RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/1-Tlj99OopL6SYp8j5Erl1X54HaU.cer (download)

Subject key identifier:   F9:39:63:F7:D3:A8:A4:BE:92:62:9F:23:E4:4A:E5:D5:7E:78:1D:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1123911/0/F93963F7D3A8A4BE92629F23E44AE5D57E781DA5.mft
CA Repository:            nostromo.heficed.net/repo/1123911/0/
Notification URL:         https://nostromo.heficed.net/rrdp/notification.xml
Subordinate resources:
    1: AS: 213044
    1: IP: 45.133.172.0/22

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/1-Tlj99OopL6SYp8j5Erl1X54HaU.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503732513644 (0x7548cc2b6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:02:35 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f93963f7d3a8a4be92629f23e44ae5d57e781da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:db:32:0d:a9:94:f0:13:61:9a:02:1f:05:cd:
                    f1:c0:00:d7:5f:fd:94:4b:be:62:80:9f:40:41:5d:
                    ba:3e:82:bd:0f:de:11:6a:e6:fc:f6:13:ca:de:1a:
                    cd:ad:62:b5:98:48:e2:59:79:cf:3f:b2:a2:6a:a6:
                    c4:ba:38:d8:af:b7:31:a6:9a:13:a1:72:99:e2:61:
                    d1:10:37:e0:31:d3:17:71:c7:da:44:fa:69:79:aa:
                    de:22:d7:e7:ed:c7:57:51:52:e1:ca:e3:b0:5b:5a:
                    be:eb:b2:8a:e0:7b:6b:2c:c1:d5:de:39:e2:44:69:
                    66:5d:72:31:b7:db:7d:16:d6:89:16:36:f0:07:c3:
                    de:3f:00:b6:20:ca:06:6b:8d:c4:2b:e2:b3:54:53:
                    f7:a3:05:13:1d:c4:d2:a6:21:fc:86:7c:f3:ac:cb:
                    6e:0b:24:bb:68:89:d8:ba:6d:f7:d7:37:7c:c4:f0:
                    c8:dd:4d:38:74:60:59:ab:53:4f:f8:bd:4a:32:43:
                    6f:8c:7c:bd:19:bb:4d:3e:b2:fd:83:10:64:99:77:
                    d6:3a:8f:98:8b:5b:76:fd:3c:b3:46:a7:27:6d:37:
                    c2:af:b4:e6:b2:d6:ab:ef:f4:a8:b3:37:91:5b:f6:
                    68:c5:4a:37:0c:59:91:ab:dd:af:28:41:77:1d:dd:
                    4e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F9:39:63:F7:D3:A8:A4:BE:92:62:9F:23:E4:4A:E5:D5:7E:78:1D:A5
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123911/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123911/0/F93963F7D3A8A4BE92629F23E44AE5D57E781DA5.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....-..
            sbgp-autonomousSysNum: critical
                0...0....@4
    Signature Algorithm: sha256WithRSAEncryption
         0b:bc:b7:e8:a7:6b:ae:ca:d1:8e:33:ce:3d:a7:2d:6c:86:fb:
         19:d2:d0:3d:3b:fa:7c:87:74:b8:52:5e:ae:68:78:99:ea:9b:
         92:18:df:93:eb:a0:0b:89:e4:e1:b5:31:6f:c5:41:2e:be:40:
         8a:14:81:87:fc:7a:e9:41:90:29:4e:f6:89:b8:bb:67:98:a5:
         22:ad:c1:e1:9c:e3:91:26:c4:79:c5:f1:40:f2:e1:08:58:d7:
         82:bf:2e:02:04:b3:17:9d:75:4f:25:11:85:8a:ab:de:c4:fa:
         69:b9:da:60:33:e7:17:a7:63:cd:6a:c3:22:44:42:25:a0:64:
         1d:33:c8:7d:5f:4d:8a:49:65:e9:00:c9:bd:08:10:00:55:d7:
         fd:02:ba:a7:9a:a7:ce:bc:9c:a0:db:75:a0:24:91:47:00:28:
         71:bb:3c:90:ab:dc:61:6c:b9:90:10:43:37:0e:c2:99:03:ba:
         d5:3b:6e:2a:65:df:ec:ed:a0:d3:93:9c:53:80:40:1d:b6:37:
         54:21:22:22:0a:18:99:9f:c8:5b:ff:dc:40:31:f7:22:13:0c:
         34:2f:03:a3:04:a5:88:f2:47:70:64:81:2e:05:53:ae:60:c6:
         e0:01:4a:de:64:a4:49:99:9f:ec:17:eb:a3:41:fb:81:2f:9e:
         e4:30:ef:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jul 27 11:26:41 2021 by LibreSSL & rpki-client.