RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/cXlaWXj_vYqx7N8vgOYCGmyZvFE.cer (download)

Subject key identifier:   71:79:5A:59:78:FF:BD:8A:B1:EC:DF:2F:80:E6:02:1A:6C:99:BC:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/e8/4adc7a-0c5a-4b35-93ac-7d647a4cb116/1/cXlaWXj_vYqx7N8vgOYCGmyZvFE.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/e8/4adc7a-0c5a-4b35-93ac-7d647a4cb116/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: IP: 45.144.244.0/22

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/cXlaWXj_vYqx7N8vgOYCGmyZvFE.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 558110799583 (0x81f1fef6df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:46:31 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=71795a5978ffbd8ab1ecdf2f80e6021a6c99bc51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ba:e2:d0:2a:6f:d1:b7:47:9e:13:dd:54:84:
                    df:3e:3b:a7:2a:16:bf:ba:b0:f6:98:08:11:ca:a2:
                    f4:d7:41:e2:2a:5d:15:40:04:e4:c2:bf:9d:82:b0:
                    32:af:f3:ce:90:1b:48:d6:59:2b:67:4e:e6:c7:53:
                    94:77:e3:41:d3:96:0e:f0:76:46:b2:0c:22:7e:f8:
                    9c:22:b5:df:e5:f8:a7:01:4e:67:60:68:ef:57:5f:
                    4e:12:c7:52:ab:a4:35:d5:c0:91:bd:e3:74:49:58:
                    ae:2e:5d:c3:ef:f7:8a:6b:3e:53:ea:62:69:1f:55:
                    75:c7:74:78:38:df:80:0d:e2:92:33:b1:88:ed:db:
                    6e:db:e7:e6:22:a0:d0:2f:c9:6c:37:f5:ef:ad:fc:
                    09:06:4c:75:9e:2e:31:85:a5:16:1a:5f:02:f8:a9:
                    a7:46:dc:f9:25:e4:47:56:7b:96:a4:4d:eb:8c:a9:
                    bd:9b:ed:a3:1e:6d:7d:3f:33:d2:9c:1b:b8:5e:ad:
                    74:25:92:ba:7b:76:5a:87:44:65:9e:b8:7a:e1:86:
                    fc:18:b8:54:0d:0c:56:bc:bf:ea:98:d5:e2:d8:62:
                    f9:fe:2e:b6:df:c6:5f:a7:3f:8f:6f:e4:b5:b8:7d:
                    93:4b:79:f3:7a:4c:72:66:9c:c1:b4:6d:06:06:0d:
                    1b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                71:79:5A:59:78:FF:BD:8A:B1:EC:DF:2F:80:E6:02:1A:6C:99:BC:51
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4adc7a-0c5a-4b35-93ac-7d647a4cb116/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4adc7a-0c5a-4b35-93ac-7d647a4cb116/1/cXlaWXj_vYqx7N8vgOYCGmyZvFE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.144.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:c8:1d:be:86:a6:1b:fd:26:f4:40:5f:8a:c4:79:17:d9:73:
         1c:ff:d2:4b:a6:83:f0:f9:57:4f:c5:2b:b9:48:96:ef:e0:f5:
         7e:05:95:e5:18:90:db:bc:57:a0:fb:0e:af:3c:05:1e:62:62:
         ca:6f:38:14:42:09:d3:34:e2:cf:16:a4:ba:b6:d5:31:b0:94:
         e1:49:0f:a8:e4:4b:97:33:ba:84:fb:6e:92:dd:7d:1a:79:c4:
         99:02:be:f5:68:8d:94:bf:fd:20:60:eb:23:a1:fe:e0:98:4f:
         cf:5e:7a:b3:68:41:1a:6e:5c:5d:94:2f:46:a9:d7:05:88:ed:
         aa:f7:03:8d:00:ae:93:d4:01:85:29:b9:91:11:d4:c7:0f:82:
         07:80:b2:b4:7a:ad:62:73:9b:ea:8d:ee:2f:10:6d:91:54:15:
         d5:81:25:0e:fd:2c:2f:98:80:b7:09:9c:4f:1c:b6:ac:17:54:
         26:37:5a:a4:e7:ff:6b:36:9c:59:ac:16:e6:30:63:61:c9:56:
         64:e5:47:25:51:8f:5d:8d:f5:18:a6:2b:e8:e8:1c:ec:e1:42:
         2b:52:cf:c7:3a:3b:ba:e5:ac:ff:fc:89:0c:c9:1c:e3:2e:73:
         ac:19:01:d1:96:4c:3a:4e:9b:9e:8a:7e:cd:bf:cf:17:01:d3:
         8b:a6:41:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:28:24 2021 by LibreSSL & rpki-client.