RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/7Pyaf7NMG3T4u7S0boyTN2Gw57Q.cer (download)

Subject key identifier:   EC:FC:9A:7F:B3:4C:1B:74:F8:BB:B4:B4:6E:8C:93:37:61:B0:E7:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/635181/0/ECFC9A7FB34C1B74F8BBB4B46E8C933761B0E7B4.mft
CA Repository:            nostromo.heficed.net/repo/635181/0/
Notification URL:         https://nostromo.heficed.net/rrdp/notification.xml
Subordinate resources:
    1: IP: 185.158.104.0/22
    2: IP: 2a0a:a600::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/7Pyaf7NMG3T4u7S0boyTN2Gw57Q.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503173307882 (0x7527775dea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:00:48 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=ecfc9a7fb34c1b74f8bbb4b46e8c933761b0e7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8d:f9:d4:59:a4:93:4e:3d:93:ce:00:fb:47:
                    29:c0:4d:af:14:5f:d6:39:a0:98:73:3f:29:1b:cc:
                    86:ce:fa:f1:3d:37:c3:c4:59:31:c6:cf:21:54:3a:
                    2d:d0:9f:6d:8d:a1:ac:3b:f5:6e:4b:ea:42:a3:42:
                    4e:3d:98:20:95:b7:b1:e0:4c:be:f1:c4:07:d7:6a:
                    76:20:7c:55:93:a3:98:7a:d2:ce:c9:ae:91:da:79:
                    5d:d5:14:76:dc:1e:33:03:54:94:05:e6:d6:e7:a7:
                    59:21:a6:fd:e5:3f:b3:ea:f5:82:92:4b:25:e2:a5:
                    8e:2d:11:36:92:24:94:d2:b7:da:57:c6:3f:aa:49:
                    d4:51:12:09:07:12:db:09:b0:fb:9e:7d:78:60:85:
                    b2:22:2a:fd:c9:3a:0c:62:3e:96:80:b3:48:99:a8:
                    0e:87:c8:3e:74:54:75:f6:e0:0b:b4:37:d0:1c:c7:
                    84:13:62:ed:79:40:bb:06:08:ba:4e:34:d8:e4:9e:
                    e7:49:c1:9d:48:07:22:21:71:b6:5c:a1:ee:71:44:
                    5c:e5:d3:b4:b5:9a:34:21:17:ae:5c:78:69:9a:8d:
                    e4:81:6e:ec:f4:6b:b7:46:79:4e:b0:ec:fb:02:b1:
                    38:b4:f4:d5:ca:68:74:ba:6e:b1:c1:3b:fd:31:8c:
                    3f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                EC:FC:9A:7F:B3:4C:1B:74:F8:BB:B4:B4:6E:8C:93:37:61:B0:E7:B4
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/635181/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/635181/0/ECFC9A7FB34C1B74F8BBB4B46E8C933761B0E7B4.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.158.104.0/22
                IPv6:
                  2a0a:a600::/29

    Signature Algorithm: sha256WithRSAEncryption
         a7:b7:c5:80:ec:eb:ba:d3:23:02:82:bf:fd:d6:5c:00:c3:1b:
         fb:cf:c5:2e:b2:20:24:14:f7:fb:32:0a:cb:da:a0:38:85:8c:
         3c:70:7b:cd:3a:56:d3:e6:40:0d:8b:9c:07:d8:f9:46:6b:cb:
         96:f9:c9:91:c7:b1:78:f8:94:19:13:e3:5d:0e:95:6d:91:b5:
         af:95:b6:0a:f6:86:71:e4:f6:5c:a5:11:21:02:06:07:4b:e4:
         e0:4a:6e:77:76:37:ea:4f:47:bb:5d:c9:3c:ea:6f:8c:c6:07:
         ab:4d:13:87:88:4f:d3:28:f1:be:a8:a6:f9:ce:83:0b:c7:6a:
         b3:cc:55:53:35:49:82:ae:2b:c8:75:5c:5f:40:53:37:42:8b:
         6d:27:16:36:73:39:29:44:e0:03:c0:af:08:58:d8:e9:1e:81:
         ac:88:bb:2c:cd:3c:b3:de:dc:ad:98:76:a1:46:b0:d7:7d:c5:
         9b:3d:ed:54:4c:c2:b3:1b:00:66:d1:a5:fa:fb:53:7e:50:d6:
         89:cf:16:04:06:16:76:63:86:9d:6a:31:80:ff:2b:cb:7d:40:
         99:b1:f6:62:37:2d:41:6e:3d:9d:08:b5:1a:76:41:bb:3f:41:
         6e:55:2d:e6:9f:dd:21:33:6d:2d:39:b8:f2:e4:7f:2f:39:44:
         64:9b:8c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:19:12 2021 by LibreSSL & rpki-client.