RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/agHpAtUioiejZ7uAH4cy1nIA8Cs.cer (download)

Subject key identifier:   6A:01:E9:02:D5:22:A2:27:A3:67:BB:80:1F:87:32:D6:72:00:F0:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/a7/cf829c-901a-4e93-8a21-08fa46a74d97/1/agHpAtUioiejZ7uAH4cy1nIA8Cs.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/a7/cf829c-901a-4e93-8a21-08fa46a74d97/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: IP: 88.218.80.0/22
    2: IP: 2a09:9e80::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/agHpAtUioiejZ7uAH4cy1nIA8Cs.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 591050150661 (0x899d559305)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 22 12:20:00 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=6a01e902d522a227a367bb801f8732d67200f02b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:be:e8:6c:76:a2:08:11:24:5c:30:c3:9a:41:
                    f6:9b:dc:65:75:25:97:83:b5:96:7a:1d:ce:d6:31:
                    c1:11:6c:a9:b0:ed:a9:d1:6a:99:04:6b:2d:0f:f6:
                    f8:c0:f6:f6:9d:09:1e:72:9b:44:5c:40:e5:ee:07:
                    da:88:69:2c:ab:b8:17:f5:ce:1e:cc:56:ca:d0:7a:
                    fa:fe:da:0f:c3:f2:82:50:79:69:3d:78:25:68:90:
                    71:6c:c2:07:9d:fe:f1:89:22:65:b5:c3:34:44:36:
                    7e:99:a1:f1:00:e2:06:7b:4e:1f:b1:78:a2:77:73:
                    f0:d9:66:00:b9:e6:25:62:f1:0e:33:cc:1a:fe:ed:
                    84:02:de:c5:fe:50:82:91:b5:53:be:7b:e6:65:c8:
                    69:ed:27:c9:5c:02:18:4c:ad:96:ba:90:af:ce:91:
                    88:a9:be:af:3a:6f:d6:0f:cb:09:0c:8f:23:b5:57:
                    f1:00:1c:ae:6c:38:5a:df:32:aa:59:56:27:f8:fd:
                    9e:4b:5a:4c:91:6a:89:6d:3d:21:8f:80:33:f6:7d:
                    a6:fd:1a:c8:63:40:6e:e0:e9:9a:b3:c6:79:44:32:
                    4c:78:0d:8d:ab:da:34:1e:a0:a3:fb:2b:b1:c3:a3:
                    d5:e0:5e:90:44:fd:8b:ce:5c:a0:30:e6:b7:eb:77:
                    fb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                6A:01:E9:02:D5:22:A2:27:A3:67:BB:80:1F:87:32:D6:72:00:F0:2B
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf829c-901a-4e93-8a21-08fa46a74d97/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf829c-901a-4e93-8a21-08fa46a74d97/1/agHpAtUioiejZ7uAH4cy1nIA8Cs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....X.P0
....0....*...
    Signature Algorithm: sha256WithRSAEncryption
         1a:fa:0c:f8:23:bf:1e:77:72:8b:22:c9:91:33:aa:58:08:bb:
         94:4c:c5:6b:f3:b8:a3:ed:15:6d:dd:83:23:90:6a:38:b3:10:
         90:96:5a:2a:9e:c0:96:e9:0d:0c:f1:56:b9:87:fb:78:83:28:
         78:fa:4e:74:d4:46:d0:aa:2c:6b:cf:79:27:a9:7a:3d:2f:9b:
         50:3e:b3:d1:e0:f5:e3:ab:8c:32:a9:e6:b0:bd:b8:69:d7:56:
         cc:c6:94:e2:e5:50:26:86:84:d9:d3:36:c4:97:f4:8d:ac:6a:
         57:fd:54:f2:86:2f:f5:1a:69:c4:cf:af:36:20:bb:08:40:87:
         16:24:78:8e:6c:1e:e3:31:a6:74:48:38:35:53:36:67:9f:ab:
         92:62:db:83:ff:af:ba:75:77:a5:2e:68:64:4e:90:4b:09:ba:
         f4:9a:f1:f6:15:e8:78:88:f2:1d:3a:14:7d:e5:4b:82:56:ec:
         27:23:1b:fa:1e:7a:11:50:d1:1d:09:f4:b4:b3:67:2e:d3:bc:
         51:93:2b:3e:5a:ff:e9:b7:d7:95:f7:68:eb:41:3d:5d:02:96:
         f1:44:59:7f:a6:53:9f:a7:26:ef:e5:97:ff:53:3f:6f:be:d3:
         72:a3:e3:f4:d2:ff:03:62:f5:a7:cf:a3:d1:5f:2c:7e:f6:44:
         0a:27:6f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed May 12 10:49:27 2021 by LibreSSL & rpki-client.