RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer (download)

Subject key identifier:   63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2022-07-01T00:00:00Z
    Resources:
    1: AS: 34800
    2: AS: 44393
    3: AS: 47422
    4: AS: 50892
    5: AS: 56755
    6: AS: 56950
    7: AS: 58057
    8: AS: 59783
    1: IP: 45.12.68.0/22
    2: IP: 45.136.136.0/22
    3: IP: 45.148.116.0/22
    4: IP: 94.177.122.0/24
    5: IP: 139.28.96.0/22
    6: IP: 185.1.135.0/24
    7: IP: 185.1.154.0/24
    8: IP: 185.1.216.0/24
    9: IP: 185.238.188.0/22
    10: IP: 194.50.92.0/24
    11: IP: 194.50.94.0/24
    12: IP: 194.50.99.0/24
    13: IP: 194.50.111.0/24
    14: IP: 2001:7f8:d9::/48
    15: IP: 2001:7f8:e7::/48
    16: IP: 2001:7f8:119::/48
    17: IP: 2a09:4c0::/29
    18: IP: 2a0c:3b80::/29
    19: IP: 2a0e:97c0::/29
    20: IP: 2a0e:b100::/29
    21: IP: 2a0f:b9c0::/29
    22: IP: 2a0f:e400::/29
    23: IP: 2a10:2f00::/29
    24: IP: 2a10:cc40::/29
    25: IP: 2a10:ccc0::/29
    26: IP: 2a10:d380::/29

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 645840347097 (0x965f159fd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov 24 10:08:19 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ca:89:25:2a:60:70:13:16:2c:ea:c2:96:c7:
                    94:5e:55:2f:e3:15:63:cc:a0:ee:e2:83:ac:95:7d:
                    53:e2:b9:8e:06:04:57:f6:34:9b:a7:44:33:3c:80:
                    ad:da:8f:6a:fd:c2:9f:28:69:2c:fd:26:19:50:2e:
                    16:a0:5e:df:2d:d6:79:da:e6:7f:30:d9:b5:74:fd:
                    ff:46:37:3c:7c:d4:c8:f1:29:1e:b4:f5:7c:25:ed:
                    9a:74:ba:18:b3:39:ad:4d:55:8d:bd:46:24:13:71:
                    6e:2c:81:0d:0e:46:b1:9a:89:6d:a1:e6:41:98:a6:
                    20:e8:4f:33:ca:db:c7:77:d1:62:96:d1:38:83:70:
                    fe:27:d6:c8:0f:37:fd:a4:9b:ef:86:ca:f0:f6:bb:
                    45:fd:31:86:d7:02:df:2f:72:d5:8f:a4:af:de:19:
                    bd:7b:47:d7:81:98:9e:0e:55:ec:75:e9:13:b4:84:
                    fc:b1:dc:24:31:4d:62:23:36:17:49:86:fa:4d:79:
                    e6:a9:e7:16:80:e6:54:8f:f0:21:b5:36:78:96:06:
                    42:af:38:53:c4:03:a6:c4:17:43:26:43:39:c5:8a:
                    78:89:31:04:96:5e:6a:52:fe:33:1f:83:b4:cd:30:
                    87:d5:22:1b:4e:3c:21:12:ba:a8:1a:e0:ff:bf:c0:
                    13:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.68.0/22
                  45.136.136.0/22
                  45.148.116.0/22
                  94.177.122.0/24
                  139.28.96.0/22
                  185.1.135.0/24
                  185.1.154.0/24
                  185.1.216.0/24
                  185.238.188.0/22
                  194.50.92.0/24
                  194.50.94.0/24
                  194.50.99.0/24
                  194.50.111.0/24
                IPv6:
                  2001:7f8:d9::/48
                  2001:7f8:e7::/48
                  2001:7f8:119::/48
                  2a09:4c0::/29
                  2a0c:3b80::/29
                  2a0e:97c0::/29
                  2a0e:b100::/29
                  2a0f:b9c0::/29
                  2a0f:e400::/29
                  2a10:2f00::/29
                  2a10:cc40::/29
                  2a10:ccc0::/29
                  2a10:d380::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34800
                  44393
                  47422
                  50892
                  56755
                  56950
                  58057
                  59783

    Signature Algorithm: sha256WithRSAEncryption
         07:93:c2:09:6d:14:bf:0d:c1:9c:b4:96:3b:45:24:4d:c6:40:
         02:37:e1:87:88:2c:86:df:8e:dd:03:34:f8:2c:1d:84:e0:be:
         39:f9:b8:89:5d:d0:f6:a4:76:32:cf:28:6b:d4:cf:b7:d9:22:
         30:69:22:c9:38:5b:05:18:9d:5d:33:ec:c0:b6:37:51:8d:ae:
         30:86:4f:40:83:d2:18:d7:a0:4b:ad:f3:d0:ec:79:81:eb:df:
         83:f1:59:50:e2:71:96:6a:e5:c5:eb:ac:d3:0f:2e:0e:ad:39:
         c3:5f:12:61:e0:a8:08:20:06:a0:54:8b:e6:ac:9c:9f:54:be:
         0e:b5:3b:30:69:01:82:5e:12:8e:c1:9f:25:d2:d3:66:0a:99:
         03:0c:6e:07:b5:26:aa:75:a5:f4:ce:83:3a:36:62:cd:31:28:
         c0:32:aa:ee:93:e2:d8:7c:71:af:3d:51:f6:a3:23:32:b9:1d:
         48:e6:52:b7:a7:19:1d:90:70:2c:09:d4:fb:b9:bf:8c:ec:ed:
         1e:66:ad:cd:a8:97:59:b8:2f:47:9e:2f:52:bc:4d:82:90:6b:
         7c:43:e3:14:a6:39:b3:f7:ca:fa:e7:c8:45:e7:72:52:ff:b1:
         ec:5e:ac:b9:f9:1a:1d:a4:3d:4d:86:ac:b0:a2:3f:77:42:0f:
         07:57:4c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Nov 24 11:25:44 2021 by LibreSSL & rpki-client.