RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer (download)

Subject key identifier:   7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: IP: 91.205.125.0/24

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 551495084357 (0x8067ab2945)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:52:55 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bd:df:99:07:8b:be:ec:75:f3:22:2e:6d:1b:
                    8a:e4:67:57:73:c1:66:7e:1b:c0:bc:34:4e:a7:cd:
                    7d:30:23:53:74:cf:21:c1:bf:5e:05:26:5e:df:32:
                    c1:ff:21:05:97:8b:00:60:59:30:04:3f:70:e0:5f:
                    17:80:70:81:cc:3b:20:a8:f6:e3:f3:d3:1b:80:07:
                    83:09:b4:fc:42:d4:5f:e7:ba:0c:15:16:25:5e:c4:
                    43:c9:5f:ee:4f:4b:ba:32:a4:a9:c9:6e:96:2c:10:
                    a4:98:e0:f6:1e:ef:46:a6:61:81:57:87:4c:50:ab:
                    cf:98:92:43:38:b2:dc:94:20:ab:38:0b:f7:74:14:
                    2e:29:1c:c2:56:36:54:e9:a9:b0:ca:09:73:b5:cd:
                    91:55:8c:5c:a7:dd:6a:7a:c1:77:74:6a:85:f9:1d:
                    b3:fd:99:c7:b2:59:41:db:48:20:7f:0f:d2:44:08:
                    bd:2f:23:9e:52:7e:3d:07:c2:7d:af:f8:9a:fe:6f:
                    5c:9d:cd:2a:7e:48:ee:cd:b0:c3:bd:9f:e3:44:11:
                    38:a6:89:41:d7:f1:6d:22:bc:d6:e9:24:12:e6:42:
                    22:3c:6a:50:5a:40:44:e3:36:b3:af:87:ba:7a:74:
                    27:40:88:75:07:68:4f:96:06:61:94:31:fc:5c:59:
                    ed:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.205.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:06:21:e4:92:e0:c8:4f:55:e4:26:d4:e6:db:7e:01:93:9d:
         f7:d7:3c:da:32:d4:1a:12:05:f2:67:cf:fe:af:49:f8:8a:b7:
         c3:bb:f4:b3:5b:d0:35:fe:b8:0e:d3:0b:74:87:2d:6c:c5:23:
         77:8b:5c:45:ce:63:35:c1:9e:16:f2:5e:3a:e5:b3:cd:28:fe:
         21:cc:8c:0d:53:77:a2:e0:ac:4b:a8:02:bf:25:9a:0b:23:ea:
         25:c6:c9:f9:3d:19:e2:fb:c5:4e:e7:27:ba:98:41:4b:db:f9:
         0e:a9:66:56:75:bf:29:b0:c7:a1:83:d1:47:53:63:2f:93:2e:
         41:77:a4:c7:fe:10:94:d9:ce:a1:5d:0a:fa:27:2a:eb:48:f5:
         aa:ed:0b:e8:02:f1:c3:12:d5:a7:63:ea:be:9f:40:be:88:22:
         74:0d:bb:d0:ab:ee:27:23:2d:44:15:a1:2a:c4:56:24:d3:c8:
         5f:ae:7d:48:34:24:2e:ca:11:08:61:28:a4:37:f4:da:77:1f:
         6e:db:92:a0:3c:7b:fa:fa:ed:7b:22:69:29:85:05:a8:63:06:
         5e:53:97:33:94:73:89:f9:62:47:7c:a8:84:1d:7a:7a:da:56:
         71:8c:19:2d:e9:03:53:2d:90:da:25:3e:d8:50:28:30:e5:02:
         52:65:60:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:29:05 2021 by LibreSSL & rpki-client.