RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/1-3aNPWdWWqE2nYikIu5YSSu64vs.cer (download)

Subject key identifier:   FB:76:8D:3D:67:56:5A:A1:36:9D:88:A4:22:EE:58:49:2B:BA:E2:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1123951/0/FB768D3D67565AA1369D88A422EE58492BBAE2FB.mft
CA Repository:            nostromo.heficed.net/repo/1123951/0/
Notification URL:         https://nostromo.heficed.net/rrdp/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2022-07-01T00:00:00Z
    Resources:
    1: AS: 42406

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/1-3aNPWdWWqE2nYikIu5YSSu64vs.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 644180104967 (0x95fc205707)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov 18 11:20:12 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=fb768d3d67565aa1369d88a422ee58492bbae2fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:76:89:dc:55:80:1a:02:14:d6:7b:00:fc:06:
                    b3:e2:01:84:24:1c:f4:27:9c:06:c4:3c:32:46:7e:
                    63:4d:1d:98:09:fb:40:fb:9e:56:2f:41:7f:3a:3e:
                    dc:dc:57:b4:e8:2e:56:1a:eb:a1:40:4e:6c:62:5a:
                    63:40:bc:92:24:e8:8c:da:f1:d3:84:ef:2e:0e:99:
                    e0:73:10:0c:23:fa:14:ee:3d:a8:f5:da:44:47:70:
                    88:52:61:75:2d:8b:a3:d5:fd:19:46:48:3a:18:db:
                    9a:ea:43:76:d5:45:16:fb:4e:1d:e1:99:f1:10:50:
                    60:e7:2d:10:f9:98:13:47:d1:1c:a6:86:d9:6e:d9:
                    02:43:1d:e6:5f:c9:48:8e:04:f5:00:ff:b5:91:fa:
                    82:32:25:16:05:94:b7:aa:17:53:88:aa:57:4c:f8:
                    de:59:0c:32:52:3b:30:4b:62:83:b8:91:84:68:3d:
                    5d:94:9e:c5:38:95:25:b2:82:61:96:55:ef:44:9e:
                    ea:49:39:9e:4a:bf:72:e9:8a:19:94:de:60:6d:6c:
                    0c:7d:d7:02:5f:ff:be:4a:62:ca:13:d7:b5:15:2e:
                    10:2f:af:32:0f:30:db:8b:47:b5:ee:2d:9c:da:7e:
                    86:85:15:7a:45:59:0a:19:86:cb:76:d2:8a:de:8c:
                    6f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FB:76:8D:3D:67:56:5A:A1:36:9D:88:A4:22:EE:58:49:2B:BA:E2:FB
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123951/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123951/0/FB768D3D67565AA1369D88A422EE58492BBAE2FB.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42406

    Signature Algorithm: sha256WithRSAEncryption
         8f:47:e1:aa:32:02:b1:00:58:a7:34:55:4f:34:b1:29:e5:65:
         87:9a:a4:28:1f:86:0a:ab:3b:f0:df:2e:be:dd:eb:b7:7a:19:
         10:96:e3:b5:39:4d:59:1c:6b:cc:e7:05:ce:a3:aa:fb:e7:af:
         15:67:ed:45:d6:93:4f:98:78:13:6b:65:d9:40:d6:0e:fa:15:
         40:68:ad:9e:8a:08:1a:1f:23:95:d6:6b:5b:0f:5d:cf:ff:7f:
         b6:56:07:cb:2d:bd:96:b9:bf:62:2e:4c:23:b5:43:34:08:34:
         14:62:f4:54:b2:ae:fc:9e:d8:3b:5d:15:4d:91:d4:b6:6b:dd:
         3f:21:c8:65:14:0a:ff:a0:27:70:df:38:cc:5b:c7:2d:f6:d3:
         a5:f7:92:50:59:15:2c:cb:0a:7d:01:71:dc:2d:b7:4c:1a:ef:
         c8:84:c0:dc:45:8e:5b:7a:01:28:8b:b7:57:30:0c:2b:77:18:
         28:db:77:ee:35:8f:a5:cc:60:b1:d0:dc:2a:89:a8:c4:11:ba:
         ec:70:e7:70:81:08:6e:73:42:ed:bd:67:2c:24:d4:f6:24:2e:
         c7:b6:9f:a4:1b:90:3f:86:db:c7:56:96:89:e3:e4:56:c9:4d:
         6a:2d:d4:9e:8c:29:6c:3a:5c:94:32:57:5c:c8:fc:8c:1b:2d:
         8e:08:81:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Thu Nov 18 13:49:37 2021 by LibreSSL & rpki-client.