RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer (download)

Subject key identifier:   6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
CA Repository:            ca.rg.net/rpki/RGnet-OU/
Notification URL:         https://ca.rg.net/rrdp/notify.xml
Subordinate resources:
    1: AS: 3130
    2: AS: 3927
    3: AS: 3970
    4: AS: 4128
    1: IP: 45.132.188.0/22
    2: IP: 147.28.0.0/20
    3: IP: 192.83.230.0/24
    4: IP: 198.133.206.0/24
    5: IP: 198.180.150.0--198.180.153.255

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 593180041428 (0x8a1c4920d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May  3 11:37:18 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:13:f3:7a:84:e2:22:56:f9:b4:8c:cc:c2:7a:
                    4d:35:5a:9d:ef:29:11:b9:23:38:b9:7b:9d:9a:ca:
                    6c:bf:83:e9:17:f5:68:53:d6:49:8e:aa:28:6b:fe:
                    0f:a1:ca:5b:67:9d:92:bb:51:8d:9e:09:d1:ec:2d:
                    2e:37:f6:34:a0:f3:a3:d2:a8:57:18:75:ea:81:74:
                    37:8b:02:0d:67:aa:71:13:8f:a1:65:59:47:15:24:
                    ad:13:be:9e:7e:75:2a:46:9d:50:e5:35:b8:b8:33:
                    da:70:c1:ad:81:37:f5:95:c2:7a:af:be:bb:bb:e6:
                    59:e8:c3:55:15:15:ba:4e:96:4d:69:76:80:57:cf:
                    c1:03:54:46:60:81:a0:f4:f6:1f:80:9a:84:a9:27:
                    62:a8:ba:17:67:42:f2:04:c8:75:70:57:48:e6:a0:
                    dd:58:55:ae:c5:40:c8:9a:b1:5d:78:7b:8b:d8:8e:
                    8e:c5:3d:fa:e7:a8:4f:82:8a:0d:56:4e:ce:f3:a5:
                    20:24:75:1d:47:2f:0a:35:14:ec:eb:e9:ff:24:e2:
                    40:a4:2e:df:fe:5e:9b:fd:99:e1:51:f0:1e:8f:cd:
                    7e:1f:73:a1:e7:48:2d:9c:ae:55:ac:5c:7b:77:6d:
                    f7:88:fd:11:a8:b2:6e:20:20:1d:ee:b7:36:4d:85:
                    4e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://ca.rg.net/rpki/RGnet-OU/
                RPKI Manifest - URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0,....0&...-............S.......0.............
            sbgp-autonomousSysNum: critical
                0...0....:...W....... 
    Signature Algorithm: sha256WithRSAEncryption
         05:55:18:07:f6:89:60:0a:83:b5:2d:da:7a:0a:85:7e:ea:27:
         cf:26:26:16:77:da:cb:1f:c9:02:4f:d9:71:e2:dd:72:ab:a5:
         4d:96:eb:71:59:ab:29:64:91:22:ca:79:c3:cc:45:e3:09:83:
         fa:ac:02:da:6d:8b:e7:65:55:2e:4b:4a:df:70:60:7e:03:10:
         41:8b:e6:50:19:ae:0d:4f:c2:33:61:6e:e3:7a:89:cb:38:43:
         27:2f:79:78:b6:c8:95:d8:9c:10:12:6b:a5:fc:9a:80:38:c2:
         3a:16:38:d9:20:2d:f5:0a:d9:2d:a5:bb:c8:60:93:5b:4b:d2:
         a3:58:10:98:8b:3c:3d:c6:64:18:cc:c7:e1:07:fa:be:24:14:
         ff:0b:fe:72:2a:a3:ab:89:1f:51:2f:cb:e3:f8:14:a8:72:5d:
         9d:21:67:34:19:69:ae:09:aa:10:7e:63:75:26:f7:a6:e9:34:
         5d:16:a6:18:2c:07:1b:19:ce:ac:3d:29:94:d9:71:96:67:18:
         72:5c:01:5b:cf:75:28:c0:e3:f6:a1:13:95:e3:2b:59:dd:1e:
         91:a6:fb:47:8a:d3:bf:f5:92:89:a6:67:2c:55:df:f0:85:87:
         c4:a5:aa:42:13:c0:95:78:a1:02:8e:ce:36:21:f1:2a:7a:e6:
         2c:22:ba:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jul 27 11:49:19 2021 by LibreSSL & rpki-client.