RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer (download)

Subject key identifier:   C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: AS: 12679
    2: AS: 208481
    1: IP: 45.134.12.0/22
    2: IP: 185.192.20.0/22
    3: IP: 212.8.224.0--212.8.229.255
    4: IP: 2a07:500::/29
    5: IP: 2a0e:7c40::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 536836623548 (0x7cfdf4ccbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:15:46 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:33:b8:7b:5a:b1:de:67:ed:c5:7c:1a:25:30:
                    f4:ab:86:3c:ea:bf:5b:14:7d:dc:c5:ab:a3:5a:40:
                    fa:61:82:8b:5c:70:27:92:f7:2a:60:22:62:d0:83:
                    6c:c3:dc:28:0a:c0:35:86:45:a9:c9:d6:e8:eb:65:
                    78:3c:28:e0:c5:88:2e:16:74:fc:c1:5e:ea:49:f1:
                    25:2b:0c:9e:ad:7f:c8:04:3e:d7:63:a7:7c:20:dd:
                    ff:37:94:c3:8b:1c:6d:35:02:0e:35:99:40:b1:49:
                    a1:bd:66:81:ac:07:11:23:dd:d2:25:61:b5:f5:30:
                    09:ce:fa:68:01:8e:02:f1:e9:e8:f1:a2:fb:9d:2b:
                    8e:c5:71:c5:43:1c:ea:7e:ee:fc:ff:65:c9:34:7f:
                    48:58:82:07:1b:37:42:3f:db:b4:3b:a8:3e:38:75:
                    4a:50:f6:46:d8:28:ca:aa:8d:b2:eb:d4:c1:f5:f3:
                    c4:bd:46:02:c5:2f:24:3f:fd:ee:2a:20:28:ee:45:
                    7e:4d:38:c4:08:5a:be:e1:6f:3a:40:23:a3:50:fd:
                    a1:62:6d:ff:89:22:59:64:73:de:7e:69:82:3d:44:
                    1d:8c:09:19:ae:2d:bb:e2:5c:09:b0:32:cc:5d:9f:
                    f4:e9:d8:37:fb:ed:d8:6d:35:6f:ae:08:aa:42:8b:
                    c1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.134.12.0/22
                  185.192.20.0/22
                  212.8.224.0-212.8.229.255
                IPv6:
                  2a07:500::/29
                  2a0e:7c40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12679
                  208481

    Signature Algorithm: sha256WithRSAEncryption
         93:bb:7f:8b:95:45:02:05:d0:67:92:60:82:28:aa:f3:f6:42:
         6c:95:e8:f6:c2:ad:0d:85:7f:2e:84:a8:58:97:b8:7a:2d:51:
         fb:28:c3:95:ac:07:27:cb:7e:3c:9c:28:e6:5a:36:42:3b:60:
         ce:57:7f:42:0f:94:7d:d1:a9:9d:21:93:e7:28:d3:ba:af:7e:
         15:fc:0e:6c:17:91:ae:6a:5c:d9:f5:36:7c:58:8e:fe:03:bd:
         99:14:e8:d6:bd:0b:b0:f4:17:81:18:ef:0b:cd:08:db:ce:a0:
         05:2f:c3:3b:12:51:f3:71:f2:e8:b2:12:12:a1:c8:3a:b7:83:
         77:12:ac:c5:17:c8:0a:fa:99:cd:ba:6a:5c:30:04:0a:aa:e0:
         e9:27:4b:3e:c6:05:1d:1c:1b:28:09:e3:32:d9:51:3f:b4:d7:
         2e:bb:91:81:8e:2b:f7:e7:eb:2c:7a:97:ac:62:11:54:c6:d0:
         2a:53:03:a2:c3:16:a9:3a:eb:29:df:54:d6:a3:dc:7e:29:bf:
         cd:8b:4d:38:90:d3:2e:31:b9:5e:26:9b:70:a9:81:34:74:60:
         ef:26:2f:cf:2a:e3:8d:77:82:1f:de:38:03:28:9a:29:03:23:
         3c:e7:c6:75:9c:0a:c9:67:69:17:0a:0a:18:f0:36:99:2f:fc:
         ce:b3:a0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 19 09:39:49 2021 by LibreSSL & rpki-client.