RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer (download)

Subject key identifier:   58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: AS: 35375
    2: AS: 49201
    1: IP: 185.100.212.0/22
    2: IP: 185.139.24.0/22
    3: IP: 185.235.32.0/24
    4: IP: 2a00:9c60::/32
    5: IP: 2a07:1240::/29
    6: IP: 2a10:f580::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605648070086 (0x8d037025c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 25 08:49:30 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ca:8f:81:36:55:64:52:5d:ed:0d:17:c6:41:
                    4f:6a:67:46:16:f5:57:20:e2:a1:05:f0:20:73:50:
                    02:c9:a2:e3:20:01:52:66:0e:51:c1:db:02:ef:45:
                    c7:c8:c5:ae:ac:f2:37:85:57:db:cc:13:b1:f6:93:
                    d1:3a:ad:72:6f:b5:96:69:ca:f6:bf:9f:3b:5e:8a:
                    8e:98:c2:d8:29:5c:f0:f4:eb:6c:ce:d3:b3:a8:52:
                    bb:23:3a:19:ba:91:ef:9c:d7:37:94:26:92:b7:6d:
                    e8:e3:79:64:2f:fe:23:2f:ca:25:5b:5b:48:05:41:
                    1b:7e:47:9c:c6:75:f6:38:3b:6d:ff:6e:af:76:61:
                    02:dd:7b:f8:f9:2d:bf:28:06:e1:3b:d5:e7:83:d1:
                    6e:58:e3:6e:d1:7d:80:7a:ea:c3:e8:8b:bc:31:3d:
                    61:53:93:d7:17:60:02:7e:5a:6a:80:96:e7:cc:4a:
                    a2:78:fa:c3:f3:94:47:12:5a:e1:04:4c:43:ba:db:
                    36:e6:37:57:8f:46:fb:4c:5a:5a:49:79:c3:48:6b:
                    34:4d:59:9f:32:9b:25:7d:e2:ba:55:c0:76:f8:bd:
                    a0:10:72:db:47:dd:5c:da:c1:42:82:42:b3:b7:75:
                    f1:41:7b:c8:b8:0e:06:26:6e:57:1b:46:a1:e9:3c:
                    0d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.100.212.0/22
                  185.139.24.0/22
                  185.235.32.0/24
                IPv6:
                  2a00:9c60::/32
                  2a07:1240::/29
                  2a10:f580::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35375
                  49201

    Signature Algorithm: sha256WithRSAEncryption
         23:ac:56:37:82:3a:d4:f4:e8:52:20:16:48:90:2e:32:69:ec:
         cc:49:e3:24:85:3f:89:21:d6:af:2e:e7:a4:fa:b6:e0:3a:42:
         c6:99:4e:81:81:a4:c9:f4:b1:e3:65:a2:4a:69:ea:95:ff:7a:
         fb:85:99:32:3b:bb:d7:ac:5e:90:42:50:c4:0d:cc:12:f7:d0:
         0f:57:e4:9e:7e:0c:1b:21:5e:ea:8d:c2:ef:1f:f9:b2:63:4a:
         0a:8a:e1:7b:63:9a:c6:cf:68:73:48:66:27:9e:ce:00:0c:e0:
         4b:fb:80:a7:66:a2:86:4e:7e:19:f3:19:dd:56:14:0c:97:4c:
         11:25:d8:bf:d2:9b:a9:fe:e4:fc:ba:2e:33:22:05:7e:fc:be:
         76:3f:f8:a4:36:93:c4:38:ea:80:8b:63:2f:ee:fb:ea:50:96:
         eb:c5:23:47:73:a7:1e:88:40:12:e6:7a:ed:d3:c7:53:8d:3f:
         e0:29:07:4f:ef:f5:79:77:93:9f:29:5f:13:42:bd:57:e3:2e:
         43:06:fb:ee:f3:35:75:54:d9:6c:f4:7a:c5:2b:63:5d:77:47:
         79:75:2d:08:a1:31:e8:94:af:39:ea:5d:bb:c6:f6:14:21:36:
         39:3f:ee:92:89:38:24:f3:a9:77:ab:4c:1f:20:54:06:b4:54:
         99:06:58:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:26:21 2021 by LibreSSL & rpki-client.