RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer (download)

Subject key identifier:   7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: IP: 185.83.40.0/22
    2: IP: 2a05:9800::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505623229309 (0x75b97e337d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:11:50 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=7d0b44e492549e1b7da532c80c348850c5a44e80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0e:da:63:40:10:0d:fa:72:0d:16:6d:a8:ae:
                    cc:0b:c1:01:69:94:80:b9:88:fa:3a:17:b4:07:e6:
                    75:12:98:14:a0:a3:b9:3a:6b:67:25:e2:04:23:c6:
                    1a:b9:61:bc:91:a8:9f:6f:29:02:69:7f:ec:00:58:
                    b5:c9:69:41:50:35:54:fc:26:72:8b:97:0b:ac:29:
                    df:64:b0:eb:b3:32:83:f1:e0:6f:b0:20:81:e7:6a:
                    26:01:74:26:3a:ec:ee:17:e4:56:14:d7:b4:6b:a6:
                    27:c0:2f:ac:a6:c0:08:d0:77:1e:30:37:1c:fe:e5:
                    78:a1:6b:a0:2f:df:5a:bf:a3:67:33:5e:88:86:e4:
                    cf:7a:0e:ed:c8:9f:40:a8:15:0f:d0:92:4f:68:01:
                    58:57:c4:17:c0:83:4d:a9:de:fa:a0:4b:8e:52:a1:
                    74:d2:bc:89:d7:29:e8:71:14:06:74:0b:42:f5:e5:
                    0e:b1:33:81:0a:cf:aa:94:ac:c5:ce:06:35:32:29:
                    6d:4b:03:7d:c3:5d:5d:29:c8:47:2a:9d:5c:f8:dd:
                    d0:e3:1c:68:9f:4c:14:20:72:43:eb:7b:2b:f2:11:
                    32:c7:22:21:af:25:26:74:c7:b5:ad:4a:3e:3e:9c:
                    06:f8:81:cb:37:65:da:8b:aa:19:4c:82:a1:ba:78:
                    b6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.83.40.0/22
                IPv6:
                  2a05:9800::/29

    Signature Algorithm: sha256WithRSAEncryption
         0e:76:9d:ae:7a:11:4a:f4:49:62:84:cb:27:2c:dc:bc:24:d8:
         84:ce:0c:9e:1c:c0:d0:2d:43:7d:31:cf:4a:89:c0:dd:0a:62:
         d6:50:08:1b:19:34:67:f9:a4:cb:3f:da:06:81:07:7b:27:a1:
         06:ea:06:53:c8:9b:fc:d3:54:e6:db:a6:b6:b1:32:6a:26:c3:
         3c:3a:86:9f:49:37:50:d6:86:66:cb:95:30:a8:c9:10:2a:0a:
         e7:66:27:66:d8:e2:0f:26:09:53:f1:a1:2c:03:84:96:df:17:
         b8:cb:66:9c:59:58:69:97:63:8f:ba:14:fe:d8:35:f5:bd:e6:
         14:61:f0:a3:25:8c:c8:bd:f5:30:e2:8b:eb:f3:30:5c:22:5f:
         7e:b6:c7:ac:35:fd:01:f4:94:90:57:ef:0e:29:27:68:2b:c6:
         5a:0d:54:6f:bf:b0:45:63:01:dd:97:32:50:e1:6b:4c:e4:2e:
         38:57:3d:96:8e:9e:c5:a9:2d:30:d4:d1:d8:c9:39:04:a4:0c:
         df:0e:8f:0c:39:bc:e7:12:5a:8a:c6:dc:ee:64:b0:61:f2:da:
         04:7e:02:39:dc:a1:a8:82:dc:74:20:7a:60:70:ca:5f:97:b0:
         cd:57:4f:9e:e8:1d:30:9b:1f:f2:d4:3f:95:8e:8b:5c:18:ae:
         07:36:df:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Sep 17 14:48:01 2021 by LibreSSL & rpki-client.