RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer (download)

Subject key identifier:   62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: AS: 34445
    2: AS: 34452
    1: IP: 95.214.128.0/22
    2: IP: 193.104.15.0/24
    3: IP: 2a09:e180::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 570194908108 (0x84c243d3cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:59:52 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:40:c9:bd:8d:14:3c:bd:5c:d3:22:30:a0:f3:
                    86:be:8e:ed:a3:60:e9:3a:eb:44:31:0a:ff:51:36:
                    28:eb:a7:c9:e9:39:ce:c8:d8:56:1a:09:d9:56:86:
                    2e:75:30:8f:67:fb:cd:de:bd:fb:4e:4e:fa:74:ee:
                    3d:b2:d9:a1:3f:3a:d5:96:a8:bf:d9:b9:70:74:c6:
                    20:5f:d3:de:15:f1:ea:2c:e5:f8:65:24:8c:4f:77:
                    f1:ff:28:83:cd:be:79:da:ce:10:2a:ce:2b:9c:d8:
                    92:31:97:c2:2f:ea:c2:83:0e:6d:d1:6e:c9:0d:17:
                    cd:84:c0:04:61:59:47:53:2c:86:5b:f1:5a:9d:a9:
                    7a:6c:64:cd:ef:39:45:d2:dc:aa:b5:d6:0a:97:24:
                    3e:a4:bd:85:55:fc:49:b9:a8:9c:1a:4a:60:6a:e7:
                    54:ac:6e:56:8f:23:9b:a5:94:4d:19:37:3e:3d:48:
                    c5:95:2b:e4:9a:f5:0e:41:b7:97:06:d9:a9:3f:93:
                    69:6f:b0:5b:73:3f:72:11:60:e7:8f:ea:80:63:97:
                    ef:2e:c7:59:be:5f:a9:bc:97:c5:3d:c8:6b:be:62:
                    99:db:4f:9f:71:69:6a:a1:31:64:f9:4c:40:20:d5:
                    ef:7b:b1:2a:d2:0a:4d:cc:76:77:b1:39:ee:04:87:
                    95:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0#0.....0...._......h.0
....0....*...
            sbgp-autonomousSysNum: critical
                0...0
..........
    Signature Algorithm: sha256WithRSAEncryption
         71:5d:20:cf:8b:6f:8b:91:9c:d4:92:de:55:6c:43:5c:cb:03:
         9c:48:3a:38:e6:7c:69:26:ea:de:12:44:6b:f6:44:5f:1a:1c:
         f3:ea:6d:5d:5b:20:15:36:63:fa:7e:1a:14:28:af:75:97:63:
         6e:40:02:07:aa:6f:41:b2:98:1f:27:4c:be:4b:df:be:c2:63:
         45:28:d4:f8:d6:50:ed:e6:05:68:3b:a4:ed:f3:3b:68:ca:ef:
         75:9d:90:78:2d:ca:78:74:25:11:58:2d:19:a9:e1:02:3c:8e:
         02:8d:29:b1:47:82:d5:20:d7:9d:79:57:7e:01:26:0a:29:c2:
         70:83:1c:26:40:da:5f:c5:6f:04:55:2a:e7:5e:5c:40:de:76:
         a5:70:e8:c9:73:fe:46:a4:58:f8:aa:b6:29:45:cd:28:ea:92:
         3d:e6:6d:de:3f:47:a0:38:8d:ee:d5:10:a5:ce:a0:8c:9a:1b:
         de:02:96:da:de:99:54:6c:e8:06:be:87:7c:dc:62:92:cd:1f:
         43:6c:ff:a4:84:11:74:e6:b6:b6:8f:b9:a1:7e:63:9e:8a:52:
         29:29:eb:af:a0:4a:74:c1:72:dd:90:55:c5:9d:89:e7:2e:46:
         aa:65:15:8a:46:6c:12:ed:c5:58:6b:ae:6e:b6:f3:fe:80:b4:
         71:8c:0e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jul 27 22:31:28 2021 by LibreSSL & rpki-client.