RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/1a7D6l-Rwgts6zznDajLiopbMLA.cer (download)

Subject key identifier:   D5:AE:C3:EA:5F:91:C2:0B:6C:EB:3C:E7:0D:A8:CB:8A:8A:5B:30:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1123852/0/D5AEC3EA5F91C20B6CEB3CE70DA8CB8A8A5B30B0.mft
CA Repository:            nostromo.heficed.net/repo/1123852/0/
Notification URL:         https://nostromo.heficed.net/rrdp/notification.xml
Subordinate resources:
    1: IP: 193.29.42.0/24
    2: IP: 193.29.177.0/24
    3: IP: 193.29.189.0/24
    4: IP: 193.29.251.0/24

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/1a7D6l-Rwgts6zznDajLiopbMLA.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503324361871 (0x753078448f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:01:22 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d5aec3ea5f91c20b6ceb3ce70da8cb8a8a5b30b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e9:c7:a1:81:6b:f3:84:8a:50:f7:f7:e0:19:
                    ff:8a:49:7f:8f:b4:dc:be:a4:bd:b9:30:61:28:c6:
                    fa:90:43:c1:29:30:1e:b5:c1:1e:97:aa:5b:4f:68:
                    80:35:13:00:df:ed:9f:a7:c8:53:a7:cd:e0:5e:e2:
                    65:2f:19:75:c1:0e:13:46:ea:4b:bc:a5:03:4e:dd:
                    c7:01:d1:4f:0c:e7:fc:1c:3e:ae:61:2a:71:b6:5e:
                    6e:6d:03:4c:0a:6a:bc:da:04:23:b8:f0:c7:40:12:
                    90:4f:f5:b2:27:60:5d:f7:6d:1a:78:ee:0d:e1:e0:
                    51:78:ad:8f:a9:20:f9:9e:bc:9b:ac:8d:75:60:2b:
                    38:c9:d3:ef:ae:f0:16:f6:cb:19:41:b0:8f:a5:95:
                    df:c7:c4:a3:89:7e:c1:4a:63:84:24:65:be:20:a9:
                    d0:c7:23:8c:18:85:8b:de:22:b8:ae:a3:fa:4d:62:
                    a1:cf:2e:77:39:16:23:ad:6d:df:8c:a1:23:99:25:
                    b4:36:b9:cb:3f:05:bd:cc:72:99:3b:f1:9f:2f:17:
                    db:6d:be:6f:ae:bf:be:f2:bd:6d:c9:21:05:07:93:
                    0b:1f:ce:fe:26:24:25:ca:c5:c8:c1:30:82:ed:4c:
                    dd:66:48:6f:4e:54:46:dd:eb:54:56:2e:4e:30:32:
                    b4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D5:AE:C3:EA:5F:91:C2:0B:6C:EB:3C:E7:0D:A8:CB:8A:8A:5B:30:B0
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123852/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123852/0/D5AEC3EA5F91C20B6CEB3CE70DA8CB8A8A5B30B0.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0 0.....0......*..................
    Signature Algorithm: sha256WithRSAEncryption
         49:bd:7c:91:f3:1d:2b:2f:9b:13:5d:79:27:8d:fc:4a:45:af:
         45:cd:2e:a0:a4:34:6c:9a:eb:3d:6c:29:22:83:41:c8:5d:d1:
         32:8d:15:38:5f:df:bd:9d:16:ff:9f:9f:c0:11:8c:12:cd:93:
         7a:ee:d5:99:16:c0:ab:35:de:d5:a2:05:62:db:4e:19:08:7e:
         f5:d5:57:f5:ab:a6:c7:85:c7:72:af:27:14:08:99:6f:20:47:
         fd:21:7a:cb:c6:dc:d2:d5:d4:69:a7:12:79:08:00:df:b5:6e:
         4c:ef:46:b2:3c:c8:6a:c4:71:22:82:50:8f:a4:a2:fc:78:26:
         9f:b5:39:80:57:78:53:c2:e2:a1:d6:fa:82:dd:02:16:2f:38:
         1e:56:ff:f7:c6:b2:78:d1:11:76:99:0c:d2:16:ca:b1:ad:70:
         65:d8:bd:7b:09:94:70:aa:1f:1e:91:7f:4c:6f:f5:6a:be:b2:
         0b:50:cc:82:17:ad:e8:91:50:53:81:2b:db:21:60:2a:13:6c:
         9b:ca:92:25:74:fb:28:89:4d:fd:fb:44:64:15:59:06:c0:c3:
         94:26:89:3f:69:76:45:55:bc:d8:1c:e1:d2:50:1b:ef:11:50:
         a5:25:ba:20:37:fc:71:47:99:d5:9f:01:2e:41:de:b8:d1:a9:
         89:77:7a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jul 27 22:14:05 2021 by LibreSSL & rpki-client.