RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer (download)

Subject key identifier:   75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: IP: 185.177.228.0/22

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 729779553103 (0xa9ea40434f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:02:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c2:b1:a5:1d:03:de:7f:5f:b3:b8:f0:16:da:
                    f7:57:12:81:7b:87:5c:ba:3d:9f:3b:cb:7a:c5:5b:
                    2c:55:6f:48:6d:e9:20:58:20:ce:dc:1b:c3:c3:a1:
                    52:e1:3a:68:17:7d:9b:b7:6a:95:fb:9a:b4:bb:b0:
                    14:23:f6:f1:c8:66:62:aa:52:74:d9:cc:d5:79:37:
                    db:f4:d3:74:69:20:14:ed:86:e9:7f:2e:9a:f3:21:
                    c3:b7:38:a5:3c:25:97:e0:15:d3:7d:46:03:77:a5:
                    b5:13:00:12:5d:71:7e:c6:e5:38:c4:bd:8e:e3:b6:
                    6c:14:5b:52:e0:65:63:80:0b:ba:4e:d3:ef:2e:2f:
                    f8:39:ac:89:a5:ef:2e:04:96:a4:ed:6e:8d:68:33:
                    54:86:3f:66:f0:16:e7:dd:c4:9a:97:3a:7f:0c:85:
                    4e:79:cc:5c:e5:25:f2:d3:17:bb:dd:dc:b3:07:56:
                    b2:64:9e:53:2d:60:39:31:6c:49:a6:23:6a:14:03:
                    da:2e:87:6b:3f:38:9d:7a:0b:6a:e9:93:7c:75:20:
                    35:63:5d:aa:26:88:40:4a:3e:b5:6d:43:ab:a6:b1:
                    d2:49:9a:27:9d:b0:92:36:ac:8b:c0:7f:05:12:d5:
                    87:fa:49:28:9d:7d:d4:e8:54:af:42:29:5a:ec:9d:
                    9c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.177.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:90:40:84:2f:a5:d1:cc:31:6c:70:29:79:8e:f2:7f:56:f9:
         80:f9:e2:1c:a7:10:ef:0c:76:ee:05:ca:14:e8:e0:db:80:a4:
         d3:16:82:44:cd:3c:0a:59:04:0b:af:e5:35:dc:20:85:c7:e9:
         69:6e:35:44:56:8f:3c:98:db:ea:f5:0f:a7:f6:94:83:28:9e:
         a7:49:2d:4a:64:2a:d1:bd:66:6f:27:8f:8d:1c:fc:5b:a7:a8:
         13:e8:ee:8c:1b:1a:ee:1d:66:74:cf:d1:32:c9:b2:bb:75:ed:
         25:d8:dc:ca:7c:ee:9e:5b:c2:04:4a:ef:69:cb:43:38:1c:51:
         8b:f0:18:9c:79:f7:04:94:95:7b:c0:a6:14:f5:91:cd:d6:9c:
         84:b7:e4:57:1a:ca:07:55:be:b6:7a:13:f3:50:5d:39:d9:18:
         74:6d:9f:ab:9c:de:9d:fe:51:ef:db:c8:60:b5:0f:d2:49:35:
         fd:8a:da:e8:fe:2e:4b:8e:bd:34:8c:e4:30:c9:77:5d:eb:dd:
         99:35:0a:42:c2:de:ff:45:8b:09:c4:95:c8:bc:43:c3:55:93:
         6c:69:ee:4f:a4:f1:e8:00:ba:7f:3d:5e:d0:5d:ce:b2:2d:ca:
         f7:8c:68:b7:37:7e:d8:68:ce:dd:74:39:48:08:7b:c0:4c:1a:
         00:54:4d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 16:58:36 2022 by LibreSSL & rpki-client.