RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer (download)

Subject key identifier:   81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: AS: 25487
    1: IP: 45.156.56.0/22
    2: IP: 83.147.0.0/18
    3: IP: 217.13.80.0/20

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 722936475786 (0xa8525f308a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:57:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ba:e9:8f:2e:52:4b:ac:6e:6b:f8:f4:ad:94:
                    2c:40:52:bd:68:ef:2c:e4:84:ee:4e:d2:45:da:df:
                    2e:2a:8c:d3:96:d8:f1:6a:ea:a2:e0:eb:b7:a4:51:
                    be:8a:71:90:ff:0c:6e:56:8f:10:b4:56:bb:fd:62:
                    f5:ec:4d:c6:95:23:de:d7:3f:4e:51:aa:6a:e5:30:
                    10:6e:f2:fb:3a:30:47:3f:6c:12:f4:2f:d3:23:fb:
                    28:5c:9d:76:67:d2:b5:e5:64:3f:e2:fc:82:94:ee:
                    dc:45:c3:01:84:21:f6:19:5c:fa:68:36:c2:23:04:
                    5d:d5:4a:f8:79:bd:c8:d8:ea:03:53:9d:03:bc:b4:
                    09:96:1e:cf:3f:9c:6a:94:a1:b7:74:35:5b:7f:c5:
                    59:15:dd:f1:cb:97:84:c8:f5:e2:5d:4a:6b:70:d7:
                    ac:95:a1:cc:96:6a:d9:15:71:65:2b:cb:ed:37:54:
                    80:48:ac:43:b0:d7:c5:b8:11:63:22:cd:90:cb:00:
                    c0:d8:72:7a:e9:4a:da:74:fe:55:1d:92:96:00:90:
                    51:c1:16:46:58:53:72:85:ee:54:63:db:78:5a:01:
                    77:20:3b:fa:b1:0e:95:a1:d8:95:0b:57:a5:28:80:
                    90:b5:2c:90:1d:da:f9:9c:f7:17:ef:7e:81:89:9b:
                    89:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.156.56.0/22
                  83.147.0.0/18
                  217.13.80.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25487

    Signature Algorithm: sha256WithRSAEncryption
         79:2d:23:83:1f:9b:7d:60:56:76:dc:5a:12:a1:24:b7:b6:5c:
         06:c8:b9:fa:d3:5b:fb:0e:2e:dd:2c:cf:dd:4c:20:81:37:ff:
         6f:be:21:72:17:8a:48:69:ac:9c:00:48:45:9b:12:3e:58:08:
         83:26:53:3d:0e:38:ca:3f:15:fa:f9:09:5f:bc:14:09:11:7d:
         5b:88:03:a0:cf:d3:39:37:62:80:37:87:95:20:af:39:ab:a6:
         69:49:2f:73:58:32:91:cb:4f:d0:8f:61:43:02:8b:c4:8f:50:
         37:85:ad:76:1c:f9:26:64:f2:08:d5:bd:eb:7c:2f:c5:06:e8:
         62:52:28:7b:0d:37:e8:89:22:f3:a3:f9:e2:1a:08:7b:72:3f:
         26:18:ba:94:88:8d:2b:2e:20:00:bb:2e:c7:ee:9d:07:fa:b5:
         c1:dc:37:c1:6f:22:64:ec:34:db:ef:fd:7e:69:5b:5d:9a:65:
         0a:88:8e:17:7a:5a:1a:ee:b8:4a:95:6b:e4:b9:1e:92:0a:5a:
         35:88:83:5f:25:eb:15:e2:5b:d7:ce:5f:45:3b:09:97:b1:f5:
         b9:0d:96:21:17:52:22:e4:30:2a:56:7a:14:23:a5:7c:2b:d8:
         56:b0:66:81:95:5b:b6:ed:41:ad:18:f0:ab:59:62:81:66:0b:
         dc:90:72:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 16:58:40 2022 by LibreSSL & rpki-client.