RPKI Certificate
Location: rpki.ripe.net/repository/DEFAULT/RxQMVlw0Jk4uJkUcorI04L-GNWo.cer (download)

Subject key identifier:   47:14:0C:56:5C:34:26:4E:2E:26:45:1C:A2:B2:34:E0:BF:86:35:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1123662/0/47140C565C34264E2E26451CA2B234E0BF86356A.mft
Subordinate resources:
    1: IP: 193.58.104.0/22

--
$ openssl x509 -text -inform DER -in rpki.ripe.net/repository/DEFAULT/RxQMVlw0Jk4uJkUcorI04L-GNWo.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503694427638 (0x75468705f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:02:29 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=47140c565c34264e2e26451ca2b234e0bf86356a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b6:ea:2f:b1:3e:9f:27:28:63:e1:01:da:8d:
                    3d:77:c7:67:6d:bb:9d:7d:5b:ec:a1:52:a1:63:fe:
                    c5:ba:76:8e:3f:38:2b:ad:12:d7:e0:06:d9:c4:f9:
                    52:9c:8b:dc:ba:09:5c:89:2b:f0:98:77:6a:92:19:
                    66:ca:7d:0a:17:e2:d1:2e:ee:79:b9:4b:8d:27:87:
                    10:cd:0e:6f:b5:e4:63:0e:7a:89:05:05:72:17:27:
                    35:52:29:2c:b2:64:34:cc:8f:2a:e2:62:13:b5:0c:
                    9c:1b:f6:9e:13:94:ac:23:9b:2b:44:61:c2:8f:fe:
                    1f:ef:d4:47:7d:5b:24:f3:df:84:3f:25:d7:6b:57:
                    9e:51:e3:e5:3f:52:9d:6a:81:75:8b:b9:46:aa:d7:
                    1c:86:ed:2c:a2:e0:f2:76:87:ee:dd:99:95:1e:3e:
                    15:11:cb:97:f6:1a:7c:61:f3:fa:8c:e3:83:cd:9b:
                    76:42:e3:18:e9:6c:d7:b8:4c:e1:85:5e:c2:51:c1:
                    ae:e3:49:e5:56:c4:90:eb:34:4c:e6:c9:c4:9e:10:
                    fb:05:b2:10:da:83:d7:e8:b8:cf:ce:86:17:6c:35:
                    47:21:d9:87:d1:bd:17:ae:12:a1:f1:e4:00:5a:29:
                    d5:72:71:6d:12:6b:55:d5:96:bd:01:08:b0:5c:fc:
                    da:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123662/0/
                1.3.6.1.5.5.7.48.10 - URI:rsync://nostromo.heficed.net/repo/1123662/0/47140C565C34264E2E26451CA2B234E0BF86356A.mft
                1.3.6.1.5.5.7.48.13 - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                0.0.....0.....:h
    Signature Algorithm: sha256WithRSAEncryption
         64:f2:b3:15:eb:c7:e6:94:8b:8b:f8:e3:fc:d7:7b:bc:58:81:
         3c:7c:fe:87:ab:76:41:55:22:47:4c:79:9e:2d:28:64:4b:27:
         ab:59:69:d4:dc:44:c9:37:23:98:1d:7b:95:b8:e4:c4:be:fe:
         7d:75:95:c5:e7:37:a7:bd:b6:f7:47:3a:f0:60:d7:36:1b:f3:
         9c:70:a9:55:d2:ae:9c:44:71:9c:25:b8:be:d5:83:d5:50:07:
         84:fc:d7:e2:99:41:ee:3c:ba:3a:f3:76:cc:58:e1:3e:62:d6:
         c9:48:7e:b5:d7:fe:b1:34:6e:45:7c:44:a0:cd:4e:f2:02:e4:
         fe:20:57:6a:3f:2d:d6:d6:1c:f8:3d:53:00:1e:2c:a3:a2:c6:
         11:2f:b4:25:2c:f2:34:7d:aa:ce:05:08:8c:83:33:32:79:2b:
         54:98:33:ff:29:8e:95:8f:fa:0e:e2:a1:55:e3:7f:88:e4:2a:
         83:bf:2f:0c:87:2b:44:c4:fb:ae:cb:cb:f8:2f:59:66:36:f6:
         54:d9:6e:de:8b:e3:1b:81:a6:79:20:7d:89:a8:34:7e:d7:d4:
         fd:ee:fc:c1:1a:a5:d9:d5:69:df:d7:f2:ff:22:9e:33:a5:d0:
         d5:35:53:bc:b8:bc:24:83:80:f4:28:f9:9a:fb:5a:c8:b0:ff:
         10:01:83:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Mar 3 04:30:23 2021 by LibreSSL & rpki-client.