RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer (download)

Subject key identifier:   72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: IP: 5.182.184.0/22
    2: IP: 5.182.192.0/21
    3: IP: 31.132.52.0/22
    4: IP: 45.67.140.0 -- 45.67.147.255
    5: IP: 63.246.128.0 -- 63.246.133.255
    6: IP: 63.246.136.0/23
    7: IP: 63.246.139.0/24
    8: IP: 63.246.142.0/24
    9: IP: 63.246.144.0 -- 63.246.152.255
    10: IP: 63.246.156.0/22
    11: IP: 78.31.204.0/22
    12: IP: 79.98.180.0/22
    13: IP: 92.249.28.0/22
    14: IP: 94.154.168.0/22
    15: IP: 94.154.176.0/21
    16: IP: 104.232.36.0/23
    17: IP: 147.78.204.0/22
    18: IP: 162.218.88.0/21
    19: IP: 185.52.136.0/22
    20: IP: 185.161.189.0 -- 185.161.191.255
    21: IP: 185.171.124.0/22
    22: IP: 185.187.212.0/22
    23: IP: 185.201.40.0/22
    24: IP: 185.205.204.0/22
    25: IP: 185.208.152.0/22
    26: IP: 185.230.120.0/22
    27: IP: 185.253.120.0/22
    28: IP: 192.145.68.0/22
    29: IP: 212.60.12.0 -- 212.60.17.255
    30: IP: 217.197.168.0/22
    31: IP: 2a07:c6c0::/29
    32: IP: 2a0c:1900::/29
    33: IP: 2a0c:3ac0::/29

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 711318234988 (0xa59ddee76c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:04:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b9:75:28:14:a9:56:2a:c7:04:e7:8a:25:2b:
                    8e:a7:3d:b3:60:86:16:65:fd:5a:b5:cf:23:58:de:
                    58:8e:e2:11:2d:f8:4d:2c:f4:22:32:1d:6e:0a:25:
                    b2:83:de:33:8b:19:b7:57:73:a1:4a:9b:cb:97:4b:
                    e7:90:c8:d2:62:11:66:81:74:09:41:71:b6:28:ca:
                    9b:fc:53:5d:6e:e4:f9:15:22:46:b1:ed:19:cb:1c:
                    59:71:27:f7:8a:6b:47:35:25:9a:09:ad:7a:98:0a:
                    05:37:f4:cd:ba:e3:58:84:32:3a:8d:a5:f2:16:d3:
                    a2:fd:09:34:a4:20:d0:ef:75:20:31:5d:7f:1a:67:
                    ca:24:e2:d6:f3:1f:ab:ee:1f:16:98:74:b7:70:f3:
                    9b:e2:2f:c5:5f:18:d4:66:21:67:39:1a:a7:83:62:
                    f6:28:3f:84:67:4d:10:af:0b:42:74:d8:92:d0:83:
                    a5:9d:ef:90:75:c8:52:58:0b:3f:6c:2b:a3:34:fc:
                    74:92:42:1b:c8:75:2a:19:8a:46:98:48:a7:ad:34:
                    94:6f:5f:80:7e:68:36:7f:ba:0b:0f:2c:5e:46:58:
                    db:26:3c:ab:e8:a2:ac:d2:2a:34:84:1d:2e:a5:80:
                    31:e9:5a:ed:0e:b2:1b:d9:42:b6:0c:78:60:71:0e:
                    11:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.184.0/22
                  5.182.192.0/21
                  31.132.52.0/22
                  45.67.140.0-45.67.147.255
                  63.246.128.0-63.246.133.255
                  63.246.136.0/23
                  63.246.139.0/24
                  63.246.142.0/24
                  63.246.144.0-63.246.152.255
                  63.246.156.0/22
                  78.31.204.0/22
                  79.98.180.0/22
                  92.249.28.0/22
                  94.154.168.0/22
                  94.154.176.0/21
                  104.232.36.0/23
                  147.78.204.0/22
                  162.218.88.0/21
                  185.52.136.0/22
                  185.161.189.0-185.161.191.255
                  185.171.124.0/22
                  185.187.212.0/22
                  185.201.40.0/22
                  185.205.204.0/22
                  185.208.152.0/22
                  185.230.120.0/22
                  185.253.120.0/22
                  192.145.68.0/22
                  212.60.12.0-212.60.17.255
                  217.197.168.0/22
                IPv6:
                  2a07:c6c0::/29
                  2a0c:1900::/29
                  2a0c:3ac0::/29

