RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer (download)

Subject key identifier:   A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: IP: 37.209.192.0/21
    2: IP: 91.237.174.0/23
    3: IP: 185.135.152.0/22

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 670886054800 (0x9c33eccb90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:00:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:81:3a:7e:cc:d0:89:e7:27:be:c0:9b:b9:a7:
                    77:c8:94:ac:3d:d4:0e:fa:48:be:6c:29:37:df:75:
                    7d:eb:26:d7:7e:ee:f2:3c:e0:1a:d1:3d:52:27:bd:
                    0d:fd:c1:4b:78:69:b5:97:b2:5e:68:11:f5:c7:84:
                    9e:e8:7d:bc:80:8c:c6:39:91:23:97:48:8f:93:54:
                    3f:cd:e3:08:fa:90:b8:2a:88:e5:ed:03:43:f0:b9:
                    fa:52:de:d4:b7:e7:dd:ac:a8:ae:be:32:c5:a5:98:
                    3f:7c:25:31:6f:98:af:96:b1:7e:ea:9a:da:d7:44:
                    08:0b:7f:95:d3:15:0e:bc:22:07:21:3d:3f:fc:a1:
                    a4:b1:14:6e:b4:34:9b:70:e8:7c:43:2b:57:75:04:
                    92:82:09:11:76:8c:00:be:de:84:a5:1e:9a:45:2d:
                    78:bd:0c:bf:a4:0b:6f:48:7b:ef:18:72:72:90:ad:
                    7a:25:1f:4d:b4:51:5a:2a:0f:13:76:c0:a2:a7:a7:
                    22:ca:69:bd:04:38:25:c4:a5:50:b4:c1:9e:f7:0e:
                    96:aa:24:65:03:c8:3e:1a:98:a1:c1:33:45:00:3e:
                    e2:69:55:f7:fe:8d:59:73:c6:5a:2f:83:9b:62:38:
                    50:1b:be:dc:36:80:b2:79:e5:42:de:e7:c1:ad:b8:
                    06:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.209.192.0/21
                  91.237.174.0/23
                  185.135.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:f4:6e:e2:c7:34:e6:8e:d6:ac:c4:63:f3:3b:12:5c:5f:d4:
         fa:db:0c:0c:75:6c:9e:7d:88:2d:da:c2:3d:a2:65:65:fd:1f:
         15:06:e2:c7:43:d2:ff:dc:3c:fc:c0:d0:f9:a0:c8:37:de:6f:
         e2:ec:26:96:5a:6d:8c:36:8d:2c:7c:91:dd:d1:fe:ff:dd:16:
         91:7e:2b:4b:78:9c:49:ec:70:79:dc:b8:02:63:d8:bc:b5:af:
         11:4e:dd:e4:26:aa:f5:a3:cc:52:a8:73:c7:ec:41:03:15:80:
         d6:af:9a:1a:46:2f:7d:d5:4b:fa:1f:eb:e5:16:29:d2:62:f5:
         c5:6c:34:77:ed:39:56:86:7d:b2:b4:d9:a6:81:f6:14:46:7a:
         df:35:13:83:6d:75:c7:7f:e4:fb:54:30:c9:db:75:4a:83:3f:
         49:75:b2:4c:63:a1:b3:b0:46:30:08:7c:ee:17:67:eb:b2:e1:
         23:17:15:76:d1:62:d8:46:ea:f7:7f:da:24:03:64:a3:54:ef:
         8f:dc:b4:1e:7d:81:01:85:95:fe:01:68:13:b4:97:ed:f4:d0:
         29:e4:38:b3:a8:55:8e:84:1d:d0:49:6e:76:8b:b7:24:97:68:
         7b:7a:94:67:83:38:ef:34:3d:5f:2d:d3:15:b8:c5:73:23:93:
         5a:ef:f1:94
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIGAJwz7MuQMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDMwMDU3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhhNWFlOGEzZDhi
ZGFhYmY0NzY1ZmRhNzlkNTVlY2E4YzY5YzhiZjJjMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAhYE6fszQiecnvsCbuad3yJSsPdQO+ki+bCk333V96ybX
fu7yPOAa0T1SJ70N/cFLeGm1l7JeaBH1x4Se6H28gIzGOZEjl0iPk1Q/zeMI+pC4
Kojl7QND8Ln6Ut7Ut+fdrKiuvjLFpZg/fCUxb5ivlrF+6pra10QIC3+V0xUOvCIH
IT0//KGksRRutDSbcOh8QytXdQSSggkRdowAvt6EpR6aRS14vQy/pAtvSHvvGHJy
kK16JR9NtFFaKg8TdsCip6ciymm9BDglxKVQtMGe9w6WqiRlA8g+GpihwTNFAD7i
aVX3/o1Zc8ZaL4ObYjhQG77cNoCyeeVC3ufBrbgGTwIDAQABo4ICkDCCAowwHQYD
VR0OBBYEFKWuij2L2qv0dl/aedVeyoxpyL8sMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3LzBkMjgwYy05ZDg4LTRhZWEt
YjUyMS00MTZmODVlZTIzN2IvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvMGQyODBjLTlkODgtNGFlYS1i
NTIxLTQxNmY4NWVlMjM3Yi8xL3BhNktQWXZhcV9SMlg5cDUxVjdLakduSXZ5dy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQDJdHAAwQBW+2uAwQCuYeYMA0GCSqGSIb3DQEBCwUAA4IBAQBs9G7i
xzTmjtasxGPzOxJcX9T62wwMdWyefYgt2sI9omVl/R8VBuLHQ9L/3Dz8wND5oMg3
3m/i7CaWWm2MNo0sfJHd0f7/3RaRfitLeJxJ7HB53LgCY9i8ta8RTt3kJqr1o8xS
qHPH7EEDFYDWr5oaRi991Uv6H+vlFinSYvXFbDR37TlWhn2ytNmmgfYURnrfNROD
bXXHf+T7VDDJ23VKgz9JdbJMY6GzsEYwCHzuF2frsuEjFxV20WLYRur3f9okA2Sj
VO+P3LQefYEBhZX+AWgTtJft9NAp5DizqFWOhB3QSW52i7ckl2h7epRngzjvND1f
LdMVuMVzI5Na7/GU
-----END CERTIFICATE-----

Generated at Sat Jan 1 04:39:36 2022 by LibreSSL & rpki-client.