RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/pBJSjGnbX8XLrtdMsi5EorzkRa0.cer (download)

Subject key identifier:   A4:12:52:8C:69:DB:5F:C5:CB:AE:D7:4C:B2:2E:44:A2:BC:E4:45:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/b4/eeafdb-4708-409f-a953-24302c556ce9/1/pBJSjGnbX8XLrtdMsi5EorzkRa0.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/b4/eeafdb-4708-409f-a953-24302c556ce9/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: AS: 34962
    1: IP: 45.88.200.0/22
    2: IP: 2a0c:2c40::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/pBJSjGnbX8XLrtdMsi5EorzkRa0.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 552807855990 (0x80b5ea7776)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:02:10 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=a412528c69db5fc5cbaed74cb22e44a2bce445ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a9:ee:30:3f:0b:7d:48:e4:a9:0c:a3:94:0b:
                    73:2f:e3:e2:ad:3d:ca:5d:53:2b:cf:7c:d9:e4:95:
                    a6:46:da:6d:8f:df:8f:99:9a:dd:73:b0:40:1c:61:
                    47:8c:43:c7:f7:74:fc:76:f5:3c:50:8b:0c:3e:5d:
                    58:30:34:ad:c3:67:69:bf:6f:96:21:70:6e:51:51:
                    cc:c8:ed:b1:92:20:03:aa:45:64:2d:7c:c3:23:e4:
                    ae:91:72:35:6b:1d:f9:02:6b:14:f9:a5:5f:17:93:
                    6e:c0:45:77:5b:7c:17:6e:d8:c7:c6:af:ba:45:39:
                    3b:b3:e5:74:f7:03:22:6d:eb:ec:0a:34:c5:14:01:
                    eb:7b:1f:03:db:93:e3:67:1c:72:96:31:75:f8:a6:
                    e0:f3:ae:85:df:df:d7:b3:d8:7c:27:a2:1b:6d:b5:
                    72:9a:04:59:ed:28:d6:18:ac:0a:56:b2:ae:19:1e:
                    c4:77:03:b5:e7:df:cd:ae:e8:94:03:7f:4e:29:02:
                    c6:6e:46:6a:41:6f:a4:8e:81:86:11:f2:12:6f:98:
                    55:0e:4c:32:3c:60:27:cb:93:8b:ed:20:e1:f4:17:
                    a6:42:cc:03:4b:7b:88:9d:51:8e:9f:c6:7d:d8:ed:
                    7d:51:9e:be:3d:66:4b:f6:94:63:db:af:07:c6:16:
                    b4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A4:12:52:8C:69:DB:5F:C5:CB:AE:D7:4C:B2:2E:44:A2:BC:E4:45:AD
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/eeafdb-4708-409f-a953-24302c556ce9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/eeafdb-4708-409f-a953-24302c556ce9/1/pBJSjGnbX8XLrtdMsi5EorzkRa0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.200.0/22
                IPv6:
                  2a0c:2c40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34962

    Signature Algorithm: sha256WithRSAEncryption
         88:60:0b:66:fe:f2:22:ca:1f:2f:22:79:69:d1:0f:fa:2f:ac:
         80:22:ed:c5:b7:b5:a0:19:c2:49:9c:d0:8a:24:36:96:a2:2f:
         0d:77:25:ce:c3:39:1c:24:fb:09:21:5c:2e:65:8e:67:2f:6b:
         6f:9a:0b:d7:4c:0e:56:41:d6:15:8b:b0:19:25:28:5d:30:f6:
         5e:72:8e:d7:83:8a:78:3b:b4:03:eb:0a:77:8b:07:d0:84:37:
         99:c3:2f:c3:2c:05:ac:d2:74:a6:e2:27:7c:32:16:ed:7d:37:
         43:d5:68:4e:93:ba:f6:b3:83:b8:a4:36:c6:1c:5e:48:0f:05:
         56:35:40:3e:bb:d2:d0:ac:f5:35:69:15:0a:0f:43:0a:68:16:
         aa:23:ff:b0:df:8d:06:e2:79:c1:64:32:ca:97:18:df:f4:5a:
         7e:d5:33:3e:fe:2b:42:a0:42:da:9d:f8:09:a1:d9:43:12:2e:
         0e:e8:cc:22:cc:5f:56:9f:b4:e6:8e:25:39:2b:55:9d:e2:13:
         5a:17:81:56:3f:c0:3f:fd:95:89:1e:c1:bb:0a:fa:ec:52:18:
         b8:7c:15:b0:6f:8f:42:71:f1:f5:45:46:a4:07:6e:09:54:cd:
         41:00:ff:34:ff:60:c3:60:d7:08:2d:74:f6:36:74:f1:2b:86:
         f2:64:2c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 19 09:38:54 2021 by LibreSSL & rpki-client.