RPKI Certificate
Location: rpki.ripe.net/repository/DEFAULT/smtrmQBMybSzoMW26F9eQehlZfw.cer (download)

Subject key identifier:   B2:6B:6B:99:00:4C:C9:B4:B3:A0:C5:B6:E8:5F:5E:41:E8:65:65:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1123691/0/B26B6B99004CC9B4B3A0C5B6E85F5E41E86565FC.mft
Subordinate resources:
    1: IP: 185.174.60.0/22
    2: IP: 2a0b:8700::/29

--
$ openssl x509 -text -inform DER -in rpki.ripe.net/repository/DEFAULT/smtrmQBMybSzoMW26F9eQehlZfw.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503133874409 (0x75251da8e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:00:39 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=b26b6b99004cc9b4b3a0c5b6e85f5e41e86565fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f4:27:ff:46:2c:a3:ab:3f:0b:95:4f:75:13:
                    e2:a7:2b:56:35:5d:35:1d:a3:72:ab:a5:af:c5:72:
                    46:c7:df:4f:d4:27:b3:ed:df:ac:bb:e7:c1:dd:8d:
                    92:8c:01:11:e4:96:ad:fb:c8:5c:b0:7b:e0:97:0f:
                    24:9e:59:8f:c8:d0:2e:be:d8:d4:2e:15:d3:89:a0:
                    3f:d8:e5:9a:22:ac:1f:18:b7:5b:ec:7b:db:64:11:
                    d1:fe:7a:e9:a6:f0:2b:4e:35:1a:c1:91:61:83:42:
                    19:48:54:c4:50:a5:03:90:df:81:0f:11:f3:79:e1:
                    71:83:1d:65:e9:43:29:58:f1:29:a8:a4:e5:16:cd:
                    dc:a1:c4:10:05:e2:7e:8f:22:98:84:3b:ac:63:9c:
                    a4:82:48:07:8e:af:04:0e:05:3a:6b:e4:05:14:71:
                    36:c5:3a:29:1a:4b:68:3e:94:37:9d:4a:03:dd:51:
                    99:07:da:cd:cc:a8:13:a7:20:f8:1a:8a:c7:c1:a7:
                    24:84:16:26:44:4e:4e:f7:3a:75:4b:3d:30:13:c0:
                    93:ea:e8:8b:a4:5d:fb:96:08:14:98:01:95:20:64:
                    86:e9:20:29:4f:0c:60:23:68:35:4c:59:89:70:f8:
                    02:72:f6:e1:1d:1f:fb:e7:ad:0c:4f:58:19:c8:e9:
                    da:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123691/0/
                1.3.6.1.5.5.7.48.10 - URI:rsync://nostromo.heficed.net/repo/1123691/0/B26B6B99004CC9B4B3A0C5B6E85F5E41E86565FC.mft
                1.3.6.1.5.5.7.48.13 - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                0.0.....0......<0
....0....*...
    Signature Algorithm: sha256WithRSAEncryption
         6f:30:8d:04:f5:ae:14:4d:76:93:a5:62:7e:fa:06:a5:49:19:
         59:c2:7b:e8:a7:d6:fa:17:e9:56:8e:91:e4:4b:dc:c2:ec:88:
