RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/nvra0FZAav5PNkR6DoO7dedMu0E.cer (download)

Subject key identifier:   9E:FA:DA:D0:56:40:6A:FE:4F:36:44:7A:0E:83:BB:75:E7:4C:BB:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/a6/47e971-2a50-4316-a5a6-930cb4bcee7a/1/nvra0FZAav5PNkR6DoO7dedMu0E.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/a6/47e971-2a50-4316-a5a6-930cb4bcee7a/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: AS: 58056
    1: IP: 5.249.176.0/20
    2: IP: 37.19.64.0/21
    3: IP: 109.123.0.0/18
    4: IP: 195.95.200.0/23
    5: IP: 195.95.204.0/23
    6: IP: 2a00:d840::/32

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/nvra0FZAav5PNkR6DoO7dedMu0E.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 536168076716 (0x7cd61b95ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:11:35 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=9efadad056406afe4f36447a0e83bb75e74cbb41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cc:49:ce:11:51:a6:e0:5f:84:50:c7:b5:67:
                    73:48:1a:e4:ab:25:e7:05:bd:9a:c1:8a:58:3f:29:
                    d0:60:67:df:77:e3:02:32:48:5a:51:f6:cf:65:96:
                    a1:52:26:a0:3b:02:6e:f0:88:58:19:69:53:93:c0:
                    02:30:a6:3f:4f:af:6a:9d:26:b3:17:76:b2:82:b9:
                    27:de:6b:21:42:2e:a4:c1:70:6a:0d:a9:96:e0:a8:
                    9d:b7:10:bf:e9:3e:27:c6:92:32:ce:2e:65:f9:ea:
                    4d:bb:e8:54:b7:ad:81:a5:0a:cf:98:d0:18:99:66:
                    76:5c:c8:9e:de:36:ad:96:05:27:2e:5c:00:c0:e0:
                    e9:70:e7:85:ca:4e:f1:60:a4:b1:28:de:9b:c9:ee:
                    ba:60:c7:89:98:f0:cf:6c:0b:07:ae:cd:19:3a:02:
                    02:51:80:f7:27:58:d7:bf:d7:d5:b5:d3:8d:8d:91:
                    7a:51:0a:31:07:ff:6a:4f:58:e0:5a:61:6f:95:4e:
                    03:b8:05:0e:5b:eb:36:52:20:1e:67:0f:e4:c3:fc:
                    6f:f0:cb:65:f8:ee:1b:1b:39:04:73:bb:a2:0c:24:
                    3a:dd:2f:c6:2f:74:a6:a8:5c:43:ed:be:97:c8:4b:
                    c5:8d:6d:96:1c:5b:59:c1:60:33:89:1e:eb:ad:8f:
                    6a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9E:FA:DA:D0:56:40:6A:FE:4F:36:44:7A:0E:83:BB:75:E7:4C:BB:41
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/47e971-2a50-4316-a5a6-930cb4bcee7a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/47e971-2a50-4316-a5a6-930cb4bcee7a/1/nvra0FZAav5PNkR6DoO7dedMu0E.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                050$....0..........%.@...m{....._....._.0
....0....*..@
            sbgp-autonomousSysNum: critical
