RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer (download)

Subject key identifier:   B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2022-07-01T00:00:00Z
    Resources:
    1: AS: 205406
    2: AS: 208258
    3: AS: 213391
    1: IP: 37.221.124.0/22
    2: IP: 45.128.156.0/22
    3: IP: 45.130.52.0/22
    4: IP: 45.134.176.0/22
    5: IP: 45.135.96.0/22
    6: IP: 45.136.64.0/22
    7: IP: 45.138.0.0/22
    8: IP: 45.140.8.0/22
    9: IP: 45.141.16.0/22
    10: IP: 45.141.124.0/22
    11: IP: 45.141.204.0/22
    12: IP: 45.144.244.0/22
    13: IP: 45.148.64.0/22
    14: IP: 45.149.88.0/22
    15: IP: 45.151.156.0/22
    16: IP: 45.152.8.0/22
    17: IP: 45.152.36.0/22
    18: IP: 45.154.236.0/22
    19: IP: 45.157.32.0/22
    20: IP: 45.157.200.0/22
    21: IP: 45.159.192.0/22
    22: IP: 46.161.208.0/20
    23: IP: 80.64.216.0/22
    24: IP: 91.244.204.0/22
    25: IP: 94.232.244.0/22
    26: IP: 109.206.248.0/22
    27: IP: 130.195.48.0/22
    28: IP: 130.195.60.0/22
    29: IP: 185.123.156.0/22
    30: IP: 185.130.40.0/22
    31: IP: 185.208.208.0/22
    32: IP: 185.222.32.0/22
    33: IP: 185.227.80.0/22
    34: IP: 185.228.80.0/22
    35: IP: 185.232.84.0/22
    36: IP: 185.243.112.0/22
    37: IP: 193.56.238.0/23
    38: IP: 193.57.8.0/23
    39: IP: 193.109.136.0/23
    40: IP: 193.110.4.0/23
    41: IP: 193.151.184.0/22
    42: IP: 194.39.216.0/23
    43: IP: 194.40.246.0/23
    44: IP: 194.146.44.0/23
    45: IP: 194.146.48.0/23
    46: IP: 194.156.176.0/22
    47: IP: 195.22.156.0/23
    48: IP: 195.26.6.0/23
    49: IP: 195.60.176.0/23
    50: IP: 195.62.22.0/23
    51: IP: 213.185.86.0 -- 213.185.95.255
    52: IP: 2a0b:3c40::/29
    53: IP: 2a0c:9e00::/29
    54: IP: 2a0c:fe00::/29
    55: IP: 2a0e:5540::/29
    56: IP: 2a0e:a940::/29
    57: IP: 2a0e:cbc0::/29
    58: IP: 2a0f:40::/29
    59: IP: 2a0f:3b80::/29

