RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer (download)

Subject key identifier:   C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: AS: 29283
    1: IP: 85.184.64.0/19
    2: IP: 89.33.144.0/21
    3: IP: 94.199.120.0/21
    4: IP: 185.6.60.0/22
    5: IP: 213.174.96.0/19
    6: IP: 2a02:6c40::/32

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567065765917 (0x8407c0e81d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:35:27 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:64:69:03:21:7c:87:d3:3c:f1:31:4c:67:6c:
                    17:dc:de:d3:2f:16:d3:74:4a:c3:a6:28:a7:35:5a:
                    87:07:5e:bf:c1:b4:76:bd:2b:32:77:35:ec:84:1a:
                    8d:bd:2b:fd:d8:bb:94:db:e2:91:66:77:77:3e:0a:
                    e0:e5:b1:ef:0a:84:93:43:bd:5f:b7:b4:83:29:7e:
                    eb:01:20:f8:56:12:03:12:00:b9:2f:b1:e7:50:b8:
                    2a:51:1a:19:ad:dd:fe:a0:9e:cc:be:eb:eb:0a:34:
                    76:90:6f:7c:e3:2d:e3:9c:c7:61:ac:a7:cd:90:68:
                    4b:d4:2f:62:5d:7a:90:bc:87:98:aa:75:23:4c:ee:
                    c0:ec:2e:ed:7b:61:68:7b:5f:27:35:22:37:b2:c3:
                    06:93:64:87:19:da:a2:2f:9a:e3:7e:5b:dc:a3:ab:
                    38:7f:fd:68:a6:da:97:aa:b6:d0:b4:2a:1c:6a:25:
                    46:5b:89:ae:32:56:1e:22:8b:4f:f9:61:d3:7c:fb:
                    83:d0:51:61:ad:b2:47:c8:ec:dc:3c:f2:2a:20:9c:
                    38:5a:75:12:5a:fa:34:91:4a:df:ec:ea:7b:d3:7e:
                    04:70:14:59:a4:84:2a:e0:92:ea:08:db:4c:84:86:
                    d1:31:58:d2:fd:d6:af:b2:e3:83:40:f6:1c:f8:ba:
                    8d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                050$....0....U.@...Y!....^.x.....<.....`0
....0....*.l@
            sbgp-autonomousSysNum: critical
                0...0...rc
    Signature Algorithm: sha256WithRSAEncryption
         9a:03:da:03:39:a1:f7:72:d0:d0:eb:ef:68:be:2e:e2:4e:f6:
         09:c1:09:04:3e:78:72:6b:c0:d9:b6:17:49:28:da:8e:7a:a7:
         0b:54:8f:43:33:55:91:28:c7:17:41:0c:d1:f5:d6:63:50:3b:
         46:4e:b0:59:0a:3b:47:ed:60:58:b7:8f:46:fa:8b:9b:9d:2f:
         09:55:97:58:f5:3a:0c:05:a7:29:11:fa:36:76:b9:f2:de:4a:
         fc:c3:b7:ec:5c:d6:f0:33:b1:04:9c:82:7a:5c:16:7a:24:b2:
         a7:1e:56:1a:27:de:b6:04:c1:27:9e:21:d6:08:13:25:d7:df:
         c7:99:af:9b:a6:e3:3f:df:b7:cc:5e:47:7f:b0:89:b8:1b:4e:
         ee:7d:07:69:95:35:88:6f:58:2b:17:99:c3:3b:e2:cb:aa:13:
         9c:86:5d:51:23:3b:3c:fc:09:b6:b4:b3:e9:70:6b:c1:0d:e3:
         72:4c:53:a5:75:03:b8:29:4c:05:de:7d:04:f2:e9:72:9b:41:
         9c:c3:c1:75:6e:04:2a:6d:46:93:53:0e:df:aa:9e:06:e6:a4:
         84:25:8a:4f:0e:4c:41:08:5a:f7:37:e8:f9:5e:70:8b:69:f0:
         0e:da:dc:a4:ac:72:8a:e4:9b:ce:dc:22:d7:7d:d0:79:3c:64:
         2b:52:b0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jul 27 22:34:13 2021 by LibreSSL & rpki-client.