RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer (download)

Subject key identifier:   AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: IP: 91.229.58.0/24

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 563559776114 (0x8336c7bf72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:04:04 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=acc32858ccda9586c6d9671e310d51c28268c459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e3:bd:08:2a:37:b5:1e:f3:82:80:6c:07:79:
                    51:97:14:3a:9f:dc:a2:41:c6:bb:83:cf:68:e9:30:
                    51:2b:62:67:0b:44:28:63:af:76:df:2d:16:d1:1b:
                    18:f7:4f:8f:c2:c8:f3:ff:9c:b0:ff:82:bf:46:e5:
                    27:2e:31:11:0f:56:ac:ad:9d:85:d5:76:81:c4:83:
                    13:5f:06:05:77:ab:fe:03:2f:f3:c8:2f:9e:4d:0d:
                    6f:68:0f:b5:93:1f:44:f7:75:5d:35:2e:5c:04:26:
                    a8:07:df:6c:14:17:3a:3c:5b:17:b9:b3:81:57:1f:
                    15:31:fe:28:91:df:03:d9:09:ee:9e:e3:86:f5:68:
                    2a:3f:5c:7d:43:16:31:fe:c2:32:4b:63:30:73:ed:
                    c2:c8:34:00:86:21:75:b5:47:1c:1e:81:89:f7:ec:
                    83:2e:59:9e:b2:86:5e:70:8a:c0:50:eb:90:95:59:
                    60:52:74:6f:06:38:ad:c6:4c:6e:d3:9b:e7:27:90:
                    7f:46:78:ab:05:58:63:bf:c9:0e:97:5c:bb:9a:cb:
                    ec:0e:33:de:e0:b2:f2:6d:eb:ed:21:cf:13:a4:90:
                    54:c1:76:58:05:ad:bd:2f:cf:16:5f:10:b6:49:13:
                    31:e6:a1:9f:e5:0d:e4:b3:88:32:d9:79:6a:08:8c:
                    77:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.229.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:1c:c1:5c:2c:11:cd:db:52:d3:e1:36:f4:dd:74:e8:af:49:
         d0:f1:83:14:bf:df:92:35:5e:6c:5d:93:2e:74:c9:39:f0:0b:
         46:4e:b2:33:2f:41:4e:ac:6b:7a:33:dc:87:0d:48:68:51:c1:
         42:67:a5:14:a6:1e:7b:88:1b:56:2f:93:69:c1:f6:6d:ad:dc:
         0b:ad:bc:3f:c7:b2:c2:9c:75:c3:e9:47:9c:df:bf:38:1f:37:
         f0:b0:09:e7:40:ea:b1:af:e1:c2:50:6c:9e:6f:42:4d:c6:de:
         a8:30:70:e7:f2:5a:f4:26:7e:49:1e:d4:44:35:c7:53:d9:a5:
         c4:3c:ab:ca:42:a7:12:db:8e:ab:18:2a:e0:38:97:af:84:7e:
         68:91:47:0a:27:c7:18:29:a4:1f:3d:9b:09:a5:6e:a8:75:fa:
         fa:40:b5:85:a7:db:51:8d:61:98:3b:27:12:db:83:27:f8:a3:
         7c:61:ed:7f:52:b3:6d:17:92:74:d4:a4:da:6f:c4:51:88:e8:
         5a:d2:6d:e9:54:a3:09:e9:53:9e:a2:8f:0c:e4:d8:f5:83:18:
         d6:74:34:0a:90:b9:20:26:25:3c:1c:42:fa:8f:8d:86:1b:75:
         65:d7:11:ef:03:a3:3b:61:9b:33:f9:8b:90:b1:1a:eb:7e:bf:
         de:16:8d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:32:32 2021 by LibreSSL & rpki-client.