         9b:f8:79:dc:ae:25:a8:29:72:67:76:7d:d5:cc:90:59:2e:7d:
         96:2a:53:30:41:2c:75:1f:1a:67:3a:69:f0:26:04:ee:17:0b:
         59:78:2c:e5:e9:82:cc:ab:34:93:57:e2:d7:8b:a6:d5:48:d3:
         98:d8:fb:22:16:e9:fb:19:a2:af:41:ed:74:a4:bf:1f:bd:c7:
         f7:9d:03:23:61:e5:63:85:5a:90:51:4e:86:35:66:9f:be:ab:
         9b:b1:98:76:6d:cc:73:da:61:ea:4b:62:9d:17:df:23:55:28:
         ab:76:3f:8e:19:2d:f9:5a:02:23:06:fb:0d:bf:2d:fa:98:dd:
         16:2d:06:06:6f:8d:7f:ca:e0:37:c0:b9:e9:8a:eb:a9:0a:1f:
         21:1e:c7:08:55:c5:b6:8c:59:22:7e:64:0d:49:bc:a4:15:6d:
         84:1d:c8:d7:64:bc:f6:c8:8b:7e:6d:78:c3:25:c7:d6:23:6c:
         76:79:ec:29:eb:85:60:49:92:51:d8:29:da:b0:44:ee:6c:62:
         aa:37:70:ac:a3:72:a0:db:42:6f:cb:a2:05:fd:5c:f8:e8:74:
         e9:61:51:4e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIFdSUdqOkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMDAwMzlaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGIyNmI2Yjk5MDA0
Y2M5YjRiM2EwYzViNmU4NWY1ZTQxZTg2NTY1ZmMwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC19Cf/Riyjqz8LlU91E+KnK1Y1XTUdo3Krpa/FckbH30/U
J7Pt36y758HdjZKMARHklq37yFywe+CXDySeWY/I0C6+2NQuFdOJoD/Y5ZoirB8Y
t1vse9tkEdH+eumm8CtONRrBkWGDQhlIVMRQpQOQ34EPEfN54XGDHWXpQylY8Smo
pOUWzdyhxBAF4n6PIpiEO6xjnKSCSAeOrwQOBTpr5AUUcTbFOikaS2g+lDedSgPd
UZkH2s3MqBOnIPgaisfBpySEFiZETk73OnVLPTATwJPq6IukXfuWCBSYAZUgZIbp
IClPDGAjaDVMWYlw+AJy9uEdH/vnrQxPWBnI6dq1AgMBAAGjggJfMIICWzAdBgNV
HQ4EFgQUsmtrmQBMybSzoMW26F9eQehlZfwwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCB
8AYIKwYBBQUHAQsEgeMwgeAwOAYIKwYBBQUHMAWGLHJzeW5jOi8vbm9zdHJvbW8u
aGVmaWNlZC5uZXQvcmVwby8xMTIzNjkxLzAvMGQGCCsGAQUFBzAKhlhyc3luYzov
L25vc3Ryb21vLmhlZmljZWQubmV0L3JlcG8vMTEyMzY5MS8wL0IyNkI2Qjk5MDA0
Q0M5QjRCM0EwQzVCNkU4NUY1RTQxRTg2NTY1RkMubWZ0MD4GCCsGAQUFBzANhjJo
dHRwczovL25vc3Ryb21vLmhlZmljZWQubmV0L3JyZHAvbm90aWZpY2F0aW9uLnht
bDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEw
BgMEArmuPDANBAIAAjAHAwUDKguHADANBgkqhkiG9w0BAQsFAAOCAQEAbzCNBPWu
FE12k6VifvoGpUkZWcJ76KfW+hfpVo6R5EvcwuyIm/h53K4lqClyZ3Z91cyQWS59
lipTMEEsdR8aZzpp8CYE7hcLWXgs5emCzKs0k1fi14um1UjTmNj7Ihbp+xmir0Ht
dKS/H73H950DI2HlY4VakFFOhjVmn76rm7GYdm3Mc9ph6ktinRffI1Uoq3Y/jhkt
+VoCIwb7Db8t+pjdFi0GBm+Nf8rgN8C56YrrqQofIR7HCFXFtoxZIn5kDUm8pBVt
hB3I12S89siLfm14wyXH1iNsdnnsKeuFYEmSUdgp2rBE7mxiqjdwrKNyoNtCb8ui
Bf1c+Oh06WFRTg==
-----END CERTIFICATE-----

Generated at Wed Mar 3 04:33:48 2021 by LibreSSL & rpki-client.