RPKI Certificate
Location: rpki.ripe.net/repository/DEFAULT/opteFy63eMfX6ARCnnGmDdR3UEs.cer (download)

Subject key identifier:   A2:9B:5E:17:2E:B7:78:C7:D7:E8:04:42:9E:71:A6:0D:D4:77:50:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/635142/0/A29B5E172EB778C7D7E804429E71A60DD477504B.mft
Subordinate resources:
    1: IP: 193.7.200.0/22

--
$ openssl x509 -text -inform DER -in rpki.ripe.net/repository/DEFAULT/opteFy63eMfX6ARCnnGmDdR3UEs.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503151258863 (0x752626ecef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:00:43 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=a29b5e172eb778c7d7e804429e71a60dd477504b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:66:58:f1:29:b5:dc:ad:b1:b2:60:83:fe:89:
                    a1:27:b9:42:af:73:37:a1:0f:d2:99:53:80:1b:17:
                    a7:f5:da:65:b7:cb:c4:71:6b:a8:73:1d:37:a3:87:
                    cc:18:a9:95:c6:67:fe:ef:0b:36:44:35:13:18:e6:
                    30:e6:4c:52:08:41:62:e1:fc:d4:f8:78:49:12:92:
                    ba:ff:b0:34:00:05:36:fd:44:96:5a:57:a9:35:3d:
                    39:08:a2:65:89:f3:d3:7b:f2:15:2d:4f:29:d8:ff:
                    84:e1:c1:74:8a:76:3c:73:df:7f:d8:b6:6c:ad:d0:
                    e6:96:11:20:13:cb:0c:34:43:76:da:35:f6:dd:41:
                    e7:01:07:ad:ab:83:39:ac:a7:88:a0:c2:6d:ad:d5:
                    6f:08:02:6f:f4:be:c0:21:db:ba:35:f1:57:fe:42:
                    67:4d:7f:30:60:78:b1:59:8b:8a:b0:87:8b:83:b2:
                    77:98:d4:09:82:12:ad:7a:22:8b:e1:62:3a:0b:da:
                    2f:da:ca:9c:8d:b2:21:6b:bf:64:61:9f:0a:45:ce:
                    64:11:4f:ef:2f:32:24:84:c5:1c:03:d2:02:59:a3:
                    30:fc:6b:73:1c:2d:01:e4:84:86:a1:b3:d4:5f:75:
                    e1:38:4d:ce:0e:6d:21:a6:a7:d0:a3:a7:48:bd:79:
                    42:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/635142/0/
                1.3.6.1.5.5.7.48.10 - URI:rsync://nostromo.heficed.net/repo/635142/0/A29B5E172EB778C7D7E804429E71A60DD477504B.mft
                1.3.6.1.5.5.7.48.13 - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                0.0.....0.......
    Signature Algorithm: sha256WithRSAEncryption
         90:bf:4e:65:c1:7c:d9:46:78:ad:1b:5d:6b:a4:1d:12:8b:4f:
         6d:83:db:17:3c:c2:35:f9:f0:8d:96:01:78:5e:e9:c1:03:71:
         31:de:1d:53:74:63:cf:29:f0:b3:09:6f:a3:be:23:74:fb:b2:
         3e:17:6b:b3:66:9b:5f:78:4e:97:5c:95:20:96:e3:c1:ac:f2:
         0f:fb:57:28:25:ed:48:ef:33:8c:72:0a:b5:c3:1f:8a:e0:d9:
         76:2e:e8:59:d2:24:9f:15:ab:d8:f3:47:69:6e:77:eb:8c:a3:
         82:2f:60:65:ad:93:65:82:c2:2f:90:d1:04:f7:31:67:91:27:
         09:2b:7c:e8:e6:f0:7e:0b:c0:a7:82:0c:f3:55:a1:74:b8:b7:
         7d:93:67:d0:6f:41:c2:e5:f9:03:95:1b:f1:6c:07:b8:da:15:
         f6:e8:2b:3d:a5:f5:ca:93:76:fc:2a:7d:73:f0:42:bb:8e:2b:
         20:af:7c:ce:82:e5:83:fd:0e:1e:fe:f9:1b:2e:cd:2c:f7:31:
         37:eb:3f:7e:a4:e8:31:72:6c:09:7d:d2:20:48:a3:4e:bd:96:
         f3:cb:55:db:7b:3c:d4:df:92:ef:33:64:cb:af:3b:86:ad:db:
         11:cc:67:43:6a:c2:fd:46:56:ad:37:f5:f7:25:fb:49:9a:29:
         2e:ca:fd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Mar 3 04:33:20 2021 by LibreSSL & rpki-client.