RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer (download)

Subject key identifier:   C1:D7:10:D8:AC:31:B1:F6:DA:F7:04:6C:45:37:4A:E8:E4:05:F1:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: AS: 3249
    2: AS: 16014
    3: AS: 198632
    1: IP: 37.157.64.0/18
    2: IP: 46.131.0.0/16
    3: IP: 62.65.32.0/19
    4: IP: 78.110.36.0--78.110.43.255
    5: IP: 80.235.0.0/17
    6: IP: 81.20.144.0/20
    7: IP: 83.166.32.0/19
    8: IP: 84.50.0.0/16
    9: IP: 85.29.192.0/18
    10: IP: 88.196.0.0/16
    11: IP: 89.221.64.0/21
    12: IP: 90.190.0.0/15
    13: IP: 91.236.222.0/24
    14: IP: 94.246.192.0--94.246.215.255
    15: IP: 176.46.0.0/17
    16: IP: 185.20.56.0/22
    17: IP: 185.40.236.0/22
    18: IP: 185.43.104.0/22
    19: IP: 194.106.96.0/19
    20: IP: 194.116.188.0/23
    21: IP: 194.126.96.0/19
    22: IP: 195.50.192.0/18
    23: IP: 195.250.160.0/19
    24: IP: 213.35.128.0/17
    25: IP: 213.168.0.0/19
    26: IP: 213.180.0.0/19
    27: IP: 213.219.64.0/18
    28: IP: 217.71.32.0/20
    29: IP: 217.159.128.0/17
    30: IP: 2001:7d0::/32
    31: IP: 2001:7f8:15::/48
    32: IP: 2a00:16e0::/32
    33: IP: 2a01:158::/32
    34: IP: 2a01:6da0::/32
    35: IP: 2a04:80c0::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 522884892623 (0x79be5e47cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:00:05 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=c1d710d8ac31b1f6daf7046c45374ae8e405f18e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e6:d5:4a:ee:9c:c7:2c:d6:62:e2:33:97:6b:
                    06:ca:51:11:b5:a6:4d:55:e6:a5:27:54:6d:6b:cf:
                    3f:67:78:75:13:5e:73:c1:dc:3b:f0:f9:e0:ed:51:
                    e1:64:a7:ab:eb:7b:43:4e:0b:6f:0c:f3:90:94:57:
                    f2:82:e5:32:13:6f:45:b6:52:c9:5e:09:29:7b:d1:
                    28:6d:8f:b9:e8:58:16:95:c3:f8:c0:b5:9f:27:b8:
                    4f:9a:76:d1:b7:67:d4:5a:95:a5:ca:0c:a0:c3:94:
                    af:8d:c7:12:ad:a3:d4:b4:35:60:9a:a9:2e:81:18:
                    46:46:6b:fe:88:39:ad:c8:d7:63:89:c1:7a:7d:70:
                    33:60:02:a4:a4:ef:0c:0d:2f:d5:a7:93:22:96:bd:
                    7f:b5:32:2a:19:79:93:03:b3:d7:d3:f4:90:e0:d0:
                    be:3a:27:1e:05:97:18:56:dc:c3:09:d8:e3:6f:a4:
                    99:d7:eb:e0:14:11:8e:12:4f:62:73:13:4a:8a:32:
                    7d:6a:bc:a1:a7:2b:82:06:6b:1f:7c:92:8d:89:13:
                    65:78:f7:a6:84:97:df:8d:90:4e:d5:b2:82:ff:66:
                    fb:ec:70:01:54:01:b6:e8:ec:14:6f:21:08:00:4e:
                    4f:c0:b4:f8:74:38:da:16:65:82:01:aa:8e:fd:9e:
                    1c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C1:D7:10:D8:AC:31:B1:F6:DA:F7:04:6C:45:37:4A:E8:E4:05:F1:8E
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0..0......0.....%.@........>A 0....Nn$...Nn(...P.....Q.....S. ...T2...U.....X....Y.@...Z....[..0....^.....^.............8....(.....+h....j`....t.....~`....2...........#..................@....G ......02....0,... ...... ........*......*..X...*.m....*...
            sbgp-autonomousSysNum: critical
                0...0
......>......
    Signature Algorithm: sha256WithRSAEncryption
         33:85:3f:cd:bc:46:a8:60:75:18:ac:e3:95:e5:ab:18:09:cb:
         b0:82:30:50:b1:71:43:73:1b:44:29:07:98:d8:52:23:63:7b:
         05:90:fc:d0:95:2b:9d:4a:c1:43:7d:30:2b:0e:65:ca:fe:f4:
         20:95:eb:29:aa:17:75:8b:aa:eb:9d:3a:87:66:c1:1d:dc:5b:
         b7:41:f3:5f:58:5b:1c:da:83:ba:08:43:e4:34:6f:bf:47:69:
         1a:d8:5e:85:fb:0c:e4:ab:a2:b8:d0:09:cf:28:fe:ca:de:05:
         94:e7:b0:ea:50:1c:a5:b4:70:8b:df:b2:fa:60:90:64:cc:ad:
         a2:72:b5:bf:f5:e0:20:59:5f:28:55:3d:c3:1f:45:14:8c:12:
         c5:45:de:07:8d:15:26:1f:a8:f4:99:3e:dc:d6:e6:2e:af:cb:
         0e:30:99:dc:21:d3:d1:06:aa:a9:9f:e1:cb:f2:d5:73:0e:d7:
         3b:e8:47:bc:84:d9:32:fa:dd:dc:9a:14:ff:75:b9:30:40:51:
         d5:87:7d:00:62:a0:a8:ab:d8:f8:35:0d:14:41:70:3e:68:f2:
         df:01:d9:d5:3f:dc:3b:12:59:70:0e:ba:fb:c3:32:83:cf:b2:
         57:ce:e3:c3:1e:dc:63:67:be:42:7b:be:1f:95:8e:e4:17:54:
         9e:61:17:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jul 27 22:34:01 2021 by LibreSSL & rpki-client.