNenl9KVmLbWWFfse3SzfLJKlZW45sVgDpYE/K8mZLYVLv
WYUQqZQLwvqnCuuK0L7GQ5SqUaHR0jlsPgnCM2EjsRxgP2tinE17s1gA0cBMMg8E
efOyHPBGMwaZAcBUqBxBM8yuqP9cMVxkC/hoBmAZmBQGRPXEjNfEtSINRg05M6fB
VJ0OEVWFIksqNf65KLi7v3NMvj8j2T5Sp2kRWKWOsSBcWN3T8fry3cHLL1wXEAl/
fgJF2K7gITkm0M8eUGuNOh7kXmKvk6T/O3ckq2uGyGmvcDjGCs4dA6FDr8ubIA==
-----END CERTIFICATE-----

Generated at Sat Jan 1 13:35:04 2022 by LibreSSL & rpki-client.