RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/4B7a-GA6NEYq0Vicwcbz1ccN2W4.cer (download)

Subject key identifier:   E0:1E:DA:F8:60:3A:34:46:2A:D1:58:9C:C1:C6:F3:D5:C7:0D:D9:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/635375/0/E01EDAF8603A34462AD1589CC1C6F3D5C70DD96E.mft
CA Repository:            nostromo.heficed.net/repo/635375/0/
Notification URL:         https://nostromo.heficed.net/rrdp/notification.xml
Subordinate resources:
    1: IP: 5.181.132.0/22
    2: IP: 2a0e:1c00::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/4B7a-GA6NEYq0Vicwcbz1ccN2W4.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503479298528 (0x7539b469e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:01:54 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e01edaf8603a34462ad1589cc1c6f3d5c70dd96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:32:7e:c0:1f:3e:b1:1f:bd:ee:4e:94:f6:ed:
                    59:ed:9f:0c:db:a9:de:84:eb:86:c2:b1:97:8d:43:
                    78:92:e2:b3:54:92:81:67:31:19:9d:89:dc:2b:d1:
                    15:73:01:aa:7b:a3:f8:9f:46:cb:46:c5:bc:81:26:
                    d0:ed:54:e6:7e:27:1e:04:ab:c6:a5:0c:a5:57:25:
                    5e:a3:29:4e:a2:25:bb:25:bb:46:ba:6c:ce:17:56:
                    c5:73:dd:e5:65:53:eb:2e:be:c5:50:9c:b4:83:f5:
                    cb:42:67:df:bf:51:69:e9:88:62:8c:f1:ac:a7:9a:
                    bd:e6:0a:eb:48:a1:ae:1c:86:b0:59:e2:fb:e7:cd:
                    92:f0:53:3a:06:e8:13:dc:f6:27:f1:5a:84:6f:0e:
                    68:a2:ef:8c:be:2e:3c:cf:04:7e:f2:e3:0e:76:9c:
                    9c:d5:14:45:ad:ed:d3:65:0f:f2:bc:75:b9:3f:ef:
                    10:a8:a5:78:03:a7:e2:b3:68:b2:d3:a0:c0:df:a5:
                    42:0b:c7:e0:70:54:99:7d:ea:1e:3a:d9:91:31:3e:
                    20:3c:0c:af:52:53:43:5d:00:7a:ee:06:fe:25:db:
                    04:79:7f:c9:be:37:b3:98:92:db:4c:92:e6:4d:91:
                    45:1f:95:7b:e7:c1:de:54:fa:6a:31:16:7c:88:d2:
                    61:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E0:1E:DA:F8:60:3A:34:46:2A:D1:58:9C:C1:C6:F3:D5:C7:0D:D9:6E
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/635375/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/635375/0/E01EDAF8603A34462AD1589CC1C6F3D5C70DD96E.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.......0
....0....*...
    Signature Algorithm: sha256WithRSAEncryption
         00:8b:10:30:fc:62:f1:8c:57:c1:a0:60:1a:53:39:f4:29:13:
         83:af:73:80:15:a1:e5:ee:04:51:7d:3d:99:11:c8:3f:17:2b:
         30:32:64:05:97:70:0f:95:78:4f:d5:96:36:f5:af:df:a3:c5:
         d9:98:71:4e:fe:1a:bf:dc:19:7f:49:77:41:b9:c4:00:b4:47:
         24:d4:51:de:35:da:ba:70:7b:95:78:53:43:1b:72:a7:56:96:
         34:f5:29:fe:9d:8f:e6:cc:7b:b9:ab:fa:3f:d3:8e:22:fb:52:
         af:29:fc:46:f4:8e:d7:a7:de:df:69:6b:c7:4d:bb:0a:cd:a3:
         7c:f6:9b:48:fd:73:98:d4:d0:e7:b3:ec:e4:7b:0e:63:ca:e2:
         2d:68:36:e1:01:98:9b:3d:e9:89:a2:43:13:22:91:a1:8f:f3:
         ae:06:d9:f2:b9:94:d3:2d:37:bc:a3:7d:54:c1:ad:86:f0:0d:
         4d:9a:8a:68:29:e2:bf:c9:38:83:96:24:8f:54:47:b4:bc:72:
         b4:05:92:a8:e0:f2:bf:85:94:48:60:b9:c1:d6:9c:2a:a4:a3:
         a4:6e:43:f8:c8:69:25:52:7f:1d:87:8c:2a:37:c4:39:ca:63:
         63:4f:a9:2d:28:ec:fe:c7:16:1e:1b:4e:86:62:df:c9:b8:29:
         56:14:75:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Jul 30 01:57:21 2021 by LibreSSL & rpki-client.