RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/FIRhCnTL__FGHkisL9yH7hVwsKs.cer (download)

Subject key identifier:   14:84:61:0A:74:CB:FF:F1:46:1E:48:AC:2F:DC:87:EE:15:70:B0:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1123612/0/1484610A74CBFFF1461E48AC2FDC87EE1570B0AB.mft
CA Repository:            nostromo.heficed.net/repo/1123612/0/
Notification URL:         https://nostromo.heficed.net/rrdp/notification.xml
Subordinate resources:
    1: IP: 92.118.160.0/22

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/FIRhCnTL__FGHkisL9yH7hVwsKs.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503852082774 (0x754feca656)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:02:58 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=1484610a74cbfff1461e48ac2fdc87ee1570b0ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7a:c8:15:65:2e:d4:51:46:72:33:2d:9b:6c:
                    52:a9:0c:0a:9f:a0:ea:ae:14:a5:60:55:2e:f7:ab:
                    4f:04:27:1d:03:46:d7:52:cd:2e:e9:8c:c9:94:e3:
                    38:e7:ba:f2:b7:04:a0:2d:4b:d4:64:aa:7d:28:ef:
                    3f:ec:a6:3d:92:84:84:15:b9:7c:ff:c1:c8:7a:1f:
                    b1:ea:c3:17:09:63:b2:01:33:94:42:f2:e8:db:c9:
                    d8:01:3d:c3:a7:ea:8a:9f:c3:86:19:77:49:fb:7c:
                    6a:dd:10:a7:83:d5:ba:0c:cc:20:28:ff:db:4a:a5:
                    c2:07:b9:2a:bb:b7:c7:51:0e:4e:fd:b3:20:e1:d8:
                    b7:9d:df:19:1d:2e:96:f3:22:f1:ab:17:88:66:57:
                    16:c6:94:fc:ec:72:2d:31:2f:a3:d4:a4:e6:51:7c:
                    cd:03:e9:fa:0d:8d:d8:14:ab:0e:d9:b7:55:30:6f:
                    76:2f:b1:83:56:0e:bf:0b:da:c7:03:dc:f6:09:30:
                    89:87:eb:84:a3:71:ac:0c:7b:4b:37:82:86:40:24:
                    18:ac:38:78:0e:bf:cc:af:5a:84:02:54:66:7b:59:
                    ca:ee:63:f0:51:46:8c:ad:6d:e0:3d:d2:68:d9:03:
                    de:24:76:93:1e:d0:b5:c8:92:a9:2a:db:25:61:37:
                    91:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                14:84:61:0A:74:CB:FF:F1:46:1E:48:AC:2F:DC:87:EE:15:70:B0:AB
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123612/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123612/0/1484610A74CBFFF1461E48AC2FDC87EE1570B0AB.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....\v.
    Signature Algorithm: sha256WithRSAEncryption
         63:ca:aa:af:6c:e9:79:20:ae:fe:c9:61:76:fd:5b:13:df:75:
         61:d2:dc:1c:12:10:e8:75:4e:c0:11:e8:50:85:ad:09:f8:ca:
         cf:0e:0a:7e:58:9a:90:07:d5:67:d1:6f:85:f7:0a:0d:2c:eb:
         71:37:89:c0:f6:85:86:17:10:01:56:52:4c:45:8d:90:96:8b:
         4b:1d:f7:cc:a7:e5:5a:d6:d0:b3:2d:84:3a:98:f7:04:96:00:
         d3:a0:3e:a5:03:1a:f5:fb:90:f0:d7:9e:c6:b0:e3:43:b8:ec:
         da:46:a4:b3:da:03:ef:3b:6f:5d:41:7e:b0:cd:a6:0d:41:ff:
         2c:1c:ef:bb:ed:c3:77:34:50:16:ad:96:80:34:32:b0:14:0d:
         41:67:66:a0:1c:28:85:78:f9:32:3f:bb:c5:b6:30:61:10:12:
         78:7a:34:3a:17:ec:aa:7c:78:82:81:c3:1c:4b:44:18:d1:85:
         c9:0f:a8:0f:fc:11:80:00:f1:c9:d6:ed:13:3e:b8:8f:6d:9b:
         60:b1:e5:51:84:9c:41:69:57:8c:9e:bc:96:ed:17:96:52:63:
         43:b6:73:05:58:9d:ef:fb:83:2a:74:d5:c1:ec:b5:3d:54:0d:
         dd:6d:27:64:cb:22:5b:0f:98:61:3a:3b:f8:d8:50:a4:4f:0f:
         8a:64:1f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Jul 30 02:02:01 2021 by LibreSSL & rpki-client.