RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/a9Nev2LpxTJc1xtj_o856Cu8Gp0.cer (download)

Subject key identifier:   6B:D3:5E:BF:62:E9:C5:32:5C:D7:1B:63:FE:8F:39:E8:2B:BC:1A:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/a0/3bf02a-2b66-45f5-9e3e-c5e56a72ee18/1/a9Nev2LpxTJc1xtj_o856Cu8Gp0.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/a0/3bf02a-2b66-45f5-9e3e-c5e56a72ee18/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: IP: 5.133.124.0/22
    2: IP: 2a09:8200::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/a9Nev2LpxTJc1xtj_o856Cu8Gp0.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592489610683 (0x89f321fdbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 28 16:46:21 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=6bd35ebf62e9c5325cd71b63fe8f39e82bbc1a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:08:69:61:70:2f:31:fa:2d:d9:af:3d:72:0d:
                    02:7b:38:32:7a:64:44:ee:48:2d:bc:39:c9:69:56:
                    ee:bb:fd:46:1d:f3:14:2b:69:dd:d0:5a:eb:9f:65:
                    ee:1a:1f:91:bb:00:64:5f:3c:5f:4f:a9:f0:55:6e:
                    53:15:76:a2:f7:a9:c0:c8:83:d6:b2:ef:c6:79:21:
                    1e:fc:5e:97:eb:0c:78:59:b5:6e:b4:e7:f4:3d:8c:
                    a4:d9:fe:d1:39:2b:70:f6:ec:b3:43:1f:ff:60:28:
                    bc:fb:3a:5d:84:5b:05:52:a1:6d:fc:55:b3:1f:27:
                    9f:5a:f6:d5:28:5c:bf:9a:a0:04:dd:3f:99:d1:dc:
                    2a:36:3a:ce:94:2e:1e:6c:ff:46:eb:78:d3:80:6d:
                    64:fd:e1:bd:99:d1:1f:e3:4a:b1:84:a1:63:c7:a2:
                    6f:ca:4e:c5:60:1c:69:63:ae:bb:3a:a3:f2:b9:48:
                    60:65:73:e4:00:81:54:74:4f:f0:f1:29:15:cb:3a:
                    fd:0b:67:08:ed:57:30:6f:b7:55:69:4b:15:77:ae:
                    cc:77:eb:20:4b:29:69:02:18:6b:0e:91:98:15:c0:
                    0b:73:0f:b4:b6:f3:e6:7c:e6:79:f1:60:61:4e:b3:
                    62:d5:54:61:24:88:b9:0f:4f:f1:18:05:53:77:03:
                    68:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                6B:D3:5E:BF:62:E9:C5:32:5C:D7:1B:63:FE:8F:39:E8:2B:BC:1A:9D
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3bf02a-2b66-45f5-9e3e-c5e56a72ee18/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3bf02a-2b66-45f5-9e3e-c5e56a72ee18/1/a9Nev2LpxTJc1xtj_o856Cu8Gp0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.133.124.0/22
                IPv6:
                  2a09:8200::/29

    Signature Algorithm: sha256WithRSAEncryption
         0c:69:b5:1b:3f:6c:ed:c3:ed:e8:d9:d4:f8:1a:34:b2:e3:24:
         55:a7:bf:4b:39:b4:de:e1:3c:cc:ad:98:a9:23:3a:cd:83:dd:
         53:02:89:bf:4a:a9:ac:2a:5b:eb:51:07:96:83:8f:78:67:a0:
         bd:54:d9:27:37:07:8a:3d:68:91:68:cd:88:97:06:5d:78:4b:
         5c:12:09:0d:53:8b:e6:61:cf:05:24:39:52:ae:52:32:e9:0e:
         9e:4f:ae:df:55:10:aa:ca:0a:dd:89:02:97:f0:9a:50:d9:b9:
         eb:f5:de:0b:6a:79:da:9c:86:b2:6c:82:70:e0:1f:8d:7e:80:
         67:b6:78:7f:92:a6:b6:7e:98:f1:18:34:92:04:31:86:b6:b3:
         10:22:56:86:a5:ab:a8:a4:22:bc:f4:b1:e9:92:f6:09:ee:0e:
         75:23:b9:4d:7d:ca:6b:ad:99:9b:19:e1:9d:01:65:4a:c1:ce:
         d8:44:95:45:29:e4:3b:9b:1b:5f:df:ca:45:01:3d:d8:84:a4:
         e2:9d:7f:4e:84:9c:61:db:63:63:9c:14:8a:34:9d:c0:e0:c8:
         05:5b:29:de:be:49:59:86:a4:f7:9e:1b:80:9c:c7:77:66:d2:
         35:1f:8e:d0:17:aa:98:2c:e5:85:6d:bd:c8:96:05:20:f6:53:
         8e:09:79:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:27:44 2021 by LibreSSL & rpki-client.