RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/ZSZGgCYe0T3ljKaSzTNdtzOETY0.cer (download)

Subject key identifier:   65:26:46:80:26:1E:D1:3D:E5:8C:A6:92:CD:33:5D:B7:33:84:4D:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/ce/c48d40-21ff-463f-ae64-647deb976227/1/ZSZGgCYe0T3ljKaSzTNdtzOETY0.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/ce/c48d40-21ff-463f-ae64-647deb976227/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: IP: 2.56.244.0/22

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/ZSZGgCYe0T3ljKaSzTNdtzOETY0.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557503999821 (0x81cdd3ef4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:41:54 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=65264680261ed13de58ca692cd335db733844d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6c:1b:f5:83:f3:3e:36:31:56:bd:f4:b6:10:
                    c9:e8:17:75:95:68:ae:28:b4:14:ff:8f:f3:b9:f9:
                    94:95:ae:8f:ea:d1:64:c8:6f:3f:38:ff:b2:c2:f1:
                    53:85:75:a1:fa:94:f4:7a:12:de:37:d2:01:1b:07:
                    55:2a:65:65:02:b6:5b:5d:32:bb:b3:5b:aa:40:29:
                    d6:02:4f:a8:9f:37:ef:c2:61:71:4e:62:b4:09:f0:
                    34:d4:2f:b4:a8:9d:c4:c3:13:21:f2:b1:e7:c8:7c:
                    e9:31:50:61:1a:85:17:a8:cd:8b:37:25:2b:12:2c:
                    35:b1:ae:b7:cb:17:29:ee:76:10:70:16:19:6c:8d:
                    63:88:ad:2a:9c:b0:f3:cd:42:2f:f3:22:06:8d:3c:
                    03:3f:58:a7:fc:d7:f0:97:c1:d6:91:a4:dc:c0:14:
                    7a:63:4a:80:2d:df:18:72:10:82:26:34:74:ee:94:
                    ca:02:0d:00:fc:bd:8e:6f:0f:2b:ce:f9:06:b6:6d:
                    4b:63:4a:4b:e9:1c:3b:a1:63:a4:91:e1:27:1c:32:
                    59:c6:b5:69:a7:55:a4:5b:09:47:01:89:a4:c6:a5:
                    41:4b:2a:ac:3c:6c:15:85:fc:fe:5d:fa:2d:52:ed:
                    46:e5:1e:02:70:c8:3f:f1:be:73:23:7f:a8:95:78:
                    b2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                65:26:46:80:26:1E:D1:3D:E5:8C:A6:92:CD:33:5D:B7:33:84:4D:8D
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c48d40-21ff-463f-ae64-647deb976227/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c48d40-21ff-463f-ae64-647deb976227/1/ZSZGgCYe0T3ljKaSzTNdtzOETY0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.56.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:c0:bf:61:21:39:65:44:92:85:43:46:9b:c2:e6:5d:98:71:
         6f:06:d9:62:2e:ba:7f:88:6c:f9:48:b2:ca:aa:97:6b:e2:77:
         35:25:6a:55:77:ec:72:d0:20:a0:fb:d8:b8:03:c1:eb:a8:22:
         f0:c3:c2:0e:bb:95:a6:3c:23:7e:50:c0:ed:e5:4e:90:7f:62:
         17:77:cc:09:e4:92:42:d6:e9:a9:ec:68:19:54:fc:77:a0:d4:
         dd:5a:1e:92:9c:f9:9e:6f:b8:1e:2f:56:70:3b:8f:b0:99:5c:
         7b:a1:0b:f7:2f:49:22:50:65:60:a7:b9:61:f2:66:ed:51:ee:
         a5:1a:6a:e1:26:33:33:39:e2:ab:35:8d:df:9b:9e:49:00:c9:
         2d:d8:fb:fc:f2:c8:74:c8:ad:b2:ec:86:46:ea:4e:ad:94:15:
         50:46:c2:03:76:4e:6c:c8:8d:1b:ea:dc:a7:bd:c2:b4:15:83:
         38:17:6e:2d:ad:00:1e:c6:5c:78:02:27:33:3f:c2:f8:c3:47:
         a0:44:c2:aa:a2:65:34:1b:f9:29:63:bf:ca:26:03:a0:3a:fc:
         54:2b:d0:3e:63:21:f9:af:4f:73:ca:71:ad:0f:ad:ea:27:a8:
         52:20:41:9e:d5:3e:c1:0f:ba:1f:d1:cc:64:6f:ff:8b:dc:99:
         7d:7e:7d:90
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAIHN0+9NMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjEw
MTAxMDU0MTU0WhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg2NTI2NDY4MDI2
MWVkMTNkZTU4Y2E2OTJjZDMzNWRiNzMzODQ0ZDhkMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAy2wb9YPzPjYxVr30thDJ6Bd1lWiuKLQU/4/zufmUla6P
6tFkyG8/OP+ywvFThXWh+pT0ehLeN9IBGwdVKmVlArZbXTK7s1uqQCnWAk+onzfv
wmFxTmK0CfA01C+0qJ3EwxMh8rHnyHzpMVBhGoUXqM2LNyUrEiw1sa63yxcp7nYQ
cBYZbI1jiK0qnLDzzUIv8yIGjTwDP1in/Nfwl8HWkaTcwBR6Y0qALd8YchCCJjR0
7pTKAg0A/L2Obw8rzvkGtm1LY0pL6Rw7oWOkkeEnHDJZxrVpp1WkWwlHAYmkxqVB
SyqsPGwVhfz+XfotUu1G5R4CcMg/8b5zI3+olXiylwIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFGUmRoAmHtE95Yymks0zXbczhE2NMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NlL2M0OGQ0MC0yMWZmLTQ2M2Yt
YWU2NC02NDdkZWI5NzYyMjcvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2UvYzQ4ZDQwLTIxZmYtNDYzZi1h
ZTY0LTY0N2RlYjk3NjIyNy8xL1pTWkdnQ1llMFQzbGpLYVN6VE5kdHpPRVRZMC5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCAjj0MA0GCSqGSIb3DQEBCwUAA4IBAQAWwL9hITllRJKFQ0abwuZd
mHFvBtliLrp/iGz5SLLKqpdr4nc1JWpVd+xy0CCg+9i4A8HrqCLww8IOu5WmPCN+
UMDt5U6Qf2IXd8wJ5JJC1ump7GgZVPx3oNTdWh6SnPmeb7geL1ZwO4+wmVx7oQv3
L0kiUGVgp7lh8mbtUe6lGmrhJjMzOeKrNY3fm55JAMkt2Pv88sh0yK2y7IZG6k6t
lBVQRsIDdk5syI0b6tynvcK0FYM4F24trQAexlx4AiczP8L4w0egRMKqomU0G/kp
Y7/KJgOgOvxUK9A+YyH5r09zynGtD63qJ6hSIEGe1T7BD7of0cxkb/+L3Jl9fn2Q
-----END CERTIFICATE-----

Generated at Thu Sep 23 09:05:44 2021 by LibreSSL & rpki-client.