RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/kQKE4qeeXzjM42SuDvHJConF5Xs.cer (download)

Subject key identifier:   91:02:84:E2:A7:9E:5F:38:CC:E3:64:AE:0E:F1:C9:0A:89:C5:E5:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/90/18715e-8aae-4fb5-bd5e-280adb789bcc/1/kQKE4qeeXzjM42SuDvHJConF5Xs.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/90/18715e-8aae-4fb5-bd5e-280adb789bcc/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2022-07-01T00:00:00Z
    Resources:
    1: IP: 195.88.218.0/23

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/kQKE4qeeXzjM42SuDvHJConF5Xs.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 648890569819 (0x9714e4545b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec  6 15:48:21 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=910284e2a79e5f38cce364ae0ef1c90a89c5e57b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:30:3c:50:7e:27:d4:13:d8:8c:7b:d6:c5:87:
                    d8:76:73:9f:36:16:2a:6b:50:80:a5:4f:31:10:53:
                    7d:b3:f8:c1:d2:da:ca:1e:7d:b7:c8:e9:f4:6c:cd:
                    1a:25:6d:b1:39:65:b4:0f:dc:4b:1f:f6:cc:64:ac:
                    05:d4:c0:b1:b0:a9:3b:80:a6:53:3f:ce:04:eb:87:
                    24:a4:ae:0b:93:26:3b:d2:bd:c5:e1:90:e4:41:b8:
                    4d:e0:4f:4b:d2:b7:70:20:19:1a:6e:c0:db:42:d2:
                    56:42:a7:52:6a:34:68:1f:ab:bc:e3:b4:03:2a:73:
                    05:00:b3:71:7d:68:c4:22:58:40:bc:82:46:f6:10:
                    2a:13:9d:32:df:46:7a:7f:77:d5:97:4c:58:4a:36:
                    d4:db:97:80:6d:0f:35:35:09:32:ac:c6:84:fe:18:
                    78:45:30:d2:8d:22:01:53:39:22:b2:0c:3e:dd:a9:
                    ee:d7:c2:2e:af:93:ec:15:3f:20:f9:5c:c9:21:d4:
                    ab:b3:4f:1e:92:15:c8:5c:a5:43:24:91:bc:c9:9e:
                    c1:a7:de:63:09:70:a0:e8:f4:41:06:11:a7:38:3e:
                    e5:b8:5e:07:92:06:f8:d3:67:b2:9a:7d:d4:f6:0f:
                    81:b4:ae:ae:e0:84:51:1c:58:b2:49:af:4e:ff:a1:
                    76:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                91:02:84:E2:A7:9E:5F:38:CC:E3:64:AE:0E:F1:C9:0A:89:C5:E5:7B
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/18715e-8aae-4fb5-bd5e-280adb789bcc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/18715e-8aae-4fb5-bd5e-280adb789bcc/1/kQKE4qeeXzjM42SuDvHJConF5Xs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.88.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:09:24:40:80:41:1b:9d:f1:ed:04:1a:03:e3:aa:80:da:8e:
         d8:ab:e2:db:6e:76:88:fb:3a:cc:8e:37:f0:6b:2e:58:d7:18:
         27:9e:fb:a8:21:ff:4d:5c:fe:e7:9d:a1:e9:bb:69:4e:3c:82:
         df:f4:84:43:28:ba:a8:c2:38:b5:65:21:7e:40:46:ae:d5:80:
         01:1b:ad:69:94:32:aa:03:51:a4:10:00:88:24:0b:fe:79:e7:
         cb:84:2b:e5:c8:56:30:eb:f9:cb:eb:13:a7:c3:4e:ba:70:1a:
         fe:f8:0f:c5:81:35:9d:82:20:4e:d5:83:61:1c:30:d9:a4:32:
         a0:22:bf:06:a5:22:17:70:48:be:4a:ef:68:4b:f4:39:c0:0a:
         75:08:58:7e:1d:47:1f:5c:23:f0:21:2a:c8:c7:b3:b1:28:14:
         37:68:50:f6:cb:f7:87:c7:6b:58:b3:7e:07:f2:fa:d3:40:71:
         63:f6:10:67:c7:c7:5e:7b:0b:ee:22:82:70:77:ae:19:c0:e1:
         4f:f3:a5:ca:44:36:90:8b:4f:cd:83:91:ab:69:b6:63:4f:19:
         b0:bf:0e:34:57:db:05:64:6c:3d:73:b4:11:43:48:a5:c1:f1:
         df:79:03:75:38:c3:3d:4b:5e:8b:4f:0e:42:ac:dc:46:24:61:
         c5:84:cf:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Mon Dec 6 18:13:29 2021 by LibreSSL & rpki-client.