RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer (download)

Subject key identifier:   74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: IP: 185.65.200.0/22
    2: IP: 185.120.56.0/22
    3: IP: 185.126.180.0/22
    4: IP: 185.255.176.0/22
    5: IP: 194.124.36.0/22
    6: IP: 212.22.64.0/19
    7: IP: 2a06:c3c0::/29
    8: IP: 2a09:d000::/29
    9: IP: 2a0c:5ec0::/29

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 738257461048 (0xabe392df38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 14 14:23:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=746365355b665564a210c358c68a0117b7fbeb9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c4:63:44:a1:5b:6d:14:2b:af:e2:40:9c:3c:
                    bf:eb:61:ed:e1:33:5b:ea:e2:15:2a:f5:0e:d5:26:
                    c3:c5:5c:3d:5f:a0:3f:61:fe:df:aa:33:1b:1a:cb:
                    d1:51:9d:31:e9:6c:ac:90:47:35:6f:41:4f:5b:9d:
                    44:ae:8c:e7:df:8a:2b:61:54:62:7a:be:c4:95:34:
                    30:5d:59:54:ac:77:1e:cb:11:47:7b:7a:88:d8:f3:
                    20:1c:df:68:ad:c0:54:25:59:45:34:5e:3e:fd:af:
                    ad:38:0a:61:8c:b2:c4:8a:59:3d:ff:ed:54:57:c4:
                    af:a3:d0:4e:76:3d:00:41:26:df:0b:05:d6:59:d4:
                    e3:a3:25:89:ad:6b:f0:f9:18:d3:89:10:8e:a0:87:
                    de:5c:47:2b:74:13:bb:fc:aa:f4:c8:9a:3b:f4:ac:
                    4c:09:0f:09:2c:b4:9e:08:f4:6a:78:f3:4f:d8:88:
                    d1:db:b1:60:c0:8c:22:a5:84:4d:cb:cf:b2:a9:a0:
                    81:0d:18:12:92:5d:ae:ce:1a:7f:ee:ec:03:f8:16:
                    15:03:1c:0b:ef:e6:a1:6d:e5:56:78:c4:67:24:af:
                    48:19:63:4f:37:14:5c:bd:c6:1f:59:79:29:25:31:
                    3d:f4:7f:dd:26:9b:11:14:b0:85:09:88:0c:a9:4c:
                    30:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.65.200.0/22
                  185.120.56.0/22
                  185.126.180.0/22
                  185.255.176.0/22
                  194.124.36.0/22
                  212.22.64.0/19
                IPv6:
                  2a06:c3c0::/29
                  2a09:d000::/29
                  2a0c:5ec0::/29

    Signature Algorithm: sha256WithRSAEncryption
         61:f9:de:dc:30:df:cf:6f:69:51:05:29:65:62:fc:09:38:88:
         f0:97:c7:db:f4:2a:e9:8d:a1:1c:f8:53:7d:38:a2:e2:aa:6a:
         7d:a4:2c:77:2e:60:16:e7:ad:b7:cb:e1:10:d5:e3:b6:c9:ef:
         f9:13:1f:98:8b:32:9a:10:5d:de:08:00:06:3b:66:d1:b8:66:
         c6:e2:3a:a2:69:db:86:51:9a:3d:ff:6b:31:87:a4:9c:2e:44:
         7d:a7:f4:5c:37:85:a7:76:d7:7f:2d:ec:bb:8e:84:48:e3:74:
         ed:b5:e7:ea:b5:37:60:90:f3:ec:52:8f:04:0c:7f:9a:a5:c5:
         04:8b:65:c9:a8:b9:23:30:2d:cf:b9:4a:fe:dc:17:e1:ec:1d:
         9f:89:6a:ef:80:e5:c7:03:f7:5b:db:cf:ad:f5:6f:4f:ea:d4:
         08:da:bf:79:98:bd:39:3c:09:0c:ba:f3:ae:db:ec:16:92:62:
         b7:39:3b:f6:b5:d8:a2:1f:cd:a3:b5:10:4d:0c:67:bc:8f:f4:
         d5:c9:b6:5c:b4:e7:d6:6a:25:81:ea:20:f3:9e:dd:69:5a:30:
         dd:03:53:56:8a:7c:73:3a:4f:d5:9a:1a:80:14:43:27:51:3c:
         7a:9d:63:fc:60:f9:e2:07:73:b1:d7:46:dd:52:6e:25:e7:c1:
         d0:0e:a5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Jan 14 15:55:42 2022 by LibreSSL & rpki-client.