RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/CtEaYnsP_N4GaYUKzgt2b4g83Dg.cer (download)

Subject key identifier:   0A:D1:1A:62:7B:0F:FC:DE:06:69:85:0A:CE:0B:76:6F:88:3C:DC:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1123981/1/0AD11A627B0FFCDE0669850ACE0B766F883CDC38.mft
CA Repository:            nostromo.heficed.net/repo/1123981/1/
Notification URL:         https://nostromo.heficed.net/rrdp/notification.xml
Subordinate resources:
    1: AS: 61317
    2: AS: 210277
    1: IP: 185.34.40.0/22
    2: IP: 185.137.92.0/22
    3: IP: 2a00:d1a0::/32
    4: IP: 2a0a:4e80::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/CtEaYnsP_N4GaYUKzgt2b4g83Dg.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 593578363468 (0x8a34070a4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May  4 13:14:21 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=0ad11a627b0ffcde0669850ace0b766f883cdc38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:32:1d:4e:81:81:f5:3f:d4:77:f1:7e:c4:4f:
                    14:00:f9:9f:44:d6:a1:f6:9a:5f:32:b5:72:42:70:
                    b2:4f:3d:6e:7a:35:67:fb:21:ec:4e:6a:63:09:76:
                    c0:3f:7f:d6:eb:33:66:86:aa:9a:7d:2a:58:17:e8:
                    5b:3f:4c:15:98:fc:19:0d:ac:75:65:10:16:c4:48:
                    76:c0:74:97:24:4c:55:0a:4e:80:4c:81:e1:5c:a8:
                    2c:14:ae:94:b0:78:95:a6:69:44:db:a2:7e:10:fa:
                    03:0b:86:32:c4:19:5d:4a:51:3f:50:4d:7d:30:56:
                    e3:fa:5f:68:d0:ce:df:5e:53:9f:9e:7d:95:c8:f6:
                    94:2a:3f:58:41:e9:6a:92:62:b1:9a:13:e5:22:e1:
                    85:1f:41:47:8c:de:0c:50:1f:6f:c0:c0:09:e3:ae:
                    27:1e:98:4f:a6:7a:a6:9d:6a:21:08:da:c3:d9:e5:
                    e2:7e:02:89:cb:68:1a:05:be:c1:fc:95:b9:e9:f2:
                    3d:74:5b:de:e7:f8:80:87:1d:58:fa:87:b4:03:b8:
                    7d:f4:b5:98:7d:d6:e0:18:64:f8:e3:a0:a0:5c:89:
                    b9:79:4e:78:0d:f6:96:67:07:45:66:cd:2c:63:5f:
                    63:8b:2f:9e:69:b2:85:09:4c:67:95:dc:6d:48:78:
                    71:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0A:D1:1A:62:7B:0F:FC:DE:06:69:85:0A:CE:0B:76:6F:88:3C:DC:38
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123981/1/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123981/1/0AD11A627B0FFCDE0669850ACE0B766F883CDC38.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0*0.....0....."(.....\0.....0....*......*
N.
            sbgp-autonomousSysNum: critical
                0...0
........5e
    Signature Algorithm: sha256WithRSAEncryption
         95:e3:0e:7e:0d:cd:52:b9:cd:3e:24:5e:44:e5:48:d0:18:82:
         13:79:b2:5a:dd:31:7b:77:fe:ea:52:bb:1d:3c:54:43:89:7e:
         fb:44:23:5a:b0:77:c3:c4:05:4a:c6:5d:50:48:94:78:48:f1:
         cb:8c:5e:92:22:c9:c1:24:28:31:e3:3d:3d:77:e4:c9:b4:4b:
         7a:48:cc:04:a5:6e:46:0b:8b:c3:94:04:de:11:64:04:9d:77:
         26:5b:be:ff:ca:35:48:50:a8:3d:87:19:44:76:2e:df:54:e4:
         ce:7e:4b:a0:c6:9c:66:d7:7b:1d:d0:fe:64:42:2d:30:28:95:
         dd:60:14:9b:36:48:1a:ea:ac:15:1c:1a:a0:53:45:5a:5d:1e:
         35:e4:88:8c:67:2d:b3:a1:9f:b4:11:50:73:a3:bf:a1:32:b9:
         81:05:22:b1:a4:e0:f5:3a:ae:59:bf:05:f6:c4:78:1e:5e:da:
         7a:23:bf:af:93:fb:d7:bd:e5:bf:42:8b:56:65:b8:e6:fb:68:
         b3:cc:47:1f:5f:16:13:3b:27:d0:05:1f:f9:2b:3b:35:76:c4:
         dc:e5:6a:1a:8a:38:93:c0:3a:4f:7b:bb:cf:48:66:fc:01:81:
         f7:2f:e4:89:ed:e4:59:df:e9:70:5c:0e:a6:32:ce:b3:18:3e:
         7d:26:d2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue May 18 06:04:43 2021 by LibreSSL & rpki-client.