RPKI Certificate
Location: rpki.ripe.net/repository/DEFAULT/RGJvYLI2P6FELsGgW0VMPBp4Rcs.cer (download)

Subject key identifier:   44:62:6F:60:B2:36:3F:A1:44:2E:C1:A0:5B:45:4C:3C:1A:78:45:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1123611/0/44626F60B2363FA1442EC1A05B454C3C1A7845CB.mft
Subordinate resources:
    1: IP: 185.130.204.0/22
    2: IP: 2a0a:8600::/29

--
$ openssl x509 -text -inform DER -in rpki.ripe.net/repository/DEFAULT/RGJvYLI2P6FELsGgW0VMPBp4Rcs.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503232541607 (0x752aff33a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:01:04 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=44626f60b2363fa1442ec1a05b454c3c1a7845cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:36:b0:5d:5c:d7:d6:39:12:fc:2d:20:2e:c3:
                    89:24:d7:22:fd:af:a1:68:b8:b9:37:15:3c:00:ef:
                    a2:21:6a:43:a6:43:2f:15:56:65:d9:e7:0d:9f:db:
                    53:99:4d:4a:17:fa:af:2d:26:9d:e4:15:53:89:3d:
                    7b:00:76:07:9e:95:b5:3a:4c:2a:05:74:ac:0e:87:
                    4d:65:d3:78:24:15:05:ce:68:0e:a7:7d:8c:ad:50:
                    fb:84:09:0a:f6:cb:d3:e9:14:30:15:6c:ad:d5:8e:
                    74:00:09:a3:d3:5e:30:ab:75:f8:65:fb:ab:28:80:
                    38:fb:df:b0:24:1e:90:17:3e:23:d7:13:dc:60:67:
                    fd:b6:43:2a:6f:39:f1:97:81:e3:9d:d0:fa:86:d3:
                    8b:19:eb:84:ad:d4:39:c7:1d:33:9f:08:2d:1b:14:
                    08:64:39:12:2f:24:7e:0e:7a:70:70:50:58:fb:78:
                    90:18:eb:5e:ff:e9:23:b8:82:e7:32:74:b6:76:14:
                    c3:7f:45:63:13:1f:33:4d:03:3c:c4:ac:b5:4b:5d:
                    45:0e:86:c9:18:9b:00:64:92:2c:0d:5f:f4:90:f8:
                    e9:1d:05:f4:7e:dd:0f:df:29:9e:02:0c:39:51:f9:
                    7e:97:e8:54:e0:4e:08:5d:19:5c:6a:c0:a3:1b:9d:
                    02:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123611/0/
                1.3.6.1.5.5.7.48.10 - URI:rsync://nostromo.heficed.net/repo/1123611/0/44626F60B2363FA1442EC1A05B454C3C1A7845CB.mft
                1.3.6.1.5.5.7.48.13 - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                0.0.....0.......0
....0....*
..
    Signature Algorithm: sha256WithRSAEncryption
         8f:08:51:ce:76:e3:ce:fc:95:08:db:1a:26:d2:ff:4d:dc:d4:
         0a:99:75:1e:30:03:87:a5:61:3d:9a:31:51:d0:8b:4d:54:9f:
