RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer (download)

Subject key identifier:   9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: IP: 2.56.32.0/22
    2: IP: 5.253.184.0/22
    3: IP: 45.81.160.0/22
    4: IP: 45.94.136.0/22
    5: IP: 45.130.32.0/22
    6: IP: 88.214.0.0/22
    7: IP: 88.218.196.0/22
    8: IP: 185.114.204.0/22
    9: IP: 185.219.160.0/22
    10: IP: 185.236.92.0/22
    11: IP: 193.111.184.0/22
    12: IP: 193.135.220.0/22

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 713953573963 (0xa63af2fc4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:59:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:99:d2:88:21:ca:0e:c3:ea:9a:10:6b:c1:ac:
                    e0:23:4d:09:b3:1d:35:ee:e7:c4:e9:41:df:83:a4:
                    99:c5:8e:07:d6:aa:ba:1c:5c:62:23:2a:40:c3:5e:
                    a6:a1:d4:52:f5:95:77:13:80:2a:ec:52:f4:f5:cf:
                    1d:aa:f3:68:89:c7:24:bf:c3:09:c9:c9:f2:12:13:
                    59:eb:2e:ae:31:a7:f4:d9:73:f3:64:2c:6c:9d:ca:
                    26:00:45:de:a3:e7:8a:35:f7:46:70:1d:5d:48:87:
                    2b:57:eb:19:4f:c4:ac:8d:38:d3:84:1e:c1:64:e7:
                    ee:2c:0e:37:b2:e8:d2:78:04:15:2a:c0:13:98:51:
                    cd:7d:d5:6b:bb:82:c9:7b:df:e3:6b:db:56:86:a7:
                    45:d5:49:9f:b5:71:ee:ea:03:64:fa:a3:66:0d:06:
                    6e:bb:c2:93:f5:33:85:45:be:0a:21:b6:b3:95:3b:
                    39:cb:b9:3f:68:45:25:db:20:7f:0c:79:03:af:e7:
                    53:f8:f4:d9:b0:1b:d7:88:28:0d:26:6e:03:e4:09:
                    11:0a:b4:dd:6b:1b:22:b9:50:a7:ca:b4:0e:5f:42:
                    85:6c:91:db:c8:c6:ff:d0:0c:bb:6d:a9:4e:aa:d2:
                    2b:45:36:64:d2:f9:5e:3e:fc:58:04:e3:c7:97:62:
                    f0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.56.32.0/22
                  5.253.184.0/22
                  45.81.160.0/22
                  45.94.136.0/22
                  45.130.32.0/22
                  88.214.0.0/22
                  88.218.196.0/22
                  185.114.204.0/22
                  185.219.160.0/22
                  185.236.92.0/22
                  193.111.184.0/22
                  193.135.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:81:b0:2a:3f:36:67:d5:68:a9:fa:09:02:56:af:94:56:63:
         23:3f:6a:f3:9f:64:6d:11:7e:e2:22:22:f6:c0:4e:3b:c3:15:
         95:fa:d0:be:5f:0d:c9:f4:bb:de:91:5e:55:1e:e6:e4:a3:6e:
         38:67:15:24:fb:b5:d2:3c:9f:6c:26:c6:84:ac:aa:02:94:a1:
         37:10:60:4d:e2:59:81:f2:23:ca:9d:9d:b3:09:81:c6:43:00:
         da:99:e3:83:30:7b:21:77:11:a3:5c:46:b7:74:88:f4:ec:47:
         c4:9e:70:19:c8:c2:cf:6b:da:12:df:95:7d:77:c0:3b:b1:60:
         0a:97:cc:03:ed:19:3e:27:8a:b7:fc:29:d6:f3:bc:00:60:14:
         b9:ef:e9:e3:4f:6d:88:0d:06:78:71:92:e5:91:be:d4:e2:db:
         92:5b:1f:dc:2b:47:04:a6:57:1b:a7:fa:77:f0:75:ad:f2:36:
         f8:3a:4a:cb:96:14:b9:10:0b:41:46:3d:ef:4b:48:7e:11:6e:
         31:f9:e7:0c:ff:9d:f3:c4:94:09:f1:22:98:48:11:a5:96:7c:
         b4:07:0d:14:5c:c3:d3:af:06:eb:97:e8:bb:be:27:2d:a9:f0:
         06:b6:2f:1e:2a:f9:59:53:0b:6e:89:b8:f9:3f:20:38:13:9c:
         23:50:47:ac
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgIGAKY68vxLMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTE1OTEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg5Y2IyNWNlNTUw
ZTRkOWJkYTA1YmQ1ZDQ1YzhiNmJhMzc0MzBiYmJhMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAopnSiCHKDsPqmhBrwazgI00Jsx017ufE6UHfg6SZxY4H
1qq6HFxiIypAw16modRS9ZV3E4Aq7FL09c8dqvNoicckv8MJycnyEhNZ6y6uMaf0
2XPzZCxsncomAEXeo+eKNfdGcB1dSIcrV+sZT8SsjTjThB7BZOfuLA43sujSeAQV
KsATmFHNfdVru4LJe9/ja9tWhqdF1UmftXHu6gNk+qNmDQZuu8KT9TOFRb4KIbaz
lTs5y7k/aEUl2yB/DHkDr+dT+PTZsBvXiCgNJm4D5AkRCrTdaxsiuVCnyrQOX0KF
bJHbyMb/0Ay7balOqtIrRTZk0vlePvxYBOPHl2LwawIDAQABo4ICxjCCAsIwHQYD
VR0OBBYEFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFhLzRmMzM2Yi00YTc5LTQ0MjUt
OTU1Ni1iZTQ1ZjBkMmFiYmIvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvNGYzMzZiLTRhNzktNDQyNS05
NTU2LWJlNDVmMGQyYWJiYi8xL25MSmM1VkRrMmIyZ1c5WFVYSXRybzNRd3U3by5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBO
BAIAATBIAwQCAjggAwQCBf24AwQCLVGgAwQCLV6IAwQCLYIgAwQCWNYAAwQCWNrE
AwQCuXLMAwQCudugAwQCuexcAwQCwW+4AwQCwYfcMA0GCSqGSIb3DQEBCwUAA4IB
AQCNgbAqPzZn1Wip+gkCVq+UVmMjP2rzn2RtEX7iIiL2wE47wxWV+tC+Xw3J9Lve
kV5VHubko244ZxUk+7XSPJ9sJsaErKoClKE3EGBN4lmB8iPKnZ2zCYHGQwDameOD
MHshdxGjXEa3dIj07EfEnnAZyMLPa9oS35V9d8A7sWAKl8wD7Rk+J4q3/CnW87wA
YBS57+njT22IDQZ4cZLlkb7U4tuSWx/cK0cEplcbp/p38HWt8jb4OkrLlhS5EAtB
Rj3vS0h+EW4x+ecM/53zxJQJ8SKYSBGllny0Bw0UXMPTrwbrl+i7victqfAGti8e
KvlZUwtuibj5PyA4E5wjUEes
-----END CERTIFICATE-----

Generated at Sat Jan 1 13:35:36 2022 by LibreSSL & rpki-client.