RPKI Certificate
Location: rpki.ripe.net/repository/DEFAULT/ju36vvr_Jcge__yr6eVLD9MmV7M.cer (download)

Subject key identifier:   8E:ED:FA:BE:FA:FF:25:C8:1E:FF:FC:AB:E9:E5:4B:0F:D3:26:57:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1123882/0/8EEDFABEFAFF25C81EFFFCABE9E54B0FD32657B3.mft
Subordinate resources:
    1: IP: 193.227.122.0/24
    2: IP: 193.227.125.0/24
    3: IP: 193.227.129.0/24
    4: IP: 193.227.135.0/24

--
$ openssl x509 -text -inform DER -in rpki.ripe.net/repository/DEFAULT/ju36vvr_Jcge__yr6eVLD9MmV7M.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503188012179 (0x752857bc93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:00:50 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=8eedfabefaff25c81efffcabe9e54b0fd32657b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:61:df:99:1f:67:c0:8f:cd:0d:a3:f1:db:b5:
                    8d:56:6d:03:1e:df:12:6d:ea:d3:71:77:09:d7:54:
                    14:55:32:a9:fb:02:6d:e5:10:8b:6d:4c:49:c3:64:
                    b5:ac:2f:04:9c:4a:41:05:41:ad:83:50:8b:dd:11:
                    79:61:cc:7c:51:ac:eb:04:c4:ac:fe:76:05:df:be:
                    37:e4:0b:ab:03:35:43:18:08:0c:3d:96:37:55:1d:
                    16:b1:61:69:68:27:76:0e:28:19:58:fc:34:8f:27:
                    2b:9d:db:d8:04:94:80:84:34:b7:9d:4a:3f:58:31:
                    44:9e:5b:b8:b7:b9:0e:c8:96:bc:2f:bf:38:81:b2:
                    59:9a:b5:17:11:09:02:8d:51:23:b6:59:57:79:20:
                    88:9e:af:fb:c3:42:e6:94:77:97:48:e5:56:b3:64:
                    1d:fc:b5:44:f5:c5:75:a8:32:61:22:4f:54:99:24:
                    bf:09:0f:4e:f6:9b:01:02:91:6f:ec:e0:6d:83:0f:
                    8d:3e:7d:37:2d:70:b2:6a:53:6a:e3:00:c0:c7:52:
                    92:d2:68:a0:67:41:77:64:04:93:c3:55:1e:6a:60:
                    49:eb:bf:3b:aa:fa:4f:3c:0e:98:91:63:89:e3:af:
                    30:64:77:4f:c3:f3:09:fa:18:70:e5:85:c3:40:6f:
                    ea:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123882/0/
                1.3.6.1.5.5.7.48.10 - URI:rsync://nostromo.heficed.net/repo/1123882/0/8EEDFABEFAFF25C81EFFFCABE9E54B0FD32657B3.mft
                1.3.6.1.5.5.7.48.13 - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                0 0.....0......z.....}............
    Signature Algorithm: sha256WithRSAEncryption
         1a:32:c7:12:2f:fc:b8:4a:1c:58:f5:0e:52:ba:20:76:1d:62:
         7e:6c:ed:65:64:da:a0:34:7d:56:e2:83:98:f4:c7:ab:df:aa:
         4b:e1:a1:72:a9:ca:22:ec:3d:58:3b:74:23:90:4f:ce:b8:06:
         27:d2:57:34:13:b8:36:e6:3c:85:d6:ba:54:de:a2:7c:b8:e1:
         2c:fa:7c:29:80:c5:3f:29:81:16:5c:e2:35:a7:ef:fa:40:42:
         53:67:94:f4:08:e6:a6:26:1e:4a:01:dc:61:f0:67:c5:f8:73:
         be:96:ea:b0:03:82:14:21:09:f6:ec:0b:f5:ea:7c:db:d6:55:
         b6:c6:65:79:5d:0e:20:70:93:de:da:03:25:62:1b:16:e2:ce:
         0c:24:31:83:a2:23:53:4b:2b:41:4b:5b:1e:73:18:d0:2e:dc:
         86:eb:21:d3:0c:5c:e7:c7:5f:5c:d1:a0:89:e6:8c:f5:c1:71:
         22:94:d3:04:b8:bc:5c:1d:f9:91:72:8f:d0:9f:2f:10:fd:e5:
         be:15:bd:e4:5a:d6:91:b5:b5:c1:1f:67:09:89:b7:b5:f2:e3:
         c0:0b:f8:38:c3:a6:51:95:05:3a:29:9a:1d:3a:21:3b:88:7d:
         5b:d0:3f:63:76:9b:a3:c8:88:86:68:20:8d:95:fb:69:62:37:
         de:93:de:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Mar 3 04:32:42 2021 by LibreSSL & rpki-client.