         68:3d:1d:d4:38:62:94:0f:53:14:2b:cd:5d:a7:02:f7:36:df:
         16:fb:ea:be:b1:5e:72:17:6e:7e:4d:02:07:7e:3d:f7:1e:69:
         94:8b:1e:43:95:70:fd:a6:09:49:a6:2f:3b:c4:ce:f2:01:7e:
         ad:4d:a4:48:22:6a:49:7f:d3:69:ca:78:43:03:23:23:01:ba:
         eb:3e:89:9d:55:65:db:88:9f:de:ed:04:8b:23:13:79:3a:aa:
         08:fd:2d:6b:d2:01:2b:da:b5:cf:fe:fa:8d:00:c2:b9:cb:14:
         27:ca:b6:2e:81:8e:c6:67:f0:53:dd:34:ab:74:e1:d8:2f:cd:
         7a:9d:5c:bc:33:0e:a7:43:18:ee:de:e6:ce:e4:b3:59:3d:c3:
         fb:93:d5:33:3f:25:a2:49:b3:44:29:bc:51:d2:0a:f2:a2:25:
         5d:3f:15:fb:f2:4a:e9:0a:12:a5:a0:de:5d:b0:a6:44:bf:1e:
         fb:19:16:ed:15:aa:a1:02:2d:e6:de:f2:6b:57:9f:98:1d:a1:
         ae:69:26:b4:5a:31:51:b7:ff:1e:fe:11:27:19:64:47:f8:3b:
         fd:da:78:b1
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIFdSr/M6cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMDAxMDRaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDQ0NjI2ZjYwYjIz
NjNmYTE0NDJlYzFhMDViNDU0YzNjMWE3ODQ1Y2IwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDZNrBdXNfWORL8LSAuw4kk1yL9r6FouLk3FTwA76IhakOm
Qy8VVmXZ5w2f21OZTUoX+q8tJp3kFVOJPXsAdgeelbU6TCoFdKwOh01l03gkFQXO
aA6nfYytUPuECQr2y9PpFDAVbK3VjnQACaPTXjCrdfhl+6sogDj737AkHpAXPiPX
E9xgZ/22QypvOfGXgeOd0PqG04sZ64St1DnHHTOfCC0bFAhkORIvJH4OenBwUFj7
eJAY617/6SO4gucydLZ2FMN/RWMTHzNNAzzErLVLXUUOhskYmwBkkiwNX/SQ+Okd
BfR+3Q/fKZ4CDDlR+X6X6FTgTghdGVxqwKMbnQL3AgMBAAGjggJfMIICWzAdBgNV
HQ4EFgQURGJvYLI2P6FELsGgW0VMPBp4RcswHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCB
8AYIKwYBBQUHAQsEgeMwgeAwOAYIKwYBBQUHMAWGLHJzeW5jOi8vbm9zdHJvbW8u
aGVmaWNlZC5uZXQvcmVwby8xMTIzNjExLzAvMGQGCCsGAQUFBzAKhlhyc3luYzov
L25vc3Ryb21vLmhlZmljZWQubmV0L3JlcG8vMTEyMzYxMS8wLzQ0NjI2RjYwQjIz
NjNGQTE0NDJFQzFBMDVCNDU0QzNDMUE3ODQ1Q0IubWZ0MD4GCCsGAQUFBzANhjJo
dHRwczovL25vc3Ryb21vLmhlZmljZWQubmV0L3JyZHAvbm90aWZpY2F0aW9uLnht
bDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEw
BgMEArmCzDANBAIAAjAHAwUDKgqGADANBgkqhkiG9w0BAQsFAAOCAQEAjwhRznbj
zvyVCNsaJtL/TdzUCpl1HjADh6VhPZoxUdCLTVSfaD0d1DhilA9TFCvNXacC9zbf
FvvqvrFechdufk0CB3499x5plIseQ5Vw/aYJSaYvO8TO8gF+rU2kSCJqSX/Tacp4
QwMjIwG66z6JnVVl24if3u0EiyMTeTqqCP0ta9IBK9q1z/76jQDCucsUJ8q2LoGO
xmfwU900q3Th2C/Nep1cvDMOp0MY7t7mzuSzWT3D+5PVMz8lokmzRCm8UdIK8qIl
XT8V+/JK6QoSpaDeXbCmRL8e+xkW7RWqoQIt5t7ya1efmB2hrmkmtFoxUbf/Hv4R
JxlkR/g7/dp4sQ==
-----END CERTIFICATE-----

Generated at Wed Mar 3 04:30:18 2021 by LibreSSL & rpki-client.