RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer (download)

Subject key identifier:   66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: AS: 2608
    2: AS: 2866--2870
    3: AS: 3154--3159
    4: AS: 3172
    5: AS: 8548
    6: AS: 34079
    1: IP: 5.198.136.0/21
    2: IP: 81.87.0.0/16
    3: IP: 83.137.208.0/21
    4: IP: 83.138.32.0/21
    5: IP: 89.207.208.0/21
    6: IP: 185.224.232.0/22
    7: IP: 188.92.136.0/21
    8: IP: 193.60.0.0/14
    9: IP: 194.66.0.0/16
    10: IP: 194.80.0.0/14
    11: IP: 195.194.0.0/15
    12: IP: 212.121.0.0/19
    13: IP: 212.121.192.0/19
    14: IP: 212.219.0.0/16
    15: IP: 2001:630::/32
    16: IP: 2a00:ee00::/32

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 522634007624 (0x79af6a1448)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:58:49 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=6665dd97665a23b1b183e223822b66b5ae536a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ad:ee:34:70:5c:9c:f8:7e:17:1e:32:23:36:
                    5a:a2:ec:41:0d:8a:ac:f3:e9:59:cb:16:dd:91:fd:
                    68:c3:45:56:98:71:aa:4a:59:7c:21:f2:17:28:0f:
                    a6:83:69:40:a2:a5:ff:40:af:8b:a0:ed:0f:42:d1:
                    e9:81:81:19:8f:b5:16:ed:7e:cc:53:c8:94:9e:a5:
                    ad:bc:4a:b4:1e:8b:12:5f:9d:d8:21:4f:f8:e1:00:
                    c9:dc:c9:26:84:f1:d7:fd:1b:6c:cb:1d:d0:3d:df:
                    d6:32:35:bc:0f:4d:03:ca:dc:96:9d:f0:3c:92:a8:
                    ab:43:12:ee:c0:86:d6:26:96:32:35:25:62:dc:9c:
                    58:1c:64:4f:10:c4:74:42:26:f6:a3:2e:03:61:db:
                    14:23:de:eb:96:fb:21:b3:36:41:7d:62:fa:5c:d2:
                    6c:0b:71:63:e0:70:62:99:2d:3a:fb:d7:75:4b:d6:
                    70:a2:57:99:f0:bf:3c:eb:34:0f:3a:b6:9d:b9:f8:
                    b2:47:b7:6c:9f:c0:2d:a9:df:a0:f0:a9:0a:d1:a7:
                    fd:73:23:92:41:e3:4b:cc:6f:2c:7f:d1:7d:2f:01:
                    50:94:11:e9:77:ae:83:c1:69:24:f9:0c:b7:f1:ae:
                    9a:d4:26:8f:f8:c1:6e:58:ce:9a:8e:e1:c1:1d:11:
                    d4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.198.136.0/21
                  81.87.0.0/16
                  83.137.208.0/21
                  83.138.32.0/21
                  89.207.208.0/21
                  185.224.232.0/22
                  188.92.136.0/21
                  193.60.0.0/14
                  194.66.0.0/16
                  194.80.0.0/14
                  195.194.0.0/15
                  212.121.0.0/19
                  212.121.192.0/19
                  212.219.0.0/16
                IPv6:
                  2001:630::/32
                  2a00:ee00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  2608
                  2866-2870
                  3154-3159
                  3172
                  8548
                  34079

    Signature Algorithm: sha256WithRSAEncryption
         80:a1:e1:0a:0e:5a:17:5b:d4:14:01:2a:80:dd:1a:dc:28:b1:
         c6:c6:60:02:3d:68:d8:85:27:90:51:c2:be:34:d5:d9:60:ac:
         11:3f:d3:4e:9f:40:ab:25:06:a6:f4:d3:0c:95:79:af:3c:a5:
         13:92:ef:1e:a1:ba:21:5c:8b:e4:8f:bf:5a:8f:e1:fd:7c:56:
         52:0e:46:61:22:36:4d:ad:8a:32:28:a9:07:79:28:de:00:f6:
         7f:5b:f9:49:96:17:df:3b:2b:8c:42:a4:19:3c:43:87:d8:cc:
         7b:76:ae:81:e4:d6:85:9e:d6:df:69:37:82:aa:fe:86:d9:de:
         df:d0:6e:40:d1:b2:57:06:89:02:04:65:be:c4:3b:39:23:87:
         7c:5e:ea:ca:fc:6f:da:9b:b4:e7:b8:b4:39:55:39:aa:c7:34:
         bf:66:b5:14:8b:a0:60:c4:1a:61:30:91:59:4e:1e:91:ab:7c:
         e6:2d:bb:e1:89:bd:72:e3:c4:c7:77:5d:30:7d:f7:d8:b5:26:
         fd:40:1a:00:61:dc:a9:09:3b:f2:36:5b:4f:ea:99:5b:cf:f8:
         4f:2f:da:ec:fd:63:8f:ba:d4:94:4b:c7:dc:aa:f0:dd:4d:3b:
         6f:02:4c:b2:a5:f9:ad:8d:e3:9c:1d:22:db:bb:ae:4e:7b:7f:
         b0:66:36:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:27:19 2021 by LibreSSL & rpki-client.