RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer (download)

Subject key identifier:   5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: IP: 193.218.203.0--193.218.204.255
    2: IP: 193.218.222.0/24
    3: IP: 193.219.0.0/24
    4: IP: 2a0f:99c0::/32

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 575653826237 (0x8607a44ebd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb  2 09:38:47 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=5dc67c6be367ab9e941d1427d050449447b8865c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:83:b8:a5:66:b4:72:62:72:5c:dd:4e:ba:f3:
                    49:2b:5c:51:eb:86:08:1c:36:1f:6f:76:17:70:60:
                    3d:0b:6a:b2:55:43:a5:a4:cd:97:f7:84:48:ed:d3:
                    fa:03:c5:d4:a5:6f:03:0a:f8:2c:99:5d:b1:25:d5:
                    9c:12:39:2a:99:1d:dc:15:89:6d:54:f5:1d:31:a2:
                    96:f3:6d:b3:15:77:c5:7d:cb:ed:c1:f3:6f:89:57:
                    27:aa:80:ba:3e:a8:23:6f:36:9b:e7:aa:ff:d0:cf:
                    9b:55:34:16:9d:f8:c6:cc:e3:e4:b1:d3:62:21:fc:
                    2e:2b:5f:8b:8c:88:f2:a2:ff:0e:9c:bc:b2:9c:ae:
                    42:64:a0:a9:35:93:37:8b:c4:01:02:b4:f6:2c:ca:
                    6f:8f:50:8c:17:b9:56:30:a3:3a:86:30:91:ee:5e:
                    87:e3:d0:0f:ec:c1:c1:48:ea:21:84:ce:bf:61:af:
                    30:a9:61:56:3b:a1:a8:66:06:d1:db:36:86:89:fb:
                    71:ca:6d:c3:25:1e:0d:85:05:44:c0:18:a2:d7:32:
                    24:d5:7b:f0:b5:0d:8e:87:06:a7:c4:90:56:1e:1b:
                    76:ac:a5:89:7f:bb:72:f7:a9:28:49:d5:c8:37:a8:
                    65:fb:1b:1a:3e:5b:5c:eb:67:04:b5:e8:40:54:c0:
                    b2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                010 ....0.0.........................0
....0....*...
    Signature Algorithm: sha256WithRSAEncryption
         9d:41:e6:bf:0e:28:0a:35:92:ea:1a:0d:bd:e4:19:2b:99:b2:
         9b:d1:89:cc:7d:ce:8c:e3:2f:78:b1:fb:a3:02:73:ed:0d:28:
         eb:67:72:39:fe:c9:18:7f:49:7a:c0:44:75:10:61:f5:eb:86:
         08:ba:24:c0:57:7f:6a:a2:38:d0:a8:ba:78:81:36:b9:d5:cf:
         f0:a9:6d:27:14:64:93:e9:00:0b:f9:89:f9:ab:22:64:13:59:
         1d:24:17:9b:e5:f1:74:bc:c4:9e:c9:29:99:40:83:22:80:8e:
         ca:51:7f:8a:cf:26:11:f8:ff:7a:46:3e:4f:b3:97:66:56:f9:
         e6:bd:d0:6d:d2:9a:59:de:c2:9a:7f:7f:57:3b:df:79:76:c5:
         d9:ee:4f:da:01:0f:60:b6:01:9a:41:e9:8a:9a:24:f8:e7:03:
         4a:2d:06:36:b6:eb:42:9b:b1:79:57:b6:6c:61:3d:c0:88:85:
         3c:fe:71:64:7f:3b:39:5c:b1:af:f1:db:e3:e5:ee:10:6a:42:
         da:d9:38:de:b3:17:21:6d:aa:00:25:0d:a1:95:65:6d:45:f3:
         b6:68:36:83:8d:90:21:2a:79:25:23:d1:70:87:d4:23:f7:06:
         db:b9:ac:98:a7:c0:2d:3a:a1:d3:f7:23:d5:8c:ae:af:01:bd:
         ba:57:7b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jul 27 22:31:20 2021 by LibreSSL & rpki-client.