RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/L4oC2eNHFEmN1qZSpQD-wiluhXU.cer (download)

Subject key identifier:   2F:8A:02:D9:E3:47:14:49:8D:D6:A6:52:A5:00:FE:C2:29:6E:85:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1124971/0/2F8A02D9E34714498DD6A652A500FEC2296E8575.mft
CA Repository:            nostromo.heficed.net/repo/1124971/0/
Notification URL:         https://nostromo.heficed.net/rrdp/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2022-07-01T00:00:00Z
    Resources:
    1: AS: 206164

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/L4oC2eNHFEmN1qZSpQD-wiluhXU.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 645269845945 (0x963d1477b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov 23 07:40:59 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=2f8a02d9e34714498dd6a652a500fec2296e8575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:f8:6e:38:61:c2:fe:59:23:8e:b3:d6:0c:a9:
                    64:d3:f5:ea:66:93:c9:d4:a2:1b:d2:51:ab:55:a0:
                    5b:93:e1:c3:77:1c:39:03:18:cb:fa:3a:b2:21:e7:
                    15:96:42:63:ce:c8:6e:c1:d5:cd:04:84:3e:82:e4:
                    03:0e:24:6d:3c:f3:d9:63:99:cf:ac:68:9d:91:9d:
                    85:b1:ad:fe:88:68:9e:9e:5b:b2:37:72:23:60:77:
                    b5:93:e2:af:26:86:74:66:8e:03:ec:3d:02:d1:89:
                    ff:64:d6:06:d7:2d:48:3e:46:f5:0d:44:d4:83:59:
                    e9:1f:83:14:cf:7b:77:ac:c3:40:af:4a:a7:aa:18:
                    77:5a:b6:19:ec:68:1b:38:8d:5f:40:3b:1c:cf:b9:
                    29:2c:6c:2a:fa:33:01:4a:f7:53:d7:60:fe:f4:71:
                    a7:06:91:f6:d4:b9:0d:a6:a0:d8:3f:68:11:78:76:
                    51:49:49:95:a7:28:22:ba:19:a4:d8:6b:87:82:2f:
                    f5:58:2d:91:48:12:67:95:8b:9c:45:13:2c:7b:df:
                    30:fa:a1:19:a2:e8:d0:22:47:56:c9:74:79:0c:aa:
                    c5:60:15:e2:08:f3:86:5d:e8:d8:ca:3d:f1:87:49:
                    1c:d6:77:71:c0:76:f2:91:99:9e:13:77:bd:48:f3:
                    27:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                2F:8A:02:D9:E3:47:14:49:8D:D6:A6:52:A5:00:FE:C2:29:6E:85:75
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1124971/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1124971/0/2F8A02D9E34714498DD6A652A500FEC2296E8575.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206164

    Signature Algorithm: sha256WithRSAEncryption
         5b:ba:46:d4:50:5b:78:d5:bd:80:03:e0:bc:f5:b1:25:85:ca:
         06:3e:9c:74:8c:c9:d5:e7:d4:62:b0:0e:ba:18:2c:27:22:cc:
         3a:b8:51:f6:49:3f:a6:12:24:ec:2e:60:b0:be:21:68:f2:fd:
         a2:b1:d5:8f:2a:58:bc:f2:81:0c:61:ea:ad:89:44:66:1b:84:
         5b:64:6b:40:1d:15:f7:45:67:62:91:13:03:d8:76:24:87:26:
         10:52:8c:19:79:dc:e0:67:95:19:ac:68:25:37:69:56:27:5d:
         5d:44:8f:cf:1e:70:3b:ad:5f:37:72:a5:dc:f7:61:d7:e1:23:
         94:37:d6:88:a4:99:6e:94:5f:b9:dc:13:b1:ed:32:ca:c5:42:
         8b:89:85:4b:0a:4a:2c:6e:f0:1d:7b:2e:cc:24:8f:78:e7:56:
         3b:d8:2d:78:2b:07:a7:38:12:e2:cf:11:06:2a:f0:fd:3c:80:
         d3:36:a3:2f:25:5b:c4:78:3e:1d:a6:9a:cc:62:65:79:14:44:
         64:a8:63:7c:ea:32:aa:53:20:0e:81:2f:f6:18:62:63:e3:4b:
         ab:f2:d2:89:a1:40:23:41:e8:a3:ce:24:24:18:75:b8:1f:20:
         31:b3:41:42:c8:b1:63:2d:91:84:73:00:40:63:15:b2:0a:d9:
         24:35:6f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Nov 23 10:09:05 2021 by LibreSSL & rpki-client.