RPKI Certificate
Location: rpki.ripe.net/repository/DEFAULT/4N17DFaVDxHIzkhZ94fO0UNB4pQ.cer (download)

Subject key identifier:   E0:DD:7B:0C:56:95:0F:11:C8:CE:48:59:F7:87:CE:D1:43:41:E2:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/635323/0/E0DD7B0C56950F11C8CE4859F787CED14341E294.mft
Subordinate resources:
    1: IP: 5.252.80.0/22

--
$ openssl x509 -text -inform DER -in rpki.ripe.net/repository/DEFAULT/4N17DFaVDxHIzkhZ94fO0UNB4pQ.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503056862610 (0x7520868d92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:00:23 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e0dd7b0c56950f11c8ce4859f787ced14341e294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:10:42:ec:39:54:0c:b7:2a:e7:61:85:d6:89:
                    23:30:d5:40:40:e1:57:2e:a9:cc:f2:9e:31:a8:fd:
                    3e:be:3a:0c:2f:0e:bf:26:5d:0f:00:d3:ea:e1:3f:
                    f6:f0:fd:b5:81:f7:ab:76:e1:15:38:f9:4b:27:8f:
                    a9:6f:ac:77:46:8d:a5:49:11:1c:68:d2:4c:22:fd:
                    f0:05:fa:f1:bd:59:a3:2b:99:21:a1:59:10:e0:32:
                    4e:4a:65:8a:a7:b6:81:95:bd:f7:fc:80:59:23:d0:
                    ed:9b:3e:92:e7:a6:76:07:f8:8a:cb:39:af:cf:38:
                    c7:b5:b7:e3:86:cc:5f:aa:5e:53:ec:57:cc:8a:10:
                    e5:c2:4e:f5:d1:d2:96:b2:60:79:d9:17:fd:12:b6:
                    c6:23:5b:fd:1b:f9:ec:f7:9c:f3:31:4a:64:a7:c1:
                    ce:02:40:a9:9f:8c:fd:55:34:f6:fe:35:dd:3b:ce:
                    c0:e3:91:48:94:a9:5a:0d:62:25:a3:7f:1c:37:70:
                    e5:6d:87:2e:cd:73:03:ef:92:f6:af:3e:92:45:23:
                    6a:57:31:7b:bf:58:c6:e9:d2:ad:f1:61:c0:94:5a:
                    02:37:c8:60:5d:da:8d:a4:6e:bd:d5:57:70:a3:9c:
                    75:c5:b0:8b:62:26:6b:fd:09:49:1d:c3:5c:2f:66:
                    b9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/635323/0/
                1.3.6.1.5.5.7.48.10 - URI:rsync://nostromo.heficed.net/repo/635323/0/E0DD7B0C56950F11C8CE4859F787CED14341E294.mft
                1.3.6.1.5.5.7.48.13 - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                0.0.....0......P
    Signature Algorithm: sha256WithRSAEncryption
         a4:99:cf:8f:03:3d:de:55:60:61:31:40:b1:06:96:4b:35:c2:
         e0:43:1a:cf:1b:53:4b:eb:27:a9:fd:99:7c:a8:de:01:ae:e4:
         fe:fd:31:22:66:15:50:70:6f:81:05:56:22:5a:87:7d:e3:3b:
         8d:1c:50:d1:4a:fa:db:49:a3:b2:4e:6e:26:5a:29:cc:8e:7d:
         d5:cb:fe:90:e1:7c:f0:97:95:d7:60:3d:e4:eb:a9:40:10:ad:
         05:0a:c0:1a:b3:0c:9d:91:7a:d0:f5:37:e7:03:e5:4a:25:59:
         d5:f8:ae:a3:59:2c:cd:5d:c0:4c:4b:f8:46:1a:56:83:95:0d:
         51:30:12:8f:7f:d0:5d:a6:f6:5c:9f:8f:4a:fd:1d:95:f6:a8:
         57:aa:fa:74:2f:53:44:af:28:71:89:88:1c:e7:e3:03:e0:54:
         90:73:15:30:25:c7:ca:65:d8:35:8d:f2:17:8c:a1:90:78:ee:
         08:95:51:5b:70:3a:94:9e:51:40:17:4d:1c:cb:32:03:f4:39:
         62:81:4c:21:64:24:04:5c:b9:9c:62:46:15:dc:74:65:15:20:
         49:f1:80:a5:07:85:3f:44:de:0f:31:f0:b4:78:e7:16:a4:1e:
         91:b3:47:6e:33:ca:19:20:73:bc:3f:1d:33:30:9c:8f:fb:12:
         52:1d:ad:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Mar 3 04:22:15 2021 by LibreSSL & rpki-client.