RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer (download)

Subject key identifier:   A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: AS: 43584
    1: IP: 46.16.160.0/21
    2: IP: 91.197.140.0/22
    3: IP: 185.27.144.0/22

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 728050899506 (0xa983371a32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:58:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c9:93:ed:b2:fc:fb:ed:63:8a:db:76:d0:2f:
                    b9:ce:98:5f:4d:a2:d1:39:b5:6d:36:a2:d9:16:cb:
                    b9:63:99:d2:e9:79:14:08:98:f2:9f:da:77:21:f7:
                    a9:7d:8f:1f:ac:62:9d:7c:f3:fa:fe:b1:b1:c4:a1:
                    c7:bd:b3:de:2d:b8:20:71:d1:07:ed:98:9b:d2:bd:
                    58:fb:0b:22:ac:31:fd:46:9e:1c:a6:a9:00:25:70:
                    2c:61:e7:65:fc:05:de:35:4c:9f:2c:e7:3b:7a:2e:
                    00:63:c6:49:53:0f:72:86:a7:30:71:20:62:ba:2a:
                    00:fb:f3:9a:5d:09:81:d1:9c:f1:cb:88:1f:03:98:
                    f0:93:47:80:ac:1f:a3:90:9a:a7:c7:64:a9:ff:3c:
                    c9:44:f0:3a:65:6c:41:02:c4:bd:4b:f9:d9:21:56:
                    60:1c:30:65:0d:22:4f:c3:6f:60:42:10:f9:5a:35:
                    71:4d:4f:31:54:49:f7:8d:54:6e:e7:b8:77:6a:77:
                    8c:0d:6d:93:f8:df:1b:29:17:3c:3d:a6:5e:8e:23:
                    58:0e:21:06:d9:c2:6d:bc:5c:18:1d:4f:ad:ca:db:
                    b8:0c:eb:0b:9d:e4:a5:f6:7c:c4:ac:e5:d9:d9:bb:
                    5b:a7:a3:d2:b9:72:d4:5d:45:c6:ff:46:c9:4c:84:
                    96:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.16.160.0/21
                  91.197.140.0/22
                  185.27.144.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43584

    Signature Algorithm: sha256WithRSAEncryption
         47:b4:e0:fa:90:f2:66:57:aa:f1:fb:7e:e2:46:d4:fa:9a:98:
         f4:fd:af:dd:9d:1a:1c:ef:e1:5b:f3:17:fe:59:6d:cb:57:e7:
         95:a3:7b:23:d6:4f:9b:f0:9b:99:cc:39:c2:b5:e9:7d:19:15:
         49:34:cf:59:19:f2:ea:7d:5f:52:ef:81:fb:4a:8c:e4:4b:36:
         d8:6a:ca:f1:c1:35:d7:72:8f:25:4c:a9:28:6d:24:5b:ed:a7:
         74:0c:e3:aa:5d:99:97:2c:8e:14:24:55:c4:3a:3b:23:2d:b2:
         5c:76:43:dc:85:6a:2e:ec:e6:e6:7a:78:75:2a:f2:67:40:34:
         5b:bb:a1:c0:cb:0e:31:f0:10:a3:31:2b:a4:db:d2:77:a8:00:
         30:b3:0a:7f:a8:47:ca:da:ae:9e:dc:69:d6:df:3d:4c:8d:dc:
         bd:8a:d5:a6:d4:7d:54:b3:b3:d3:3c:20:d7:37:a3:69:d6:6c:
         4e:c9:45:1f:13:13:1c:18:77:14:42:d5:44:ed:7f:8f:e4:01:
         4b:87:ea:a3:51:5e:20:0c:5b:e3:e9:dd:51:9b:f0:f4:a8:75:
         bb:9b:25:f0:a9:f9:ba:5f:30:8c:fe:00:74:3b:df:74:67:9a:
         64:39:83:56:da:68:24:7e:d1:e0:a9:98:93:c5:be:3a:28:6b:
         66:30:ce:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 16:58:56 2022 by LibreSSL & rpki-client.