RPKI Certificate
Location: rpki.ripe.net/repository/DEFAULT/EHHP-hMkVmCIv2fg4DUdw5vwi44.cer (download)

Subject key identifier:   10:71:CF:FA:13:24:56:60:88:BF:67:E0:E0:35:1D:C3:9B:F0:8B:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1123801/0/1071CFFA1324566088BF67E0E0351DC39BF08B8E.mft
Subordinate resources:
    1: IP: 5.181.124.0/22

--
$ openssl x509 -text -inform DER -in rpki.ripe.net/repository/DEFAULT/EHHP-hMkVmCIv2fg4DUdw5vwi44.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503668575181 (0x7544fc8bcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:02:24 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=1071cffa1324566088bf67e0e0351dc39bf08b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ac:27:45:76:89:d5:cc:96:fb:ea:2d:5a:a7:
                    e3:4d:1d:59:6c:49:15:4b:dd:e5:98:87:5c:f3:89:
                    ce:d3:85:f6:05:94:cb:d8:6d:ec:67:67:e2:90:30:
                    6c:64:df:a3:0f:c4:82:82:eb:f1:69:87:61:33:d3:
                    68:7d:09:a7:5b:ec:a5:49:1a:13:20:28:9c:62:f9:
                    33:0a:82:d5:02:ca:7c:7d:6f:da:5b:6e:58:a7:34:
                    c6:3f:37:fc:a4:28:1e:23:6a:3e:af:e3:20:16:81:
                    d8:37:29:f5:e8:89:6b:55:05:60:94:d3:06:df:f8:
                    c5:30:9b:46:24:26:49:f8:5f:b4:b6:a1:d9:51:be:
                    8b:76:ab:54:58:73:89:94:7e:bf:43:55:12:d2:d9:
                    4d:2e:48:b1:8a:a9:b3:50:a9:05:42:1b:77:5b:d2:
                    8a:5d:8e:04:ef:ca:4e:99:d0:90:55:d2:04:f7:08:
                    ed:c2:8a:c1:45:79:f8:2c:9d:58:7f:42:88:a4:6f:
                    f7:08:e3:6c:ff:38:43:21:2f:6c:ea:25:2d:07:db:
                    08:b7:fb:80:c0:81:73:19:62:ef:db:88:7c:3e:3d:
                    aa:06:82:a7:ab:43:f4:25:54:ff:94:44:a5:0b:a4:
                    5f:e8:13:17:dd:73:f1:3c:db:4e:87:35:98:a0:04:
                    c6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123801/0/
                1.3.6.1.5.5.7.48.10 - URI:rsync://nostromo.heficed.net/repo/1123801/0/1071CFFA1324566088BF67E0E0351DC39BF08B8E.mft
                1.3.6.1.5.5.7.48.13 - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                0.0.....0......|
    Signature Algorithm: sha256WithRSAEncryption
         26:10:7b:02:cd:91:81:5d:3b:78:a5:0a:24:dd:23:48:40:6e:
         b7:60:5b:85:b1:ca:27:e7:54:d8:46:2b:2f:b1:47:aa:1a:31:
         9b:d3:49:74:49:f3:9e:71:bc:69:55:6e:dd:5c:7b:59:cd:46:
         fa:28:f1:03:72:3e:3a:b7:08:6e:b9:22:3f:d8:2e:85:c7:59:
         d8:ef:3c:36:63:d1:c9:82:de:9e:85:8a:e4:a4:94:9f:2e:a2:
         83:80:5e:35:9e:69:4e:f4:63:13:0c:5c:70:37:f6:17:51:98:
         47:f8:0f:8b:3e:03:15:61:c6:be:c4:d8:05:dd:c0:81:5f:98:
         30:64:78:f3:44:47:9b:43:8e:65:7d:89:1d:7b:35:97:f8:3d:
         82:87:c7:d0:ef:60:6b:ab:df:8b:38:bb:6d:11:04:e1:ad:10:
         39:3d:9b:23:98:e4:36:20:ab:8d:47:94:c2:23:26:d3:9f:94:
         52:92:bd:32:85:bd:c2:94:f5:33:c1:6a:db:97:3b:31:e7:59:
         d3:4c:81:03:73:eb:8d:f0:a4:4a:7e:54:33:c0:d3:ac:a8:9e:
         18:3d:54:06:65:3e:04:6f:8d:e0:e1:2f:bb:0a:af:0a:26:84:
         d7:e0:b7:bd:8f:93:1e:58:36:0a:0c:9b:0d:2f:01:e8:1d:59:
         67:98:f3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Mar 3 04:28:41 2021 by LibreSSL & rpki-client.