RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/l6xHtRJE70nFI3iuzSnFjPtyCJs.cer (download)

Subject key identifier:   97:AC:47:B5:12:44:EF:49:C5:23:78:AE:CD:29:C5:8C:FB:72:08:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/l6xHtRJE70nFI3iuzSnFjPtyCJs.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: AS: 34534
    2: AS: 49434
    1: IP: 37.44.236.0/22
    2: IP: 185.157.246.0/23
    3: IP: 2a09:ca00::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/l6xHtRJE70nFI3iuzSnFjPtyCJs.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567908051150 (0x8439f528ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:42:06 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=97ac47b51244ef49c52378aecd29c58cfb72089b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:df:e7:43:38:9e:c7:1d:82:4d:74:69:28:22:
                    b9:d9:73:1a:10:62:0f:ac:3a:89:3d:62:54:60:a6:
                    bd:c6:92:57:33:26:91:d9:0d:b2:58:bf:9b:85:a0:
                    2a:44:31:0e:fb:86:ce:7b:c7:05:2c:fe:1b:9a:b8:
                    cd:b6:5d:4d:b1:07:b0:a1:0d:ec:b9:59:88:ba:23:
                    43:db:29:40:e4:14:50:f5:e5:1e:02:47:fd:18:5f:
                    79:15:78:f5:53:18:61:34:6a:23:c8:60:5c:2f:db:
                    5d:4b:4f:dd:d2:cd:a3:81:5a:d9:a8:0b:cd:b9:97:
                    2a:b2:8c:ec:48:34:c6:18:07:af:29:5d:0a:58:57:
                    e0:7c:7a:e8:ef:b9:87:fc:33:24:4f:17:89:42:52:
                    7f:36:57:28:e2:45:50:e0:9a:68:a6:c2:a1:7c:4b:
                    04:d6:b3:c4:ec:03:0a:dd:f3:3f:4c:5c:62:44:e0:
                    4e:6b:ed:6d:f2:fd:8d:5a:ee:80:8c:a8:e6:4f:df:
                    4d:7f:c3:49:12:2d:a5:d0:83:6b:cd:d5:2d:b7:d4:
                    1f:71:6a:67:a2:17:27:3e:a1:f4:8c:74:b7:71:f1:
                    87:9b:7d:a2:ef:2f:dc:ba:28:a5:b3:b0:a2:f8:68:
                    56:e5:3c:c8:56:96:4e:76:bc:26:c0:2b:63:f1:42:
                    30:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                97:AC:47:B5:12:44:EF:49:C5:23:78:AE:CD:29:C5:8C:FB:72:08:9B
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/l6xHtRJE70nFI3iuzSnFjPtyCJs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.44.236.0/22
                  185.157.246.0/23
                IPv6:
                  2a09:ca00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34534
                  49434

    Signature Algorithm: sha256WithRSAEncryption
         76:ce:cf:c3:20:d1:39:54:a2:d6:63:01:0f:85:58:1d:6d:3d:
         13:68:17:65:f3:1f:50:5b:3c:f2:8a:f1:d3:fc:86:66:03:7c:
         91:93:71:6a:dc:07:fd:3b:d6:4f:3d:12:40:a3:f7:b5:da:31:
         6d:19:6c:65:1d:d0:5d:5f:42:17:76:c1:4d:c5:08:9f:2e:31:
         89:b6:cc:46:5d:b8:aa:ec:c4:db:88:67:1a:9d:d7:bc:f1:10:
         65:e8:7f:44:27:03:38:54:f3:93:e7:10:b1:99:60:ec:1c:3e:
         57:f3:a2:10:8b:f2:c8:6f:b4:c7:6b:4d:3a:50:64:b3:4a:b8:
         02:33:5a:cd:f4:7e:c5:d2:29:9e:3e:f5:c5:75:bb:b7:39:1a:
         70:cd:e5:d3:cc:73:9b:32:87:8d:4b:c1:b6:8a:13:df:58:0e:
         f2:66:bc:1c:e8:88:55:f1:22:c3:e1:7b:f9:1d:29:69:21:82:
         40:82:9b:52:23:0f:ce:23:fa:f7:3d:e2:ae:4b:be:db:da:90:
         13:2c:c8:87:6e:99:32:58:e4:05:53:b9:8a:47:6d:ff:57:2e:
         4a:90:9b:83:a3:2d:41:2d:83:b5:8e:4d:21:f4:26:cc:6a:26:
         79:eb:7e:b7:08:d3:d9:0a:92:56:09:ce:13:e3:ab:de:28:2b:
         d0:ea:bc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 19 06:56:54 2021 by LibreSSL & rpki-client.