RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/2kW1nR-457Bdlo0D9icDZ5IvRCw.cer (download)

Subject key identifier:   DA:45:B5:9D:1F:B8:E7:B0:5D:96:8D:03:F6:27:03:67:92:2F:44:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1196081/0/DA45B59D1FB8E7B05D968D03F6270367922F442C.mft
CA Repository:            nostromo.heficed.net/repo/1196081/0/
Notification URL:         https://nostromo.heficed.net/rrdp/notification.xml
Subordinate resources:
    1: IP: 195.78.54.0--195.78.57.255

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/2kW1nR-457Bdlo0D9icDZ5IvRCw.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 587294619270 (0x88bd7cb686)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  6 12:40:50 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=da45b59d1fb8e7b05d968d03f6270367922f442c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:65:33:cc:f7:93:30:a6:13:f1:35:e9:8b:77:
                    91:0f:8b:04:5d:3d:7b:5b:30:bd:ac:d0:d7:34:4e:
                    71:b0:42:e8:f8:10:b8:10:39:17:3c:6a:6b:4d:71:
                    66:74:4f:47:fb:7d:28:3c:fc:48:03:69:48:c2:df:
                    15:26:d2:a7:15:70:62:85:28:71:e3:49:c2:5b:22:
                    b1:76:08:f0:89:36:64:3e:d5:5d:42:c2:81:f2:35:
                    08:ad:85:70:c3:e2:af:27:2f:c3:81:b3:42:19:c3:
                    4d:b2:92:cf:5b:89:08:75:67:8b:8b:48:36:0a:7e:
                    5f:94:8f:c5:a7:2e:89:4f:40:ed:90:b7:f7:45:d7:
                    7c:87:94:24:81:23:05:08:ff:75:d5:53:bc:82:0b:
                    71:40:55:37:72:e7:12:75:cc:f4:4a:15:6f:02:da:
                    12:b1:c9:e4:97:04:19:76:c2:14:1e:51:40:b3:69:
                    d5:23:bc:91:51:6f:c3:33:31:a7:b9:a2:e7:bf:ae:
                    92:1c:e2:2d:ef:2c:37:47:d7:51:c6:ff:94:38:2c:
                    23:4d:8d:a8:3f:62:19:32:0e:de:d8:0c:6a:ab:a0:
                    df:96:d8:a9:ff:57:9e:5b:30:54:30:6b:4f:2c:02:
                    68:1f:29:a1:29:b8:ef:65:bc:74:6c:93:91:3b:64:
                    65:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DA:45:B5:9D:1F:B8:E7:B0:5D:96:8D:03:F6:27:03:67:92:2F:44:2C
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1196081/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1196081/0/DA45B59D1FB8E7B05D968D03F6270367922F442C.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.54.0-195.78.57.255

    Signature Algorithm: sha256WithRSAEncryption
         37:f7:75:b9:9f:82:d1:63:33:45:3a:6f:19:14:c2:ad:c5:c5:
         d2:aa:fd:94:27:c2:9e:09:08:b9:b7:e8:df:d4:38:76:38:6f:
         db:a5:b8:24:69:5c:6e:fe:d1:af:4c:3e:de:20:f0:3b:27:ca:
         62:2b:94:45:e2:a4:42:2c:dd:d6:2d:89:c5:8d:3e:ca:a8:5e:
         c2:23:2a:cd:49:b3:35:65:48:80:cd:93:a8:0c:95:59:2f:34:
         aa:ff:ba:60:03:9b:7e:78:5b:98:6e:15:56:89:89:e5:4c:96:
         b3:29:d4:a1:a0:fe:6c:05:2a:3e:1b:9a:59:c6:f2:3d:dd:7b:
         f4:74:df:ca:0e:49:b3:e3:52:66:d7:18:e8:df:0e:c5:5a:c7:
         c8:55:df:17:33:26:a2:9d:9c:2b:6d:4a:aa:0b:63:b7:1c:0b:
         fe:42:d2:ec:c7:74:47:d1:eb:bc:06:cf:bc:d1:2f:28:b6:b1:
         7e:f4:d2:01:b8:c7:63:8c:21:a0:3f:e5:af:40:85:1c:d3:dc:
         97:85:63:bb:88:3f:f6:5c:88:ac:e2:6b:ac:05:7d:69:eb:0a:
         9f:0d:f6:4d:8d:ee:94:27:51:47:7c:f0:74:14:af:e5:cb:40:
         20:31:2b:3e:a9:4c:c9:73:ba:4b:4d:a8:e2:4b:41:67:3f:fd:
         a4:5d:67:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:52:15 2021 by LibreSSL & rpki-client.