RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/LQFdl7h57P7I_Ee3V6f2Vw3L0f8.cer (download)

Subject key identifier:   2D:01:5D:97:B8:79:EC:FE:C8:FC:47:B7:57:A7:F6:57:0D:CB:D1:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/635372/0/2D015D97B879ECFEC8FC47B757A7F6570DCBD1FF.mft
CA Repository:            nostromo.heficed.net/repo/635372/0/
Notification URL:         https://nostromo.heficed.net/rrdp/notification.xml
Subordinate resources:
    1: IP: 2a03:fbc0::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/LQFdl7h57P7I_Ee3V6f2Vw3L0f8.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 598185875031 (0x8b46a81657)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 25 15:20:50 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=2d015d97b879ecfec8fc47b757a7f6570dcbd1ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0b:7c:9b:25:41:87:2e:1d:a9:a7:20:35:98:
                    fc:53:a4:e6:91:ab:91:f6:a0:e7:0c:59:87:94:c2:
                    44:60:9f:23:f0:6f:be:e0:59:49:e4:eb:44:da:ee:
                    27:ae:d7:1d:79:68:fa:11:f5:2e:af:8c:e5:2f:de:
                    9f:85:69:9e:f7:65:bf:1e:e4:37:5d:43:55:5b:be:
                    c2:0e:52:80:dc:94:bb:35:84:67:3c:14:e7:aa:63:
                    52:af:16:bf:ae:d1:d1:c5:1e:6b:7f:1b:02:01:d3:
                    7a:d1:59:39:0a:4d:0b:5c:41:6a:44:72:63:a6:bf:
                    15:be:6c:38:cc:fc:5d:58:d7:42:d3:5f:08:20:bd:
                    dd:6e:f5:2e:8b:5d:71:96:88:90:ec:e6:6d:13:a4:
                    05:05:ac:69:7f:2d:9c:0b:a0:4e:1a:5b:3f:6d:71:
                    40:95:0b:18:bf:dc:b9:8d:7b:6c:09:11:ed:fc:4e:
                    4f:63:52:87:f4:8a:21:f2:76:40:cd:67:04:a5:4a:
                    64:28:18:2f:74:73:51:d8:5d:56:c0:86:8c:6b:bb:
                    ee:8f:c5:b8:1f:83:ed:1e:b6:f7:a3:89:1b:9b:b3:
                    9c:19:8c:31:15:34:91:67:c3:5f:25:e4:0e:cf:ed:
                    9e:f2:f3:71:72:75:be:9f:41:56:c7:4f:d7:d5:2f:
                    0c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                2D:01:5D:97:B8:79:EC:FE:C8:FC:47:B7:57:A7:F6:57:0D:CB:D1:FF
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/635372/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/635372/0/2D015D97B879ECFEC8FC47B757A7F6570DCBD1FF.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0
....0....*...
    Signature Algorithm: sha256WithRSAEncryption
         05:c1:48:54:d8:e0:77:87:9e:a6:41:01:a4:9b:25:43:90:20:
         83:c7:e7:c2:a4:6e:cf:86:c5:72:cd:19:eb:e4:81:bf:b3:0a:
         27:d0:61:45:1f:32:8d:5e:9d:3e:9e:e3:b5:9d:28:d5:5d:a9:
         e1:2b:a7:13:3f:70:27:bd:5d:82:40:0e:a5:35:de:57:0c:7f:
         94:04:3c:a5:67:fa:c1:33:0f:99:d4:0f:6f:ca:47:1a:77:a3:
         9a:66:59:54:53:90:e9:5e:48:90:ba:24:be:ab:56:c8:f6:2c:
         b1:93:2e:d1:21:3b:82:6d:a9:29:11:ef:9f:f9:b4:79:18:2a:
         4f:5a:e0:84:01:fb:b8:e9:1d:29:85:bd:f4:29:91:5d:06:f4:
         c6:52:66:d9:fd:4a:24:d6:40:00:7b:1b:69:4d:12:19:fa:64:
         1e:dc:f1:0d:81:30:3d:57:3d:fc:c3:46:4c:b5:f9:b9:5e:60:
         af:4d:c7:2c:a3:45:50:bb:3a:d0:8f:23:e7:41:67:69:a8:f7:
         f4:9a:3b:88:52:81:48:8f:e3:45:04:7b:a2:5a:e3:92:96:19:
         a4:2b:0a:3e:a1:34:24:c5:03:78:b2:83:f3:81:3c:37:3e:52:
         ac:fb:fb:83:03:cf:01:84:54:2a:70:fc:3a:ae:bb:cb:00:2f:
         a3:0c:f5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri May 28 08:16:49 2021 by LibreSSL & rpki-client.