                0...0......
    Signature Algorithm: sha256WithRSAEncryption
         7b:bd:25:73:c0:84:ff:62:b1:7c:ff:92:6c:46:c0:c9:fa:1e:
         fa:0e:9c:de:00:ea:9c:40:8f:24:8b:0b:90:38:4b:7b:ae:73:
         6c:78:85:48:af:37:10:af:d3:aa:10:60:cd:6c:ec:fd:4c:4d:
         27:b7:c6:38:e8:69:14:b6:82:e3:39:37:00:c2:2e:9d:8e:31:
         91:54:68:95:11:cc:63:c4:a8:42:f2:6f:84:cf:4f:98:a4:bf:
         1f:9c:44:bb:f6:ff:52:b4:0a:37:53:82:e3:d4:b2:b5:d7:00:
         d9:95:f7:00:8a:af:f1:83:a4:a5:d1:d3:37:2f:52:ae:a4:90:
         d5:8b:95:db:de:8c:00:21:8f:81:8f:6d:eb:49:46:98:ca:ee:
         8e:cb:ab:79:91:d0:a3:52:92:ed:3b:a8:fb:29:78:21:26:5a:
         3d:b2:b6:85:db:35:80:98:65:8d:09:8e:82:d3:bd:0c:9a:b9:
         d7:9b:d8:5a:62:eb:94:30:ad:30:bf:3d:1e:20:4b:da:d9:2b:
         6c:eb:94:96:2a:73:ff:2a:2a:e1:69:fa:68:fe:d2:77:b8:9e:
         95:83:31:38:0d:e1:3f:87:19:dc:0e:0e:4d:d0:58:53:59:ca:
         51:d8:10:1b:22:a7:ac:a7:16:f4:06:75:2c:6e:ab:81:c3:ce:
         d6:05:2a:43
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgIFfNYblawwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMzExMzVaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDllZmFkYWQwNTY0
MDZhZmU0ZjM2NDQ3YTBlODNiYjc1ZTc0Y2JiNDEwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDjzEnOEVGm4F+EUMe1Z3NIGuSrJecFvZrBilg/KdBgZ993
4wIySFpR9s9llqFSJqA7Am7wiFgZaVOTwAIwpj9Pr2qdJrMXdrKCuSfeayFCLqTB
cGoNqZbgqJ23EL/pPifGkjLOLmX56k276FS3rYGlCs+Y0BiZZnZcyJ7eNq2WBScu
XADA4Olw54XKTvFgpLEo3pvJ7rpgx4mY8M9sCweuzRk6AgJRgPcnWNe/19W1042N
kXpRCjEH/2pPWOBaYW+VTgO4BQ5b6zZSIB5nD+TD/G/wy2X47hsbOQRzu6IMJDrd
L8YvdKaoXEPtvpfIS8WNbZYcW1nBYDOJHuutj2rbAgMBAAGjggLHMIICwzAdBgNV
HQ4EFgQUnvra0FZAav5PNkR6DoO7dedMu0EwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvNDdlOTcxLTJhNTAtNDMxNi1h
NWE2LTkzMGNiNGJjZWU3YS8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi80N2U5NzEtMmE1MC00MzE2LWE1
YTYtOTMwY2I0YmNlZTdhLzEvbnZyYTBGWkFhdjVQTmtSNkRvTzdkZWRNdTBFLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwRgYIKwYBBQUHAQcBAf8ENzA1MCQE
AgABMB4DBAQF+bADBAMlE0ADBAZtewADBAHDX8gDBAHDX8wwDQQCAAIwBwMFACoA
2EAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAOLIMA0GCSqGSIb3DQEBCwUAA4IB
AQB7vSVzwIT/YrF8/5JsRsDJ+h76DpzeAOqcQI8kiwuQOEt7rnNseIVIrzcQr9Oq
EGDNbOz9TE0nt8Y46GkUtoLjOTcAwi6djjGRVGiVEcxjxKhC8m+Ez0+YpL8fnES7
9v9StAo3U4Lj1LK11wDZlfcAiq/xg6Sl0dM3L1KupJDVi5Xb3owAIY+Bj23rSUaY
yu6Oy6t5kdCjUpLtO6j7KXghJlo9sraF2zWAmGWNCY6C070MmrnXm9haYuuUMK0w
vz0eIEva2Sts65SWKnP/Kirhafpo/tJ3uJ6VgzE4DeE/hxncDg5N0FhTWcpR2BAb
Iqespxb0BnUsbquBw87WBSpD
-----END CERTIFICATE-----

Generated at Fri Jul 30 02:05:43 2021 by LibreSSL & rpki-client.