RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer (download)

Subject key identifier:   68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: AS: 212947
    1: IP: 93.157.187.0/24
    2: IP: 206.204.104.0/22
    3: IP: 2a0b:8c40::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 729061006712 (0xa9bf6c1d78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:01:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:af:87:34:d1:6d:c9:ab:c7:4e:fc:dc:0e:00:
                    c8:74:bc:80:94:ad:90:2d:0a:7d:f6:de:30:e2:cd:
                    60:06:a2:06:71:49:9a:74:20:9f:b8:ad:9b:1f:00:
                    d5:e9:5b:9e:96:a0:ee:16:06:bc:7f:ea:14:64:02:
                    61:51:32:1e:58:42:3d:b4:1a:99:54:5e:62:12:68:
                    c1:b2:a7:b8:50:3b:7a:9b:0f:1b:4f:19:92:89:2e:
                    b1:ff:32:8e:ed:aa:f6:60:4b:e8:5b:4c:eb:f2:ea:
                    a6:f9:f6:aa:4a:3e:08:80:78:3f:e6:b2:16:fc:1e:
                    d7:e7:af:5e:82:9a:9f:42:ee:f9:b7:10:9d:95:f9:
                    80:19:c4:97:1e:58:80:1b:77:06:62:5d:c7:23:fa:
                    38:14:b0:9f:d8:56:f4:44:9b:ae:e8:93:99:98:9a:
                    05:cd:ff:7c:3a:eb:ac:01:2d:2d:eb:20:13:fa:b1:
                    be:f3:8c:5b:27:dc:97:18:97:15:71:8d:09:da:9a:
                    53:87:d4:de:f9:7e:39:45:1b:9e:a4:bb:12:c9:5c:
                    2a:7c:c2:d4:cf:06:c5:61:0e:47:a9:ec:b8:26:e2:
                    60:7c:a2:e3:90:6a:b3:e9:2b:de:7d:fd:b4:cb:2a:
                    df:c0:9b:41:35:a5:ad:7b:32:07:c6:9a:9c:60:a8:
                    f3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.157.187.0/24
                  206.204.104.0/22
                IPv6:
                  2a0b:8c40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212947

    Signature Algorithm: sha256WithRSAEncryption
         1c:7e:58:16:c7:ab:17:13:5b:f5:b2:61:da:25:9b:bc:fe:bf:
         9d:df:bb:44:d5:b4:09:e5:17:05:76:49:ac:ee:1f:b3:d0:3a:
         04:39:67:79:fa:7e:41:7b:87:67:28:c0:27:da:28:67:7b:29:
         2c:05:db:df:d3:22:77:44:37:71:56:5e:3d:ea:84:37:8e:17:
         d6:98:ba:05:52:88:96:a8:db:2f:76:7c:11:cc:09:11:2f:64:
         a5:ba:77:d7:ea:86:90:43:91:77:7f:1f:ec:f8:fe:8e:93:4b:
         71:78:8e:f7:15:27:d0:ae:76:9c:4b:62:60:53:79:63:17:2d:
         bf:52:e2:87:cf:1b:8d:6f:59:4b:31:a1:99:32:fc:a3:94:20:
         59:90:52:2b:54:ad:63:a8:66:5e:42:e6:d6:36:69:62:d2:ab:
         5e:44:a2:0a:d0:e0:5f:5c:64:14:89:7d:92:61:12:ea:25:d2:
         0f:8f:39:09:da:d0:80:34:a1:33:5d:a2:42:f4:42:29:7e:3a:
         1f:d6:30:04:b1:7b:65:cc:47:8b:b0:22:4a:af:8b:76:b7:46:
         6f:d0:33:97:18:72:e2:fe:f3:fd:88:26:a1:f3:9d:99:2c:73:
         ce:f2:8c:50:36:9d:87:d6:63:0c:8d:ed:63:41:31:3f:82:5b:
         bd:e8:57:10
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgIGAKm/bB14MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTUwMTAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg2OGQxZWYxNjNh
NjYxY2NlNWJjNjIxMTdlYzc2Mzc1OGIxYjViYjg5MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAo6+HNNFtyavHTvzcDgDIdLyAlK2QLQp99t4w4s1gBqIG
cUmadCCfuK2bHwDV6VuelqDuFga8f+oUZAJhUTIeWEI9tBqZVF5iEmjBsqe4UDt6
mw8bTxmSiS6x/zKO7ar2YEvoW0zr8uqm+faqSj4IgHg/5rIW/B7X569egpqfQu75
txCdlfmAGcSXHliAG3cGYl3HI/o4FLCf2Fb0RJuu6JOZmJoFzf98OuusAS0t6yAT
+rG+84xbJ9yXGJcVcY0J2ppTh9Te+X45RRuepLsSyVwqfMLUzwbFYQ5Hqey4JuJg
fKLjkGqz6Sveff20yyrfwJtBNaWtezIHxpqcYKjzVQIDAQABo4ICtTCCArEwHQYD
VR0OBBYEFGjR7xY6ZhzOW8YhF+x2N1ixtbuJMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0LzZhYTAxNy0yZmU4LTRjZDgt
OGE3ZC0zYThhNjEwMDZhNGYvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvNmFhMDE3LTJmZTgtNGNkOC04
YTdkLTNhOGE2MTAwNmE0Zi8xL2FOSHZGanBtSE01YnhpRVg3SFkzV0xHMXU0ay5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQAXZ27AwQCzsxoMA0EAgACMAcDBQAqC4xAMBoGCCsGAQUFBwEIAQH/
BAswCaAHMAUCAwM/0zANBgkqhkiG9w0BAQsFAAOCAQEAHH5YFserFxNb9bJh2iWb
vP6/nd+7RNW0CeUXBXZJrO4fs9A6BDlnefp+QXuHZyjAJ9ooZ3spLAXb39Mid0Q3
cVZePeqEN44X1pi6BVKIlqjbL3Z8EcwJES9kpbp31+qGkEORd38f7Pj+jpNLcXiO
9xUn0K52nEtiYFN5Yxctv1Lih88bjW9ZSzGhmTL8o5QgWZBSK1StY6hmXkLm1jZp
YtKrXkSiCtDgX1xkFIl9kmES6iXSD485CdrQgDShM12iQvRCKX46H9YwBLF7ZcxH
i7AiSq+LdrdGb9Azlxhy4v7z/YgmofOdmSxzzvKMUDadh9ZjDI3tY0ExP4JbvehX
EA==
-----END CERTIFICATE-----

Generated at Sat Jan 1 16:58:32 2022 by LibreSSL & rpki-client.