RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/OtQQ2vsjw42m6H8GB10tp5ImNPM.cer (download)

Subject key identifier:   3A:D4:10:DA:FB:23:C3:8D:A6:E8:7F:06:07:5D:2D:A7:92:26:34:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1123901/0/3AD410DAFB23C38DA6E87F06075D2DA7922634F3.mft
CA Repository:            nostromo.heficed.net/repo/1123901/0/
Notification URL:         https://nostromo.heficed.net/rrdp/notification.xml
Subordinate resources:
    1: AS: 48578
    1: IP: 45.137.132.0/22

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/OtQQ2vsjw42m6H8GB10tp5ImNPM.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503231598695 (0x752af0d067)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:01:01 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=3ad410dafb23c38da6e87f06075d2da7922634f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fb:82:aa:d1:71:f3:f9:9f:8b:4a:67:e8:d5:
                    01:1a:71:a5:90:83:81:d8:b2:6a:72:f8:e8:f1:2c:
                    db:87:85:00:96:05:ef:83:03:2c:28:8a:3c:3c:27:
                    1c:53:f9:9d:70:1f:93:da:4e:23:00:74:e6:54:4e:
                    bf:66:78:a3:fb:be:e6:9b:bb:56:c9:05:3b:92:b3:
                    48:61:64:f6:96:1f:e5:bf:0f:10:1c:48:b3:83:98:
                    3b:fa:6d:01:28:d3:38:91:53:e0:4b:d2:09:8e:c4:
                    38:1a:03:47:b6:ff:39:e1:91:cb:77:35:4f:f5:d7:
                    8f:cf:23:7d:99:3c:aa:ee:c3:ff:be:58:67:e2:fe:
                    1d:b6:24:a3:5c:92:8f:48:7e:56:d4:1c:60:d1:51:
                    cf:c4:b2:d4:b7:2c:c7:3e:71:0a:09:d4:6f:9e:21:
                    d5:fe:f4:ac:25:04:29:da:61:b2:6a:1c:29:5b:a3:
                    4e:78:bb:a8:9e:b4:07:3c:74:45:da:08:76:e8:39:
                    85:c5:fd:fe:2e:24:c6:49:0f:ce:36:7d:da:62:2a:
                    db:f9:89:74:a0:ee:c2:88:91:a0:4a:5f:fe:22:d0:
                    63:21:2c:b7:48:f6:78:d5:a4:96:47:9b:fb:36:a6:
                    e2:f3:62:a8:93:c5:47:a6:1c:bf:f5:06:60:04:dc:
                    e5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3A:D4:10:DA:FB:23:C3:8D:A6:E8:7F:06:07:5D:2D:A7:92:26:34:F3
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123901/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123901/0/3AD410DAFB23C38DA6E87F06075D2DA7922634F3.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.132.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48578

    Signature Algorithm: sha256WithRSAEncryption
         96:6a:56:4b:b2:f7:cd:94:fc:c2:f7:67:81:37:b5:98:f6:ae:
         2d:66:27:b1:39:da:40:70:f1:5c:23:d0:ff:16:ec:01:95:de:
         5f:64:f6:17:7b:a4:23:9b:f6:9a:48:58:a0:fb:1c:5b:c0:50:
         e7:3f:96:4b:cc:c1:95:4a:89:04:66:01:67:b0:90:30:a2:72:
         ec:5d:a2:fa:f7:89:0f:a8:e6:56:1c:eb:44:c6:68:c0:eb:3c:
         9e:01:e9:a1:10:7a:a6:38:42:63:32:5f:b9:98:9b:5e:70:18:
         2b:82:b2:e3:92:5b:57:74:fd:bf:4e:61:b8:67:17:5a:13:72:
         6d:5d:b4:1f:87:76:43:29:91:de:a6:c6:f3:19:38:54:60:96:
         3d:90:17:df:50:a3:d1:03:87:ea:b5:5d:07:a6:86:5f:6c:16:
         19:10:a4:5f:c9:44:3d:1c:02:99:7e:13:7d:9a:9a:91:ec:e7:
         29:d3:23:9d:32:20:ef:25:34:88:9a:67:75:c4:da:23:ae:d2:
         80:12:03:95:18:d7:1b:40:f7:58:89:dc:88:42:e7:6f:0d:05:
         f4:86:b1:19:a9:a2:20:dd:0e:ad:e3:1c:c3:06:b9:3a:8b:01:
         81:fd:74:72:dd:c7:38:a5:e9:51:f0:b1:6c:42:44:8d:72:3f:
         93:ae:c5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:24:11 2021 by LibreSSL & rpki-client.