RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/DH8Yc9_zyb3RFgza4fGFcDN4p4w.cer (download)

Subject key identifier:   0C:7F:18:73:DF:F3:C9:BD:D1:16:0C:DA:E1:F1:85:70:33:78:A7:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1123931/0/0C7F1873DFF3C9BDD1160CDAE1F185703378A78C.mft
CA Repository:            nostromo.heficed.net/repo/1123931/0/
Notification URL:         https://nostromo.heficed.net/rrdp/notification.xml
Subordinate resources:
    1: AS: 213049
    1: IP: 45.137.156.0/22

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/DH8Yc9_zyb3RFgza4fGFcDN4p4w.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503799135158 (0x754cc4bbb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:02:49 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=0c7f1873dff3c9bdd1160cdae1f185703378a78c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7d:be:e9:87:1d:3f:ee:7b:5e:f4:92:5c:90:
                    ee:ad:1e:54:dd:5c:2e:7e:01:54:85:40:ac:48:92:
                    12:56:9d:3e:e1:ad:79:4a:ba:7e:c0:c4:ff:e2:fe:
                    ad:55:73:b1:3c:bf:83:a2:fd:fe:f9:3b:b0:0b:4d:
                    8b:7b:42:84:45:3f:a4:78:e6:91:1f:9f:b8:63:71:
                    d4:fa:15:47:0e:0d:27:de:45:c8:a4:5c:f4:d8:8c:
                    96:f8:d6:af:9d:fb:bb:b0:8a:b6:63:b1:38:0c:4d:
                    39:94:b8:ea:c7:26:97:01:96:ad:c4:6a:f6:fa:7d:
                    7c:f5:e4:c4:e0:36:70:a5:4e:e4:1d:37:f6:d5:bf:
                    aa:46:cc:6c:0a:c6:9c:32:60:58:8d:05:62:b8:f2:
                    ad:49:6e:15:62:06:b0:4f:ac:48:1b:8c:29:da:5d:
                    8d:9c:ef:10:b4:24:e0:5b:58:75:a7:5c:8c:0f:d8:
                    5b:b7:6c:5a:ea:af:09:1c:0e:e3:08:c6:f6:b8:c7:
                    22:e4:f8:4d:d2:32:eb:b1:d1:3a:19:c5:9f:2e:18:
                    35:d0:32:a0:f9:99:15:97:d0:db:c5:7b:d0:98:94:
                    a0:aa:1b:c1:de:d9:c5:65:99:d4:2a:2f:73:4e:d9:
                    13:85:b2:4e:b3:4c:c5:18:72:1f:3c:dc:e7:84:92:
                    cb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0C:7F:18:73:DF:F3:C9:BD:D1:16:0C:DA:E1:F1:85:70:33:78:A7:8C
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123931/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123931/0/0C7F1873DFF3C9BDD1160CDAE1F185703378A78C.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....-..
            sbgp-autonomousSysNum: critical
                0...0....@9
    Signature Algorithm: sha256WithRSAEncryption
         6e:b9:ea:c8:f0:b9:e1:bc:b6:f9:d4:27:e3:67:4e:06:d5:a5:
         e1:f1:22:2a:80:17:9d:8b:69:a7:f5:cf:3b:85:a4:75:e6:cb:
         46:e8:ba:53:37:e4:fc:b9:54:4b:24:85:17:5c:81:ae:60:70:
         8f:1b:98:a2:a8:e7:c9:d6:01:98:3e:67:fa:b6:77:32:1f:15:
         a5:41:0e:b8:3f:43:fd:0a:a0:55:ba:20:cd:6a:29:9f:35:91:
         22:23:dc:38:9a:c5:e1:c3:64:36:a3:c4:83:db:50:1a:99:b0:
         2a:17:70:21:28:9c:da:70:fe:7b:e6:e0:02:03:2b:71:33:6d:
         81:92:cc:d7:8d:de:33:e0:2e:2f:17:fc:3f:65:34:9b:f3:76:
         f6:6a:c6:df:e9:ae:a8:a1:59:50:6b:79:10:7c:19:1b:2a:53:
         0a:26:0a:37:24:02:63:47:30:f7:7d:0b:f9:15:7c:99:25:fd:
         a4:ed:d1:32:d4:1b:87:df:b7:15:19:ee:d7:09:f1:00:b0:39:
         7c:5d:0a:bc:7e:10:c3:46:06:c7:e6:a9:29:44:c1:a6:51:38:
         22:80:82:55:98:e4:df:e8:95:ba:f9:4c:e8:46:c1:16:07:2c:
         87:54:d6:20:ad:b2:a1:51:d2:0d:7f:b4:0a:42:5e:b2:f6:6a:
         93:ee:83:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Aug 1 22:06:41 2021 by LibreSSL & rpki-client.