RPKI Certificate
Location: rpki.ripe.net/repository/DEFAULT/xWiCvu9vhbzQ-gZWGEEl1wjOPTM.cer (download)

Subject key identifier:   C5:68:82:BE:EF:6F:85:BC:D0:FA:06:56:18:41:25:D7:08:CE:3D:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/635232/0/C56882BEEF6F85BCD0FA0656184125D708CE3D33.mft
Subordinate resources:
    1: IP: 194.110.12.0/22
    2: IP: 2a0d:5c0::/29

--
$ openssl x509 -text -inform DER -in rpki.ripe.net/repository/DEFAULT/xWiCvu9vhbzQ-gZWGEEl1wjOPTM.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503613932002 (0x7541bac1e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:02:17 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=c56882beef6f85bcd0fa0656184125d708ce3d33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:74:26:db:7a:9b:f5:72:9a:f1:2e:49:2c:0a:
                    61:29:08:f4:3d:d3:f9:89:35:ad:cb:b3:c6:3c:2a:
                    65:7f:d5:ac:00:a5:3f:be:d4:03:81:4a:28:ce:be:
                    11:68:4f:5f:da:82:49:88:0e:92:c0:46:95:a5:de:
                    b4:75:44:56:ba:bb:a3:15:00:49:2f:51:30:50:6d:
                    d0:94:33:b7:2f:85:33:e5:38:b8:2d:ea:25:8a:5c:
                    c3:9d:c7:fe:07:af:53:e3:0d:72:61:d3:f2:99:1d:
                    a3:c7:b6:0c:d1:53:93:06:53:c4:4b:00:54:bd:fd:
                    09:10:63:eb:07:a6:38:76:e9:c9:5f:6c:f2:a4:4b:
                    0c:fe:32:4f:80:b1:f1:cc:cb:f8:c8:b0:e3:d9:60:
                    58:81:c9:42:f0:1e:1f:40:36:b7:9a:f9:1c:aa:35:
                    be:e9:bf:4d:92:bd:34:59:d8:e8:13:f3:81:7d:42:
                    c2:4c:f8:93:e8:ab:69:db:f1:59:4a:49:a9:7a:e7:
                    22:53:10:26:bc:b9:c4:91:05:02:64:e6:0f:8a:eb:
                    03:26:0f:a0:14:15:f6:c1:ea:13:a0:31:86:ce:61:
                    b3:f2:a2:de:7e:6d:64:20:12:4a:70:f3:15:19:16:
                    7d:08:33:b3:2f:87:6b:08:af:f2:64:31:30:92:95:
                    95:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/635232/0/
                1.3.6.1.5.5.7.48.10 - URI:rsync://nostromo.heficed.net/repo/635232/0/C56882BEEF6F85BCD0FA0656184125D708CE3D33.mft
                1.3.6.1.5.5.7.48.13 - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                0.0.....0.....n.0
....0....*
..
    Signature Algorithm: sha256WithRSAEncryption
         19:ee:19:b9:58:a3:e1:ac:c6:ff:33:41:69:45:7e:26:37:42:
         45:ff:07:b4:93:0a:21:38:f3:89:83:00:6e:67:f1:02:10:5b:
         b2:d7:43:b7:09:51:2b:02:22:8c:88:34:33:e5:ae:64:b1:b3:
         ac:8a:88:ae:43:f9:eb:8d:79:1f:3f:a8:e1:3a:fe:ea:bc:0b:
         fb:f7:9e:66:7d:f9:11:a9:84:8d:ba:0d:f8:70:8e:d5:f7:e6:
         b0:8a:2f:e9:19:56:3e:48:e2:a4:c4:53:97:d4:c4:18:4d:8e:
         e6:23:1e:82:f6:6c:58:55:86:50:82:97:5a:62:a5:58:e2:08:
         f4:0d:2a:0a:46:53:96:b1:c6:55:88:71:2b:6f:b4:f7:79:cd:
         76:4a:07:77:14:c8:30:62:08:09:20:b9:19:c8:07:80:2e:67:
         7c:4e:86:f0:53:04:9d:fc:88:8f:bb:87:1b:49:01:c0:2e:c6:
         97:37:68:63:6c:70:2b:b9:a2:5c:05:af:b1:25:9a:8e:ff:a3:
         bc:df:49:64:1d:23:c8:c7:0c:40:54:d8:23:7e:ff:12:6b:b2:
         dc:0b:a2:7e:f1:ce:1b:e5:5f:50:71:f2:20:88:bf:aa:12:e2:
         26:4c:47:d4:95:33:6e:96:3e:6a:d6:91:b5:5c:70:db:3f:6d:
         2b:22:ea:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Mar 3 04:34:24 2021 by LibreSSL & rpki-client.