RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer (download)

Subject key identifier:   5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.mft
CA Repository:            rpki1.terratransit.de/repo/TerraTransit/7/
Notification URL:         https://rpki1.terratransit.de/rrdp/notification.xml
Subordinate resources:
    1: AS: 204644
    1: IP: 2.58.72.0/22
    2: IP: 5.133.116.0/22
    3: IP: 5.181.64.0/22
    4: IP: 31.169.120.0/22
    5: IP: 45.10.152.0/22
    6: IP: 45.13.232.0/22
    7: IP: 45.67.224.0/22
    8: IP: 45.80.184.0/22
    9: IP: 45.84.136.0/22
    10: IP: 45.92.8.0/22
    11: IP: 45.94.208.0/22
    12: IP: 45.130.104.0/22
    13: IP: 45.134.116.0/22
    14: IP: 45.137.140.0/22
    15: IP: 45.141.20.0/22
    16: IP: 45.151.120.0/22
    17: IP: 45.155.40.0/22
    18: IP: 80.245.108.0/22
    19: IP: 83.97.112.0/22
    20: IP: 85.255.80.0/22
    21: IP: 91.132.0.0/22
    22: IP: 91.196.220.0/22
    23: IP: 92.118.60.0/22
    24: IP: 130.185.116.0/22
    25: IP: 152.89.120.0/22
    26: IP: 160.238.36.0/22
    27: IP: 176.227.240.0/22
    28: IP: 185.196.0.0/22
    29: IP: 185.244.120.0/22
    30: IP: 185.247.8.0/22
    31: IP: 185.249.224.0/22
    32: IP: 185.252.232.0/22
    33: IP: 185.254.152.0/22
    34: IP: 192.145.116.0/22
    35: IP: 193.31.120.0/22
    36: IP: 193.32.172.0/22
    37: IP: 193.36.236.0/22
    38: IP: 193.58.132.0/22
    39: IP: 193.58.188.0/22
    40: IP: 193.160.244.0/22
    41: IP: 194.34.192.0/22
    42: IP: 194.35.120.0/22
    43: IP: 194.60.86.0/23
    44: IP: 194.60.200.0/23
    45: IP: 194.110.92.0/22
    46: IP: 194.113.64.0/22
    47: IP: 194.156.224.0/22
    48: IP: 195.158.204.0/22
    49: IP: 2a0d:2d80::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 625859607891 (0x91b823bd53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 22 02:45:23 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=5dc970755824cb967cad6f3b964709b092d43069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5c:ee:27:2d:2b:53:86:ca:dd:d7:4b:d3:9f:
                    c6:01:80:b4:85:a6:d5:b9:42:88:76:55:8a:d9:8d:
                    58:a8:55:7a:3c:cb:e8:53:75:5b:9f:d5:9e:6b:29:
                    35:2b:2f:b1:9f:8f:27:f8:93:ec:be:46:d1:e4:56:
                    7d:6c:98:85:af:27:cb:24:7a:3c:c2:eb:9b:38:f8:
                    c8:97:2f:88:41:dd:9a:c6:19:c3:2b:ec:38:69:a7:
                    ee:1c:7a:41:34:33:a3:98:de:27:02:c0:12:2a:60:
                    a6:64:6f:02:05:06:62:e3:28:4c:45:a8:42:8e:17:
                    18:f2:e3:fd:b0:bb:f6:8b:9d:26:6c:42:2d:76:89:
                    c2:05:3a:b8:bf:8a:1e:df:30:b5:29:66:5f:b1:57:
                    4a:5f:7e:7f:ae:26:db:b9:a5:3e:31:68:c7:d2:d1:
                    f4:6f:d9:d2:68:7b:f8:6f:ee:dc:20:ed:c5:dc:90:
                    c8:7a:58:84:58:e8:ea:4a:1d:f2:07:df:11:4c:e6:
                    de:15:6e:4c:36:49:c1:29:39:1d:d8:24:50:9d:e2:
                    30:95:b6:93:d3:d4:4e:b9:60:b2:73:d9:c5:ed:42:
                    80:d2:fb:bb:3c:47:6a:b9:06:93:a5:43:6b:c6:40:
                    74:7d:95:c8:b2:8d:b5:87:d5:9e:28:32:e9:f6:28:
                    6f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/
                RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.mft
                RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.72.0/22
                  5.133.116.0/22
                  5.181.64.0/22
                  31.169.120.0/22
                  45.10.152.0/22
                  45.13.232.0/22
                  45.67.224.0/22
                  45.80.184.0/22
                  45.84.136.0/22
                  45.92.8.0/22
                  45.94.208.0/22
                  45.130.104.0/22
                  45.134.116.0/22
                  45.137.140.0/22
                  45.141.20.0/22
                  45.151.120.0/22
                  45.155.40.0/22
                  80.245.108.0/22
                  83.97.112.0/22
                  85.255.80.0/22
                  91.132.0.0/22
                  91.196.220.0/22
                  92.118.60.0/22
                  130.185.116.0/22
                  152.89.120.0/22
                  160.238.36.0/22
                  176.227.240.0/22
                  185.196.0.0/22
                  185.244.120.0/22
                  185.247.8.0/22
                  185.249.224.0/22
                  185.252.232.0/22
                  185.254.152.0/22
                  192.145.116.0/22
                  193.31.120.0/22
                  193.32.172.0/22
                  193.36.236.0/22
                  193.58.132.0/22
                  193.58.188.0/22
                  193.160.244.0/22
                  194.34.192.0/22
                  194.35.120.0/22
                  194.60.86.0/23
                  194.60.200.0/23
                  194.110.92.0/22
                  194.113.64.0/22
                  194.156.224.0/22
                  195.158.204.0/22
                IPv6:
                  2a0d:2d80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204644

    Signature Algorithm: sha256WithRSAEncryption
         70:37:99:8b:63:5e:d3:28:23:0b:cc:6f:18:25:25:1e:7f:3d:
         d5:00:ad:c0:62:82:b4:76:cc:47:9d:a6:c5:68:e7:6e:4e:8d:
         a5:d2:4d:29:3a:20:65:fa:32:48:1f:54:f0:7b:0a:76:c8:4a:
         64:96:1b:50:7e:cb:e7:39:28:bf:ea:73:79:c3:0d:a2:f4:8c:
         ba:e8:df:6b:6c:0a:67:80:5a:ae:45:df:4d:cf:45:df:94:8c:
         d5:c3:63:a7:c8:f8:c7:15:09:a4:7a:4d:f3:aa:cb:e4:fb:e4:
         48:b3:ea:c8:3e:91:6f:81:e3:b5:64:ab:92:2d:7e:a2:cb:da:
         33:a6:55:dc:61:31:ee:56:2d:a3:0d:43:f0:2c:a4:7f:3c:49:
         67:8c:93:27:50:f0:73:53:69:c1:0a:a9:58:c2:72:ef:7a:1c:
         b0:97:d6:ab:f1:bc:06:d4:5c:a6:b7:07:e0:d1:e6:2e:91:79:
         d9:8e:06:a0:05:5d:83:d7:07:c1:a7:74:97:8f:ef:49:3b:92:
         86:3e:80:db:a8:8e:53:49:d4:cc:55:2d:5c:31:ad:6f:87:ad:
         cd:00:14:02:1c:04:db:ad:39:a8:86:9f:9e:d9:25:af:bb:58:
         73:e1:8a:8e:c7:df:80:53:8f:b8:84:cd:24:f3:cc:b5:11:0b:
         15:ef:59:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:26:41 2021 by LibreSSL & rpki-client.