RPKI Certificate
Location: rpki.ripe.net/repository/DEFAULT/PxOVxR3tOrDXiaipPhq3Yl3OUv0.cer (download)

Subject key identifier:   3F:13:95:C5:1D:ED:3A:B0:D7:89:A8:A9:3E:1A:B7:62:5D:CE:52:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1123881/0/3F1395C51DED3AB0D789A8A93E1AB7625DCE52FD.mft
Subordinate resources:
    1: AS: 213074
    1: IP: 45.137.116.0/22

--
$ openssl x509 -text -inform DER -in rpki.ripe.net/repository/DEFAULT/PxOVxR3tOrDXiaipPhq3Yl3OUv0.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503241501932 (0x752b87ecec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:01:06 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=3f1395c51ded3ab0d789a8a93e1ab7625dce52fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cf:cf:b0:fb:df:02:40:2e:ea:d0:72:15:d5:
                    c8:53:d0:b2:5d:d9:26:e2:e6:c7:91:10:11:1b:e6:
                    19:ab:ae:a4:b7:81:94:7c:cd:b9:c8:6c:9e:5c:07:
                    9a:70:4e:b4:7b:90:77:14:ee:1c:a6:db:cc:1f:1a:
                    09:41:42:a0:dc:d8:0f:07:c3:24:ff:5d:e2:39:c1:
                    20:37:34:b2:bc:d6:7d:96:ee:d5:03:d4:f3:08:a0:
                    53:ba:dd:de:ec:e9:ac:a9:30:27:88:f6:e5:a8:f0:
                    85:84:51:44:58:cb:e7:1e:69:b2:67:53:1f:1c:73:
                    1f:21:1d:c8:c1:9f:fd:ef:e4:72:6f:fb:60:b1:87:
                    04:40:9e:b8:1d:41:ce:6c:ec:82:77:1e:3b:45:57:
                    67:66:5f:df:92:c4:58:87:57:0d:e4:5e:ba:ff:65:
                    14:7a:18:d9:68:3a:42:07:63:be:19:d0:a8:7f:3b:
                    66:5f:d8:3e:3d:bf:98:30:b8:4e:24:56:7e:6e:a7:
                    df:14:50:69:ab:f2:cb:bb:50:c4:ba:63:ff:3d:83:
                    1b:66:a9:ec:52:81:b6:db:77:37:0b:e3:dc:5d:83:
                    38:fc:84:93:08:34:12:df:a0:b2:fa:6c:3e:b8:ad:
                    6d:93:69:61:75:3f:de:57:f0:5c:7e:f9:16:46:85:
                    32:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123881/0/
                1.3.6.1.5.5.7.48.10 - URI:rsync://nostromo.heficed.net/repo/1123881/0/3F1395C51DED3AB0D789A8A93E1AB7625DCE52FD.mft
                1.3.6.1.5.5.7.48.13 - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                0.0.....0....-.t
            sbgp-autonomousSysNum: critical
                0...0....@R
    Signature Algorithm: sha256WithRSAEncryption
         76:2e:00:fc:a2:04:21:dc:31:3b:aa:bb:6f:8f:91:8b:3b:c7:
         b9:77:39:54:b0:32:de:b4:02:4b:57:ca:79:51:1e:ad:ad:5b:
         5d:91:1e:61:21:86:9e:6a:fe:6c:1d:97:b5:87:16:c9:ff:a4:
         05:fd:3e:cb:0a:82:6d:e2:61:4f:c7:68:ec:99:40:1b:87:ff:
         94:f0:29:e7:16:74:93:85:2f:67:2b:ae:ca:d9:0a:39:f1:87:
         a0:4f:50:85:90:ed:e2:1d:1a:a8:38:45:4b:4c:4e:81:0f:31:
         a3:73:93:b9:ac:43:e6:c4:74:d8:97:e7:09:4e:d8:f9:0d:1b:
         d3:66:36:ce:d3:e8:b6:45:92:49:b3:51:6f:39:60:38:ea:29:
         01:8e:f6:46:a1:42:19:38:28:4f:12:d0:d5:7d:5e:31:16:fa:
         30:59:5b:1e:3f:55:84:4f:de:85:1f:33:88:9b:b4:db:8d:15:
         06:f4:fb:45:ba:97:29:fa:9f:4c:a5:5f:53:da:0f:e7:28:20:
         ec:02:7c:d2:de:84:97:04:d8:43:2d:6f:00:09:83:bf:76:83:
         0a:3e:61:9e:0d:92:e9:7c:bb:a6:69:6b:01:e2:16:41:23:5f:
         b6:bd:47:73:e1:6a:55:03:4d:f9:06:04:f4:f7:e5:e1:34:85:
         ca:b4:4b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Mar 3 04:30:09 2021 by LibreSSL & rpki-client.