RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer (download)

Subject key identifier:   92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: AS: 35421
    1: IP: 185.168.160.0/22
    2: IP: 2a09:8ec0::/29

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 700048663274 (0xa2fe26e2ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:01:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9256ebf66b80f08135858d144ced6f785834f5f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9a:bb:ac:e1:4a:97:31:c3:ae:8a:6b:26:d9:
                    c7:3a:9c:ba:c7:ce:93:e5:57:e9:52:0c:7e:2f:18:
                    52:0b:a9:8c:33:03:ba:98:3b:e9:e6:e2:97:d6:04:
                    15:b8:93:06:12:83:ea:45:c3:1f:2a:55:5b:26:af:
                    22:fd:f2:e7:b0:5f:40:12:82:c0:af:6e:6c:0a:47:
                    41:62:25:1f:fd:31:28:fd:22:f7:bb:16:73:17:99:
                    6e:41:fd:c3:74:d2:bb:f9:5c:f7:82:3d:40:ce:36:
                    7c:89:86:c4:6a:1c:c3:d0:ca:3a:25:69:8d:57:95:
                    91:9b:61:b3:9d:05:7f:f8:ac:d0:98:ea:e8:05:49:
                    92:f0:74:1e:01:a4:f5:9b:f9:f1:a1:1a:d9:97:e7:
                    85:2a:86:64:79:0d:8b:c3:4e:31:f2:1c:f6:28:32:
                    62:b4:be:d8:06:64:bf:b5:d3:21:f7:88:d3:89:9e:
                    ef:b9:18:17:64:49:b9:4a:aa:7b:a5:34:3e:e4:8f:
                    f8:e4:e9:21:4d:e7:13:a4:12:aa:9d:b9:d1:68:9b:
                    fe:07:09:65:1d:e8:6e:e5:d9:d3:9d:eb:91:78:ea:
                    6c:50:53:af:84:e9:01:28:a5:06:57:6a:20:0b:99:
                    65:a2:cc:51:40:00:6a:2f:78:42:d0:d4:34:bc:16:
                    9e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.168.160.0/22
                IPv6:
                  2a09:8ec0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35421

    Signature Algorithm: sha256WithRSAEncryption
         18:75:c7:3b:56:07:25:12:17:13:eb:38:32:c3:8f:c0:6b:2d:
         1e:92:a5:98:e8:dc:d4:0c:35:55:a1:cf:5c:00:71:69:55:94:
         fd:d9:e4:7a:31:41:3e:47:b9:d4:a6:0a:c9:72:a8:d1:d0:c0:
         80:e3:01:31:eb:4a:b3:eb:9b:12:fc:88:fc:2b:14:b5:03:1b:
         00:2c:01:43:09:26:2c:02:12:70:c8:4f:6e:66:d1:4c:10:28:
         cd:28:c4:63:e8:e4:15:03:12:3e:04:8e:da:5b:36:3e:15:ac:
         a0:71:2d:fe:c7:49:d4:36:77:42:7a:ed:2a:ab:30:b7:2a:bf:
         67:f7:1a:8e:c5:ef:e3:7a:5c:d2:05:c6:d8:40:4b:b7:d5:66:
         ff:ba:e9:78:3f:29:2f:7c:10:20:fc:db:30:bf:85:32:01:32:
         7e:da:d4:c0:cf:22:98:5e:e6:5b:9e:6b:79:17:e4:e6:a5:6c:
         a2:88:c3:9a:94:52:7f:d6:d3:a2:1f:83:1f:13:54:65:d9:f0:
         06:3f:55:67:41:26:e2:d5:26:c1:fe:f2:be:50:05:8b:09:84:
         8c:89:26:e2:a1:16:25:a5:8f:ae:42:28:51:c3:3c:16:04:77:
         f3:b2:a3:6e:fd:a9:bd:a9:d4:c2:9f:9d:52:c4:9e:83:a6:d4:
         dd:90:71:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 11:55:10 2022 by LibreSSL & rpki-client.