RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/t-z503TMD3OWce5VBVvVjF-3Z6g.cer (download)

Subject key identifier:   B7:EC:F9:D3:74:CC:0F:73:96:71:EE:55:05:5B:D5:8C:5F:B7:67:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/46/51f895-7b98-4604-b4d2-5ce11d6734c0/1/t-z503TMD3OWce5VBVvVjF-3Z6g.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/46/51f895-7b98-4604-b4d2-5ce11d6734c0/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: AS: 208254
    1: IP: 45.150.220.0/22
    2: IP: 2a0f:300::/29

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/t-z503TMD3OWce5VBVvVjF-3Z6g.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 724019392777 (0xa892eb3109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:01:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b7ecf9d374cc0f739671ee55055bd58c5fb767a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1e:8a:92:49:4e:be:29:16:14:e8:20:d6:fe:
                    d4:a4:ac:8c:3a:bf:7c:94:fa:ad:ae:e1:6d:99:e2:
                    0d:65:3d:4d:65:ca:49:4f:c8:bd:fb:83:dd:b4:f2:
                    07:bf:66:e8:07:c0:67:d0:27:94:37:b4:22:2a:d0:
                    93:22:7f:7e:c3:4d:e6:73:05:ac:26:a5:6b:a0:9a:
                    fc:d2:de:2c:9c:24:54:3b:63:f0:01:62:9f:87:a8:
                    f0:bd:f1:89:26:5a:c3:f5:e2:bd:7c:6b:f8:ec:10:
                    4c:90:4d:67:68:e5:51:f9:aa:89:4a:5d:fa:38:f6:
                    ab:4c:0d:f5:e7:1a:eb:42:04:5f:af:c5:18:b5:c7:
                    c0:57:36:78:2a:7a:dc:2e:61:22:6e:b1:32:4d:66:
                    d2:60:70:d9:2e:bc:c2:4d:ac:77:25:3a:a1:29:5e:
                    16:5f:77:34:2c:a5:f7:1a:9a:ac:d3:40:70:3f:c9:
                    6d:d2:aa:ae:38:70:1c:bb:e7:ea:18:99:51:42:0d:
                    66:f9:c3:0f:18:69:ac:1f:9b:9d:e8:69:21:87:19:
                    fd:9f:3b:92:33:02:ea:60:08:b4:31:31:e9:c3:7c:
                    d9:c6:19:be:9e:96:e5:cb:2f:48:ba:b4:42:23:ba:
                    c9:83:92:c9:a3:bb:db:bc:2b:60:09:f6:cc:b6:38:
                    c8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B7:EC:F9:D3:74:CC:0F:73:96:71:EE:55:05:5B:D5:8C:5F:B7:67:A8
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51f895-7b98-4604-b4d2-5ce11d6734c0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51f895-7b98-4604-b4d2-5ce11d6734c0/1/t-z503TMD3OWce5VBVvVjF-3Z6g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.220.0/22
                IPv6:
                  2a0f:300::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208254

    Signature Algorithm: sha256WithRSAEncryption
         a2:da:38:44:c2:ee:88:9c:c9:0a:80:e8:28:56:18:46:cd:5c:
         ba:8f:f3:fa:9d:5c:de:e2:3e:d0:97:aa:b9:ee:39:0d:47:59:
         b3:fb:05:2e:bf:c8:47:80:c3:31:4c:71:38:d0:93:4d:f3:ce:
         b1:79:06:28:07:ff:73:0d:f9:82:e4:3f:cc:5a:83:b6:10:69:
         b3:22:e6:7d:c7:15:6f:fe:85:35:bd:4e:bc:cf:bb:e6:5d:a7:
         49:2d:87:f9:2c:0f:cc:5a:18:72:96:73:9e:31:84:f6:c4:d2:
         f5:eb:5a:31:ec:ee:fc:8e:83:13:e2:01:af:a7:ce:cb:73:01:
         82:28:4c:bc:c5:96:19:4e:12:43:82:bb:8d:5a:ee:e6:13:04:
         d9:77:8e:0f:07:b9:6f:ee:96:ac:ca:32:4b:cd:2e:2d:4a:32:
         ae:5f:0a:5d:1b:b4:3f:52:f9:b3:16:89:1a:5c:35:1b:af:ea:
         11:b4:c6:77:c2:66:06:79:32:e7:2b:69:84:1e:c3:a0:4b:56:
         cb:69:8e:a1:fd:9f:56:10:67:be:0a:39:92:12:dc:aa:29:2f:
         b1:b0:61:71:3e:dd:b6:36:01:93:cf:b7:b8:01:08:d8:af:c8:
         97:18:a5:0e:1f:4b:53:ed:87:7d:4c:b2:5c:81:b0:98:2d:54:
         cc:55:0d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 16:59:04 2022 by LibreSSL & rpki-client.