RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/hcP2qehVDAkLw7JX9yuPZbaan2E.cer (download)

Subject key identifier:   85:C3:F6:A9:E8:55:0C:09:0B:C3:B2:57:F7:2B:8F:65:B6:9A:9F:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/da/524ba5-096d-47ff-a8f4-dc8a2d9ec6f3/1/hcP2qehVDAkLw7JX9yuPZbaan2E.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/da/524ba5-096d-47ff-a8f4-dc8a2d9ec6f3/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: IP: 185.212.119.0/24

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/hcP2qehVDAkLw7JX9yuPZbaan2E.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 621750783929 (0x90c33c0fb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep  7 14:30:42 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=85c3f6a9e8550c090bc3b257f72b8f65b69a9f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4b:0c:09:55:e2:3b:4f:5e:cd:1f:2b:4d:78:
                    b2:81:84:13:7a:87:c6:f1:2d:46:68:0d:47:f0:92:
                    3d:12:ae:76:b7:ae:7f:f9:cf:a7:c9:50:8e:45:6b:
                    49:27:94:af:85:49:48:7e:3f:b8:ca:b5:35:08:ee:
                    d5:78:a4:78:35:c4:52:f3:e7:df:89:68:25:cb:ec:
                    6b:1e:da:b4:c9:45:de:e5:35:08:b6:b0:6c:e6:da:
                    24:38:00:fd:40:75:f4:42:45:6a:44:20:cd:e8:03:
                    21:6b:0f:29:57:65:f4:82:fd:a7:ed:1c:66:60:53:
                    48:52:94:e2:5b:8b:80:72:1c:22:fa:3c:42:bc:1a:
                    28:40:11:7e:4b:79:d6:6f:92:8a:13:b0:fc:bf:c4:
                    1f:b8:98:38:5d:22:d2:48:49:bd:c5:7f:6d:2b:31:
                    92:19:dc:a5:36:91:24:c2:dd:47:60:2d:06:e5:3f:
                    e5:33:ea:cc:1f:9e:1f:3d:7f:cf:60:fd:dc:c1:a5:
                    35:82:67:7c:b3:1f:e1:7f:c8:4a:a9:27:0d:6c:69:
                    c3:d5:b5:dc:8a:59:2b:34:4e:00:52:fb:1f:bb:4d:
                    82:e4:da:99:f4:21:0a:a8:02:94:0a:2a:9d:69:86:
                    d2:9a:47:52:9a:3f:2f:4a:67:a3:25:3c:e0:55:92:
                    f2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                85:C3:F6:A9:E8:55:0C:09:0B:C3:B2:57:F7:2B:8F:65:B6:9A:9F:61
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/524ba5-096d-47ff-a8f4-dc8a2d9ec6f3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/524ba5-096d-47ff-a8f4-dc8a2d9ec6f3/1/hcP2qehVDAkLw7JX9yuPZbaan2E.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:96:82:64:b5:b9:a1:4e:35:24:b4:5b:d9:c5:ba:43:7f:93:
         79:cd:99:a0:af:32:37:00:af:20:90:f4:11:60:06:2d:67:4e:
         b2:e5:b1:5c:45:4d:c7:7e:f8:ce:1e:d3:30:fa:76:d8:83:da:
         79:0b:6a:1d:45:2d:51:85:96:06:f5:62:28:ba:49:38:26:fe:
         ba:f7:4b:7e:7a:1f:4f:f9:6c:70:8e:7e:b0:83:16:59:eb:ab:
         e2:8f:84:89:cd:21:45:40:ab:86:ca:b6:4e:e5:71:99:07:d1:
         bb:02:2e:71:cd:35:c3:cd:2f:e0:2c:be:dd:41:bf:78:24:d8:
         92:bb:62:c3:c4:a1:28:d2:82:b2:79:ef:fe:c4:d4:4d:5c:ff:
         ab:3f:09:9b:f6:e8:1f:10:ad:e4:91:ce:d2:da:d0:27:e1:46:
         d4:b8:be:cc:8c:a3:11:b0:cc:d3:f6:3a:10:22:f6:0e:16:50:
         d4:c8:5c:1f:a0:4e:d6:80:ff:c5:a3:54:06:fd:43:fe:9d:0a:
         19:4f:6e:11:c0:01:d5:8d:38:7b:b7:46:5e:b7:1f:b2:a2:1f:
         7e:f5:14:7e:a1:c0:34:b5:9a:b8:3a:43:67:26:91:f6:6a:77:
         da:37:9f:11:75:20:ec:e7:0e:50:8a:df:98:0f:2c:d1:47:b9:
         c3:6d:2e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:29:46 2021 by LibreSSL & rpki-client.