RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer (download)

Subject key identifier:   CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: IP: 45.91.254.0/23
    2: IP: 193.57.172.0/24
    3: IP: 2a11:5ec0::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 699294745138 (0xa2d1370232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:59:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:18:ed:2d:80:06:ea:cd:4d:c1:96:f0:70:30:
                    af:4c:68:a6:8d:8a:b3:1d:88:5c:31:de:c0:b1:24:
                    dd:5a:3c:03:eb:65:82:9b:ee:5d:2b:0b:68:7d:df:
                    ed:86:ec:01:96:82:b9:e1:71:7b:f9:34:fd:0a:80:
                    3b:32:fc:f2:01:3a:d0:59:93:c9:70:f9:0b:98:69:
                    d9:ae:70:b7:c9:c3:d0:3a:d8:4e:0e:ce:6b:c2:52:
                    88:ad:68:d1:76:51:6a:f3:ab:34:a6:01:66:47:81:
                    66:5f:12:b0:7b:c1:b3:fe:68:a4:77:97:68:e2:33:
                    9e:36:1e:48:8d:ac:46:3a:e3:38:5f:89:cf:02:68:
                    d2:c3:36:3e:bd:fc:12:16:4d:0e:72:f2:70:7a:ee:
                    6c:28:30:4c:1e:6e:78:c5:b7:0e:f2:9f:1f:b7:7e:
                    7b:0f:62:86:e1:38:9b:69:eb:4b:dc:73:3b:c8:ad:
                    0d:54:20:f2:94:70:cf:16:68:a1:1d:18:c9:43:b6:
                    bc:b8:db:99:43:91:9f:5a:7a:35:00:f3:ff:e6:b5:
                    36:80:c0:d9:93:00:fd:10:64:30:85:f3:ca:e9:e7:
                    54:b4:7f:aa:48:4a:08:f9:3e:eb:6f:a2:bf:7e:65:
                    b6:87:13:97:b4:d3:66:40:01:ba:2a:39:c8:be:1e:
                    6c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.91.254.0/23
                  193.57.172.0/24
                IPv6:
                  2a11:5ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:53:db:76:67:91:c5:73:4f:ca:48:d8:e3:29:e7:a2:e7:9a:
         d9:43:2e:f5:f5:43:68:1e:6c:c8:0d:94:2e:89:41:0f:8a:e3:
         e5:51:c4:f9:79:56:01:27:f0:b5:5e:01:75:ca:45:fd:c9:01:
         b3:87:ef:fc:fe:35:b0:49:2b:2a:2d:86:1c:39:29:01:60:7f:
         c2:4a:85:25:bf:b0:f8:cc:2c:21:8e:76:10:ef:ca:d9:0d:fb:
         13:b4:2c:e1:64:a3:73:c7:ab:f5:9f:45:85:e4:e4:fc:79:71:
         8f:2e:b9:0c:b2:04:c8:5a:0a:93:11:64:26:b8:4f:25:90:05:
         1c:c5:03:ab:05:6a:55:5a:ea:6b:46:62:f7:de:f6:55:4a:26:
         68:24:37:4d:d1:09:0c:6a:23:cf:80:27:61:1b:61:24:f1:af:
         66:23:ec:6d:7d:8c:72:96:cc:f1:8b:88:c5:5b:69:7d:d0:9c:
         bc:21:81:50:89:5b:c1:ce:de:b0:45:b5:25:68:5d:49:3d:9e:
         72:2c:f9:f8:5d:16:59:2f:a3:0d:53:9c:dc:29:be:80:0a:d1:
         d4:ad:0b:d7:46:08:1a:2f:bd:0d:a4:61:c5:f7:07:2d:9a:90:
         44:45:e3:16:47:68:f8:14:f4:96:50:ef:ec:e4:4f:e2:fb:99:
         9f:d5:bf:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 11:55:34 2022 by LibreSSL & rpki-client.