RPKI Certificate
Location: rpki.ripe.net/repository/DEFAULT/_J16c0kQoGJgRwYqhXz3RrQLo-M.cer (download)

Subject key identifier:   FC:9D:7A:73:49:10:A0:62:60:47:06:2A:85:7C:F7:46:B4:0B:A3:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1123892/0/FC9D7A734910A0626047062A857CF746B40BA3E3.mft
Subordinate resources:
    1: IP: 193.148.255.0/24
    2: IP: 193.149.225.0/24
    3: IP: 193.150.120.0/24
    4: IP: 193.150.168.0/24

--
$ openssl x509 -text -inform DER -in rpki.ripe.net/repository/DEFAULT/_J16c0kQoGJgRwYqhXz3RrQLo-M.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503791249138 (0x754c4c66f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:02:45 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=fc9d7a734910a0626047062a857cf746b40ba3e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:de:c2:f1:bd:15:52:43:c9:de:8b:bf:32:f0:
                    35:ea:e7:d9:c0:e6:77:75:ee:8c:36:6e:78:53:75:
                    64:98:d7:4f:66:fb:cf:2f:30:5a:d9:47:a5:13:97:
                    7d:3c:16:44:78:c4:bd:3a:cf:0b:2a:31:f7:6c:4a:
                    5d:f7:b3:a2:80:cf:6b:0b:ab:04:1f:a5:ea:ba:41:
                    b7:26:b2:8d:f0:cd:46:cc:33:58:f8:9b:90:13:70:
                    8d:6d:ee:c7:d1:2c:f3:44:93:e8:2e:a7:d6:d7:3b:
                    59:c9:3c:c5:be:1b:e9:1b:23:31:82:a3:60:15:eb:
                    ec:a6:85:2f:dc:1b:86:2a:8a:02:3f:7c:89:8b:71:
                    6e:d2:8e:0e:cd:de:f4:d9:07:8b:da:be:3e:57:6e:
                    f7:83:c0:cf:c2:09:9a:fa:c1:4e:56:e6:2b:e2:ec:
                    7b:69:c3:a4:b7:45:4d:bd:19:63:cb:4c:eb:0d:86:
                    a2:c4:82:51:1e:89:a1:f3:07:ee:21:4d:28:f9:e0:
                    0d:81:c7:4e:a6:5e:ea:c7:8f:e8:98:24:d7:9d:ca:
                    03:32:38:6b:46:0a:cb:3a:a8:c1:63:b7:5e:5b:3a:
                    f0:d7:3b:2e:5c:31:06:0e:55:d9:5e:05:72:da:c9:
                    af:a9:43:96:9b:0e:be:11:d1:40:87:4d:fa:34:ed:
                    8f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123892/0/
                1.3.6.1.5.5.7.48.10 - URI:rsync://nostromo.heficed.net/repo/1123892/0/FC9D7A734910A0626047062A857CF746B40BA3E3.mft
                1.3.6.1.5.5.7.48.13 - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                0 0.....0..................x......
    Signature Algorithm: sha256WithRSAEncryption
         5a:6a:17:8e:96:ba:3d:2b:74:a6:76:dd:ce:53:76:77:6d:03:
         e4:4e:8b:6c:26:fc:da:38:5c:c0:b5:79:6c:84:ff:21:47:31:
         c8:54:4e:29:89:53:6b:83:56:98:47:85:e3:be:a7:f7:42:8f:
         e0:b8:b2:13:85:2b:b2:a7:ab:96:b8:a8:54:14:77:f8:f2:7c:
         00:f9:0b:9a:ae:43:f1:e3:c4:89:64:40:ff:45:ec:df:49:a1:
         31:d6:7f:46:a6:8e:ae:17:1e:a2:ef:f7:68:e3:1c:12:16:fa:
         1c:42:2e:f1:93:ba:97:7b:8d:7c:cc:4c:22:bc:f8:cc:8d:02:
         00:25:ad:63:08:ed:02:b7:56:83:78:c0:27:0e:ce:86:30:b2:
         88:4e:9b:3d:74:5c:1e:25:db:7d:24:8e:a1:ea:77:61:4e:51:
         f0:0a:6f:39:06:28:d9:06:97:d7:7f:ad:24:f5:30:f7:a0:01:
         a2:08:6f:26:c4:93:bd:65:b0:59:56:71:c5:a0:2a:7c:dd:95:
         46:fe:55:21:59:22:a1:f4:7f:31:43:80:91:aa:04:d5:35:3f:
         43:54:c7:6c:9e:56:02:de:0e:f9:05:42:46:0a:7e:5b:8a:1a:
         11:fc:51:b2:2c:5f:5e:cc:82:b8:8c:4c:7a:2c:5b:b3:ee:5b:
         a1:95:52:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Mar 3 04:31:26 2021 by LibreSSL & rpki-client.