RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer (download)

Subject key identifier:   9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: AS: 200571
    1: IP: 185.97.8.0/22
    2: IP: 2a06:380::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 568168149815 (0x844975f337)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:43:49 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b1:35:0c:5d:f0:8e:d6:d7:91:8d:1e:ba:0e:
                    c0:52:d1:a7:47:47:0f:31:76:4b:3f:df:6c:5c:67:
                    8a:36:be:a5:c8:11:28:a9:54:5c:34:97:00:04:6d:
                    cd:b8:ae:a4:74:b3:62:0f:7a:3f:2a:e3:bc:4b:d0:
                    19:3b:a0:af:24:79:29:86:c4:02:3f:a7:a1:76:c3:
                    4c:75:8a:0e:bb:f1:9a:2c:44:f5:b3:e1:ec:2a:e7:
                    30:4d:9d:e8:c6:7b:3f:cd:69:10:10:0e:16:ba:5f:
                    a0:51:cf:b8:f9:77:7a:57:00:00:fb:b7:7b:45:9c:
                    d3:1d:75:21:03:0b:9b:11:ed:8f:3f:51:d4:7f:d7:
                    3c:9e:29:5c:a8:58:81:fd:1d:35:fc:f6:f5:ae:c1:
                    9e:98:21:32:61:b6:5d:7b:e2:e4:07:84:d9:84:c4:
                    26:cd:be:a0:21:ec:54:20:dd:17:60:6a:ef:15:ae:
                    b5:dd:3b:d1:07:8e:44:e4:ed:49:00:5f:3a:3f:2e:
                    d9:6e:25:da:ef:28:6c:29:3e:62:97:f1:c8:85:a4:
                    7e:ba:af:e1:57:52:d1:2a:96:e9:fe:91:35:27:40:
                    68:d7:17:bc:af:7b:b4:62:3d:6f:ec:51:44:ed:a2:
                    53:e6:8b:31:f4:a8:c6:63:8b:72:db:00:ec:a7:90:
                    4a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.97.8.0/22
                IPv6:
                  2a06:380::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200571

    Signature Algorithm: sha256WithRSAEncryption
         6e:8e:1c:34:6c:cf:a2:e4:fb:5a:63:73:54:65:81:f1:cb:16:
         8c:d4:d9:a3:de:66:a9:ee:ec:1f:47:0d:2d:d9:f8:ef:9c:11:
         b5:ff:12:fc:00:93:41:c4:74:3d:d0:81:14:6e:5d:25:a4:60:
         a1:25:93:ea:a5:b1:20:aa:bb:60:ee:58:e2:ec:19:17:eb:29:
         4a:5a:c6:d6:ef:d5:25:8e:8c:62:75:a9:ee:60:4b:62:c9:e7:
         b7:fa:07:2a:25:e3:2f:cb:42:03:cc:44:52:56:e7:14:b6:f1:
         42:fa:1e:ba:35:ad:ad:eb:47:46:f5:9c:61:c8:8a:95:fb:21:
         bf:25:31:be:ec:6b:0a:a2:3c:88:45:ad:83:a3:e3:75:9f:b4:
         0d:67:e7:5a:d7:e7:d4:6a:14:a9:61:d5:8e:48:9e:76:b3:91:
         8e:28:fe:8c:89:06:8e:63:78:29:70:10:75:7f:33:41:55:8c:
         ff:75:48:ac:fc:37:ed:4c:c8:cc:f8:f0:9b:21:d4:b4:da:0d:
         bc:1f:e8:6e:94:c8:40:63:5a:31:3e:16:7c:d3:aa:bd:2b:d0:
         bc:60:c2:48:c2:8d:ff:5d:a5:b5:0a:67:21:e4:3f:6c:32:42:
         d6:b7:79:b2:0a:05:9d:f3:27:9a:31:0f:83:bb:0e:69:d6:cf:
         21:f2:ec:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Sep 17 17:29:40 2021 by LibreSSL & rpki-client.