    Signature Algorithm: sha256WithRSAEncryption
         a9:07:87:54:4b:db:99:9d:fc:3d:34:28:69:9c:8a:12:25:27:
         20:da:af:56:b9:2f:de:7b:58:55:90:b1:be:15:59:16:9c:a0:
         3d:b1:e9:bb:ce:13:ba:38:98:17:b4:23:57:e6:27:37:fb:11:
         0f:44:46:87:93:0b:2b:65:87:44:a4:6b:59:27:3c:72:bb:51:
         c0:9f:60:30:a4:2f:40:7d:bf:0a:e6:8d:cb:a4:67:69:bf:3c:
         78:ef:2c:ae:87:74:66:b1:c8:c0:84:ce:c8:2a:1e:13:f4:47:
         2f:bd:29:ec:98:89:e8:79:4a:76:2b:3f:46:81:6a:c7:a3:91:
         34:87:ab:7c:05:09:e6:dd:88:d8:dd:51:11:6f:c6:dd:f0:c7:
         a0:40:e4:1a:22:27:3f:7e:15:15:9e:2f:7f:58:20:a0:35:50:
         bc:e5:8d:95:91:09:30:b1:63:c4:97:53:46:f4:25:32:d8:42:
         f7:54:e7:2b:b3:1f:e3:50:22:76:35:1a:4b:81:00:ed:1c:d9:
         43:1f:44:1c:ca:34:73:2b:2c:6d:c3:fa:7c:11:3f:4e:e3:25:
         b6:8e:ab:6c:57:aa:b0:86:3f:e4:3a:ef:74:57:6e:bd:ed:bf:
         aa:1c:7b:70:9c:17:93:c7:b2:ef:85:3f:2b:70:46:cf:ce:63:
         c5:f3:d4:c2
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIGAKWd3udsMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTEwNDA4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg3MmI3OGY2Njgy
ZmMzOWM1NWI0MWQ0OGY4MGI4ODM4ZDVkMmRiZjA3MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAnrl1KBSpVirHBOeKJSuOpz2zYIYWZf1atc8jWN5YjuIR
LfhNLPQiMh1uCiWyg94zixm3V3OhSpvLl0vnkMjSYhFmgXQJQXG2KMqb/FNdbuT5
FSJGse0ZyxxZcSf3imtHNSWaCa16mAoFN/TNuuNYhDI6jaXyFtOi/Qk0pCDQ73Ug
MV1/GmfKJOLW8x+r7h8WmHS3cPOb4i/FXxjUZiFnORqng2L2KD+EZ00QrwtCdNiS
0IOlne+QdchSWAs/bCujNPx0kkIbyHUqGYpGmEinrTSUb1+Afmg2f7oLDyxeRljb
Jjyr6KKs0io0hB0upYAx6VrtDrIb2UK2DHhgcQ4RlwIDAQABo4IDfzCCA3swHQYD
VR0OBBYEFHK3j2aC/DnFW0HUj4C4g41dLb8HMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhLzNjNGI4YS1iZmM3LTQxZTkt
OTllMS1mM2U1MDZhZWFhMDEvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvM2M0YjhhLWJmYzctNDFlOS05
OWUxLWYzZTUwNmFlYWEwMS8xL2NyZVBab0w4T2NWYlFkU1BnTGlEalYwdHZ3Yy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBGAYIKwYBBQUHAQcBAf8EggEH
MIIBAzCB4wQCAAEwgdwDBAIFtrgDBAMFtsADBAIfhDQwDAMEAi1DjAMEAi1DkDAM
AwQHP/aAAwQBP/aEAwQBP/aIAwQAP/aLAwQAP/aOMAwDBAQ/9pADBAA/9pgDBAI/
9pwDBAJOH8wDBAJPYrQDBAJc+RwDBAJemqgDBANemrADBAFo6CQDBAKTTswDBAOi
2lgDBAK5NIgwDAMEALmhvQMEBrmhgAMEArmrfAMEArm71AMEArnJKAMEArnNzAME
ArnQmAMEArnmeAMEArn9eAMEAsCRRDAMAwQC1DwMAwQB1DwQAwQC2cWoMBsEAgAC
MBUDBQMqB8bAAwUDKgwZAAMFAyoMOsAwDQYJKoZIhvcNAQELBQADggEBAKkHh1RL
25md/D00KGmcihIlJyDar1a5L957WFWQsb4VWRacoD2x6bvOE7o4mBe0I1fmJzf7
EQ9ERoeTCytlh0Ska1knPHK7UcCfYDCkL0B9vwrmjcukZ2m/PHjvLK6HdGaxyMCE
zsgqHhP0Ry+9KeyYieh5SnYrP0aBasejkTSHq3wFCebdiNjdURFvxt3wx6BA5Boi
Jz9+FRWeL39YIKA1ULzljZWRCTCxY8SXU0b0JTLYQvdU5yuzH+NQInY1GkuBAO0c
2UMfRBzKNHMrLG3D+nwRP07jJbaOq2xXqrCGP+Q673RXbr3tv6oce3CcF5PHsu+F
PytwRs/OY8Xz1MI=
-----END CERTIFICATE-----

Generated at Sat Jan 1 13:35:21 2022 by LibreSSL & rpki-client.