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 646432355231 (0x96825ef39f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov 26 09:08:59 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:56:67:dd:3b:98:0e:97:cc:24:66:4b:b8:b7:
                    50:96:36:ba:3b:25:b5:89:ce:68:13:6b:15:18:bc:
                    3f:dc:4b:6f:61:0c:d3:5a:e3:6a:80:3f:3c:8c:25:
                    e8:b3:7e:f7:09:41:b9:59:1a:49:e1:ba:f7:b4:49:
                    01:54:24:15:39:e3:46:16:39:89:55:0a:b5:b8:3e:
                    1e:f5:e2:46:8d:97:40:16:e0:a8:97:a5:fd:e4:b1:
                    87:78:26:d3:c7:f9:a8:00:94:3a:03:f5:a5:f9:da:
                    82:3d:19:e2:bf:97:02:86:4b:f7:1c:1b:62:6c:40:
                    9e:14:42:3c:37:3b:3a:02:57:63:35:3d:09:9e:77:
                    78:1b:c6:51:c8:30:19:ca:a4:98:d0:9b:d5:22:38:
                    93:2d:8b:84:e9:7b:db:b2:a0:94:cb:ae:de:13:4d:
                    d8:1b:8a:8d:08:47:3b:67:62:26:c3:72:33:5c:ea:
                    63:33:10:20:4b:dc:d6:49:7f:cc:3b:60:1b:de:7c:
                    cd:b9:8a:23:ed:1f:1e:23:15:44:94:54:e8:f0:38:
                    cf:f4:6d:ea:a7:d6:dd:00:82:9c:88:85:f2:89:9a:
                    79:5e:1c:c6:17:8f:b8:79:aa:fc:73:09:cd:be:84:
                    c5:89:df:82:d9:67:52:2a:a1:13:6d:b8:16:af:88:
                    6a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.221.124.0/22
                  45.128.156.0/22
                  45.130.52.0/22
                  45.134.176.0/22
                  45.135.96.0/22
                  45.136.64.0/22
                  45.138.0.0/22
                  45.140.8.0/22
                  45.141.16.0/22
                  45.141.124.0/22
                  45.141.204.0/22
                  45.144.244.0/22
                  45.148.64.0/22
                  45.149.88.0/22
                  45.151.156.0/22
                  45.152.8.0/22
                  45.152.36.0/22
                  45.154.236.0/22
                  45.157.32.0/22
                  45.157.200.0/22
                  45.159.192.0/22
                  46.161.208.0/20
                  80.64.216.0/22
                  91.244.204.0/22
                  94.232.244.0/22
                  109.206.248.0/22
                  130.195.48.0/22
                  130.195.60.0/22
                  185.123.156.0/22
                  185.130.40.0/22
                  185.208.208.0/22
                  185.222.32.0/22
                  185.227.80.0/22
                  185.228.80.0/22
                  185.232.84.0/22
                  185.243.112.0/22
                  193.56.238.0/23
                  193.57.8.0/23
                  193.109.136.0/23
                  193.110.4.0/23
                  193.151.184.0/22
                  194.39.216.0/23
                  194.40.246.0/23
                  194.146.44.0/23
                  194.146.48.0/23
                  194.156.176.0/22
                  195.22.156.0/23
                  195.26.6.0/23
                  195.60.176.0/23
                  195.62.22.0/23
                  213.185.86.0-213.185.95.255
                IPv6:
                  2a0b:3c40::/29
                  2a0c:9e00::/29
                  2a0c:fe00::/29
                  2a0e:5540::/29
                  2a0e:a940::/29
                  2a0e:cbc0::/29
                  2a0f:40::/29
                  2a0f:3b80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205406
                  208258
                  213391

    Signature Algorithm: sha256WithRSAEncryption
         77:99:2c:ac:04:17:97:b4:78:70:2c:ed:9f:dc:ed:80:bf:e7:
         cd:51:5c:12:b9:a9:e1:8b:78:67:2b:75:59:42:5a:10:16:fa:
         0b:1a:a7:0a:10:0d:2b:b1:2a:98:b9:e3:f4:bf:bd:83:6a:b9:
         37:bc:99:b4:9b:d3:42:49:5d:6f:56:10:49:a9:40:50:9b:53:
         bf:e5:97:a3:d8:7c:97:5e:8e:6d:f9:5d:1d:78:0f:bf:55:08:
         08:a5:f7:d6:e6:10:6e:49:f4:47:9b:02:52:e4:1f:53:fa:ff:
         6b:61:a7:66:ed:3f:21:91:ea:dd:58:8c:c1:f8:ec:62:fd:40:
         62:14:18:35:5d:85:a2:b6:ff:99:97:40:97:8b:85:80:10:d8:
         2e:ed:88:d2:99:50:3c:18:86:6d:0a:5d:a8:5a:3d:5a:26:1c:
         e1:ce:e2:24:f8:ae:87:39:13:d3:ca:2b:2b:90:ff:0b:b7:e0:
         0e:b3:f7:c2:68:e2:7e:44:2e:4d:6e:20:9c:bf:fb:be:6d:fa:
         de:1c:0f:6d:fe:62:97:99:58:3e:16:fb:1e:13:e9:fc:64:db:
         ec:a8:89:d7:44:d6:b2:27:5f:83:87:e2:8f:61:d4:bc:e3:b7:
         17:db:21:b0:8c:59:10:ae:d6:fa:4c:65:a1:28:f8:ea:a8:9a:
         5b:c0:af:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Nov 26 10:51:54 2021 by LibreSSL & rpki-client.