RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/U_tSQvmM_53qm6qMiuRmpCtTfFw.cer (download)

Subject key identifier:   53:FB:52:42:F9:8C:FF:9D:EA:9B:AA:8C:8A:E4:66:A4:2B:53:7C:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/U_tSQvmM_53qm6qMiuRmpCtTfFw.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: AS: 8656
    2: AS: 12471
    3: AS: 197452
    1: IP: 193.82.96.0--193.82.159.255
    2: IP: 193.82.192.0/19
    3: IP: 193.117.32.0/19
    4: IP: 195.152.0.0/15
    5: IP: 2a02:1620::/32

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/U_tSQvmM_53qm6qMiuRmpCtTfFw.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 584340976332 (0x880d6fb2cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 22 10:29:51 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=53fb5242f98cff9dea9baa8c8ae466a42b537c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ba:34:a1:0b:36:a6:49:ea:c2:94:9d:78:34:
                    a8:fb:6a:b4:38:bc:bb:11:06:44:30:90:18:e7:d7:
                    43:d0:5b:22:79:ff:97:f1:d6:76:cf:ec:9a:32:9b:
                    cf:dc:b9:bc:5f:39:5e:5d:df:b0:50:12:f0:dd:c8:
                    78:07:56:aa:32:01:3d:87:8b:ce:ce:89:d7:d9:99:
                    78:82:dd:b7:2a:f2:86:99:c1:f5:4b:cb:d9:84:5b:
                    6e:a0:eb:f1:4a:7f:9d:51:75:4b:11:ec:27:f6:f9:
                    98:d8:85:51:a1:af:ba:d2:d3:08:e3:dd:37:39:a6:
                    0c:be:a5:06:45:d9:67:b9:57:b1:a1:15:84:57:6d:
                    c8:e0:10:13:e3:17:dc:c2:c9:ee:b6:07:df:4a:4b:
                    1c:cc:a6:13:43:61:dc:89:d9:c6:61:38:d4:c5:5b:
                    26:cb:c9:93:94:51:8b:73:61:5a:ef:bd:33:20:53:
                    3e:bc:68:ad:22:50:96:4b:22:f8:fa:9b:6f:32:94:
                    68:9a:8e:48:c3:c8:38:a8:1f:e9:16:cb:c2:7f:75:
                    f9:2d:bd:6f:fe:91:57:3e:db:6d:9f:ab:bf:be:f5:
                    5a:66:5b:6e:84:ac:34:31:42:9c:4b:a9:1a:93:3a:
                    39:1a:ab:fc:d6:d9:99:64:52:71:8a:ac:27:05:98:
                    89:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                53:FB:52:42:F9:8C:FF:9D:EA:9B:AA:8C:8A:E4:66:A4:2B:53:7C:5C
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/U_tSQvmM_53qm6qMiuRmpCtTfFw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.82.96.0-193.82.159.255
                  193.82.192.0/19
                  193.117.32.0/19
                  195.152.0.0/15
                IPv6:
                  2a02:1620::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8656
                  12471
                  197452

    Signature Algorithm: sha256WithRSAEncryption
         33:af:ff:ea:47:be:10:83:46:61:63:da:09:c1:2a:5f:4a:50:
         6b:2c:cf:0a:e9:3c:1d:07:d7:d2:57:40:a3:b3:7f:6c:2c:32:
         bd:b6:1a:f2:f8:f6:21:41:75:3c:d2:26:b8:c6:88:38:50:5e:
         cd:e8:d3:d7:dc:66:9a:01:77:79:1b:0a:3a:89:84:2c:ed:16:
         ee:3f:39:8b:cf:81:4e:d0:e9:37:60:50:cd:fe:f2:ec:a2:69:
         78:5c:66:65:ff:0a:8d:9f:65:82:78:82:1e:66:5a:a0:c6:5b:
         e0:df:7f:2d:97:e6:a7:07:a4:21:f4:15:36:70:ca:4a:16:d1:
         34:c1:c8:5e:4a:b1:cb:c3:23:41:55:df:f0:51:95:cd:ea:8c:
         52:9d:c4:de:7f:53:bb:03:66:c6:2c:ee:53:9b:29:9e:25:bf:
         10:ee:e6:c7:7f:9c:93:d8:f9:71:18:09:68:1f:77:74:1c:37:
         20:18:90:79:02:f3:24:f0:52:3e:63:c8:17:e1:89:d2:67:8b:
         a0:57:47:f7:e1:1e:8b:a5:89:c1:b1:13:af:17:0f:cf:03:57:
         04:27:4c:a1:95:2c:23:83:1f:60:90:16:d1:e3:9e:74:d2:0b:
         4d:37:97:4f:07:65:58:ef:3d:68:57:b8:27:b1:b0:d8:8f:84:
         ac:7e:d5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:25:50 2021 by LibreSSL & rpki-client.