RPKI Certificate
Location: rpki.ripe.net/repository/DEFAULT/jj9sdxAi6AA_VD9yBH3RmmrwV6M.cer (download)

Subject key identifier:   8E:3F:6C:77:10:22:E8:00:3F:54:3F:72:04:7D:D1:9A:6A:F0:57:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1123761/0/8E3F6C771022E8003F543F72047DD19A6AF057A3.mft
Subordinate resources:
    1: IP: 185.135.8.0/22
    2: IP: 2a0a:7a00::/29

--
$ openssl x509 -text -inform DER -in rpki.ripe.net/repository/DEFAULT/jj9sdxAi6AA_VD9yBH3RmmrwV6M.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503071227989 (0x752161c055)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:00:28 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=8e3f6c771022e8003f543f72047dd19a6af057a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6c:2e:60:6d:ba:30:28:29:e8:9a:7d:ba:85:
                    c0:35:ad:a8:d6:aa:8a:71:9d:58:a5:81:2b:95:80:
                    de:48:60:c4:9a:49:33:66:76:2f:7e:af:bf:4a:36:
                    63:4a:8c:95:ea:7b:f5:a3:17:d5:ae:be:f8:ed:4f:
                    54:28:f6:ff:86:16:b0:48:47:64:37:22:3e:11:6a:
                    b8:09:1d:da:08:39:9a:77:b8:ad:e5:88:b1:a2:01:
                    ec:a7:cc:10:c3:d4:f4:d5:47:30:9e:9d:69:f3:6f:
                    b1:5a:1c:81:32:8d:16:1f:07:20:d7:15:4f:b5:fd:
                    9c:12:90:83:41:6d:11:5f:b9:55:f4:89:a3:eb:dd:
                    7f:1c:f7:16:56:11:fa:ef:ed:3c:6e:14:09:71:ef:
                    88:05:48:f9:57:4c:d4:be:04:cb:70:56:bd:87:28:
                    af:37:cd:8c:c6:d7:bc:9e:d0:83:b7:9b:5a:3d:09:
                    f4:f6:13:4f:3c:e9:c5:59:ab:cb:3a:56:ed:26:1b:
                    6b:ba:fc:a9:7b:28:b4:b2:f7:48:0a:5c:4f:d2:e2:
                    64:02:2d:12:84:e5:54:20:80:35:01:47:ae:e2:15:
                    02:5a:00:cd:e2:39:0a:8c:4d:ad:83:26:67:a6:aa:
                    46:87:b1:ab:29:d1:95:67:38:d6:49:9e:e4:d6:80:
                    28:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123761/0/
                1.3.6.1.5.5.7.48.10 - URI:rsync://nostromo.heficed.net/repo/1123761/0/8E3F6C771022E8003F543F72047DD19A6AF057A3.mft
                1.3.6.1.5.5.7.48.13 - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                0.0.....0.......0
....0....*
z.
    Signature Algorithm: sha256WithRSAEncryption
         5b:72:87:f7:99:40:48:c8:37:2d:d4:b6:ed:18:69:ce:18:ee:
         ca:86:b9:36:e6:b0:da:fd:40:cb:d7:db:d6:ed:3d:8d:9c:c8:
         df:a5:19:bd:bd:15:39:a1:eb:cf:a0:8a:44:98:c1:89:8f:f2:
         09:75:ed:57:4a:20:fc:a2:03:f9:f4:76:31:29:c4:04:86:cf:
         57:8e:d1:6b:7a:71:8e:0b:90:d7:b8:cb:20:dd:aa:3d:dc:16:
         24:d4:89:42:c4:31:a1:f0:3c:2e:a6:36:2b:9f:4d:81:e5:34:
         f2:5b:d9:e6:06:d7:6c:5a:21:e5:64:1c:0e:e3:e7:db:69:3c:
         c9:8b:44:a0:c9:35:27:99:e0:4e:bd:26:4d:b6:8b:4e:48:6d:
         e8:c0:98:bc:b8:d7:af:38:72:67:ee:57:74:97:2d:2f:c6:81:
         1a:ef:0f:49:a4:40:38:72:f7:ca:ff:8e:38:d7:c4:77:49:5b:
         b6:42:28:26:32:26:b0:58:12:35:b8:2e:72:2f:0e:c9:36:58:
         00:09:f8:be:1e:c6:46:fd:b5:e5:01:43:ee:35:68:be:0a:75:
         80:f5:28:30:e5:86:9a:19:15:ad:f0:0b:cd:b9:2e:80:93:2d:
         46:01:03:06:60:68:94:3a:fd:01:9f:68:0f:d3:51:a8:2c:b2:
         ba:c7:88:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Mar 3 04:32:41 2021 by LibreSSL & rpki-client.