RPKI Certificate
Location: rpki.ripe.net/repository/DEFAULT/1DLOHXpgl0mORQlgy44us48oE9M.cer (download)

Subject key identifier:   D4:32:CE:1D:7A:60:97:49:8E:45:09:60:CB:8E:2E:B3:8F:28:13:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1123912/0/D432CE1D7A6097498E450960CB8E2EB38F2813D3.mft
Subordinate resources:
    1: IP: 192.109.109.0--192.109.110.255
    2: IP: 192.109.117.0/24
    3: IP: 192.109.119.0/24

--
$ openssl x509 -text -inform DER -in rpki.ripe.net/repository/DEFAULT/1DLOHXpgl0mORQlgy44us48oE9M.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503526162240 (0x753c7f7f40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:02:03 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d432ce1d7a6097498e450960cb8e2eb38f2813d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:09:c6:85:5d:96:40:a4:dc:4e:d4:1d:74:b6:
                    c0:77:0f:d6:6e:db:6d:e5:89:ef:11:b4:49:c8:83:
                    ea:04:ea:9b:f5:2a:18:14:14:5f:ca:8b:d3:1b:7e:
                    43:36:cf:aa:44:11:ff:27:c2:ad:d0:4c:df:5b:f5:
                    a3:6a:2e:48:93:9b:d1:66:3c:52:7b:b3:4a:01:0d:
                    ff:21:a7:dc:85:e6:34:a5:c6:d6:9f:9c:ad:1e:24:
                    93:53:ce:16:59:7b:e2:54:12:8a:ca:f4:da:1f:d3:
                    31:ae:e2:03:4e:dc:40:c5:2c:bb:73:f8:02:d8:ff:
                    62:9e:66:c5:6f:36:8a:d1:6b:2d:93:97:92:cd:2d:
                    5f:60:a6:de:0d:75:4b:fd:ec:83:cf:59:d9:0b:84:
                    69:9b:90:97:24:4c:27:09:9d:74:6a:d7:b3:ba:1b:
                    3e:6e:19:27:eb:19:76:b0:65:77:5b:61:84:eb:4a:
                    61:31:c0:ca:ef:65:cc:86:0a:56:a6:1e:5b:9d:87:
                    50:e1:cd:c6:b4:70:bf:f2:5d:de:04:59:54:56:63:
                    d1:5b:cb:b3:13:ac:a8:1d:a3:8a:c6:aa:8e:8a:6c:
                    56:54:d0:cf:7f:9c:89:41:9b:6c:9b:e1:d3:50:02:
                    af:64:c2:b4:b1:6a:5f:e2:98:24:00:14:65:ac:3f:
                    88:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123912/0/
                1.3.6.1.5.5.7.48.10 - URI:rsync://nostromo.heficed.net/repo/1123912/0/D432CE1D7A6097498E450960CB8E2EB38F2813D3.mft
                1.3.6.1.5.5.7.48.13 - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                0"0 ....0.0.....mm....mn....mu....mw
    Signature Algorithm: sha256WithRSAEncryption
         17:d0:35:ef:16:6e:66:a0:fb:42:ea:e0:30:8d:fc:dd:5d:16:
         2e:f9:a9:20:af:88:1d:66:e8:36:a8:ee:a9:5a:f2:9b:4e:c0:
         1f:f8:f3:59:1f:75:8b:94:aa:51:70:06:04:1b:62:b8:c4:a9:
         7e:57:f8:71:5f:b3:e2:bc:3d:27:7d:a9:36:0b:8c:f4:9f:8d:
         03:e2:98:9f:69:e3:b0:64:4a:7b:34:8b:03:81:d2:90:91:14:
         23:b1:e9:0d:1c:30:ae:87:0b:1f:82:8b:ca:2e:64:b9:d1:48:
         28:a2:b4:77:0d:30:ce:cb:6a:5d:4f:44:76:1c:e6:dd:50:92:
         be:ab:b8:b4:bc:af:1c:59:90:31:17:69:d3:df:d4:7a:c6:df:
         ad:81:c8:eb:4b:ee:dd:ac:67:b2:28:23:9f:41:d0:f9:5d:8a:
         e9:08:9c:69:60:76:70:34:48:31:2b:b2:cd:0e:48:12:be:42:
         c2:b8:84:25:09:f5:3a:59:fa:f5:cb:0f:28:f6:c0:48:51:70:
         60:ae:2e:9b:bb:94:f5:37:31:1a:ef:4b:b5:fc:21:95:6a:3d:
         96:dc:fc:6c:5d:0f:db:e5:26:17:ec:1f:c3:01:8d:be:bc:52:
         65:a5:41:93:54:ad:8a:2c:1c:f2:d3:cb:1e:0a:95:63:3f:7f:
         3b:b4:ac:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Mar 3 04:07:51 2021 by LibreSSL & rpki-client.