RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/RSIRAPIoSTVlzCy2reiSJSyxd84.cer (download)

Subject key identifier:   45:22:11:00:F2:28:49:35:65:CC:2C:B6:AD:E8:92:25:2C:B1:77:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1123762/0/45221100F228493565CC2CB6ADE892252CB177CE.mft
CA Repository:            nostromo.heficed.net/repo/1123762/0/
Notification URL:         https://nostromo.heficed.net/rrdp/notification.xml
Subordinate resources:
    1: IP: 85.208.72.0/22

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/RSIRAPIoSTVlzCy2reiSJSyxd84.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503309462441 (0x752f94eba9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:01:20 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=45221100f228493565cc2cb6ade892252cb177ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:80:31:63:a8:6a:16:4c:d9:08:da:64:e5:eb:
                    e5:08:5f:e8:aa:0d:c7:49:1d:e9:1f:73:3b:1b:5f:
                    70:a0:81:ff:76:9a:14:f1:19:59:31:56:e4:5d:ce:
                    d2:7b:49:32:e3:fc:5c:cb:71:20:48:72:1e:99:d1:
                    04:eb:33:82:c9:75:87:d2:b4:b1:45:50:88:75:41:
                    8c:97:08:a9:2c:44:23:ea:73:9e:57:ea:ba:e6:50:
                    3e:8c:40:bd:d7:98:2e:3b:db:a6:d2:5f:d7:4a:99:
                    40:29:16:a3:90:48:94:41:1f:4f:42:d4:fe:86:e1:
                    3c:f9:5d:28:e1:a6:3f:5e:77:7c:57:ed:03:07:b2:
                    fc:c2:42:e9:74:23:71:a5:ee:12:cf:92:9d:c1:03:
                    b5:02:87:ab:6d:16:44:fe:d0:50:a7:17:71:22:c8:
                    af:28:81:91:0b:3c:2e:d7:d3:fb:12:66:0a:e8:cf:
                    4c:51:db:e5:b7:c2:59:6c:fd:7e:bd:86:22:84:9f:
                    f3:e0:92:b5:35:86:de:78:7d:78:f0:e6:6c:d3:c3:
                    ef:fd:21:ef:82:5f:d9:19:e0:46:5d:36:df:40:a4:
                    9b:8b:f1:f5:08:5f:f7:e5:42:54:9d:a6:dd:f4:5d:
                    7d:5e:df:c9:f3:8f:fd:f9:32:6c:15:4c:53:b1:08:
                    66:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                45:22:11:00:F2:28:49:35:65:CC:2C:B6:AD:E8:92:25:2C:B1:77:CE
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123762/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123762/0/45221100F228493565CC2CB6ADE892252CB177CE.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....U.H
    Signature Algorithm: sha256WithRSAEncryption
         54:97:de:c5:15:c9:b4:65:5a:6a:e2:1c:e1:35:93:65:0d:2f:
         40:0b:48:f3:8f:f8:bc:59:fa:fa:71:21:cd:cc:95:65:85:17:
         76:8b:25:6c:59:6b:ac:51:a9:d2:da:27:e2:2e:f4:40:fa:29:
         7c:70:5f:5f:c0:94:a8:9b:bd:c6:79:a7:f4:22:96:a9:f9:19:
         ca:61:5f:b8:14:b9:78:d5:77:c5:d6:8f:17:49:50:a8:07:a6:
         1e:ed:4c:cf:40:8c:d4:7c:7e:1d:2d:e1:d0:11:f6:5c:07:87:
         2f:4b:36:42:5a:e8:a4:74:ab:14:37:71:a7:40:11:ef:68:b2:
         6e:8b:65:aa:9f:99:86:6f:de:a1:85:06:ba:1f:6b:c7:f3:d8:
         dc:23:3c:b7:64:3f:c9:fe:d6:bd:38:90:6d:07:1b:db:9c:29:
         8f:41:bb:2e:49:54:b5:84:1f:e0:1a:45:96:9d:32:7a:f7:03:
         87:53:4e:d7:7b:a2:9a:88:cf:5c:42:70:d2:47:3c:1a:da:c4:
         43:c6:f5:bd:4a:b8:4c:af:e2:90:04:f3:75:1b:39:a2:d3:e9:
         30:5d:28:47:12:5b:3f:21:9f:9b:15:ae:56:c9:f9:32:1d:7a:
         f0:5d:6c:8a:2c:9b:15:20:b5:d3:62:0c:51:c7:7e:41:d8:be:
         f0:ea:6d:e6
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIFdS+U66kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMDAxMjBaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDQ1MjIxMTAwZjIy
ODQ5MzU2NWNjMmNiNmFkZTg5MjI1MmNiMTc3Y2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQChgDFjqGoWTNkI2mTl6+UIX+iqDcdJHekfczsbX3Cggf92
mhTxGVkxVuRdztJ7STLj/FzLcSBIch6Z0QTrM4LJdYfStLFFUIh1QYyXCKksRCPq
c55X6rrmUD6MQL3XmC4726bSX9dKmUApFqOQSJRBH09C1P6G4Tz5XSjhpj9ed3xX
7QMHsvzCQul0I3Gl7hLPkp3BA7UCh6ttFkT+0FCnF3EiyK8ogZELPC7X0/sSZgro
z0xR2+W3wlls/X69hiKEn/PgkrU1ht54fXjw5mzTw+/9Ie+CX9kZ4EZdNt9ApJuL
8fUIX/flQlSdpt30XX1e38nzj/35MmwVTFOxCGZzAgMBAAGjggJQMIICTDAdBgNV
HQ4EFgQURSIRAPIoSTVlzCy2reiSJSyxd84wHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCB
8AYIKwYBBQUHAQsEgeMwgeAwOAYIKwYBBQUHMAWGLHJzeW5jOi8vbm9zdHJvbW8u
aGVmaWNlZC5uZXQvcmVwby8xMTIzNzYyLzAvMGQGCCsGAQUFBzAKhlhyc3luYzov
L25vc3Ryb21vLmhlZmljZWQubmV0L3JlcG8vMTEyMzc2Mi8wLzQ1MjIxMTAwRjIy
ODQ5MzU2NUNDMkNCNkFERTg5MjI1MkNCMTc3Q0UubWZ0MD4GCCsGAQUFBzANhjJo
dHRwczovL25vc3Ryb21vLmhlZmljZWQubmV0L3JyZHAvbm90aWZpY2F0aW9uLnht
bDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAlXQSDANBgkqhkiG9w0BAQsFAAOCAQEAVJfexRXJtGVaauIc4TWTZQ0vQAtI
84/4vFn6+nEhzcyVZYUXdoslbFlrrFGp0ton4i70QPopfHBfX8CUqJu9xnmn9CKW
qfkZymFfuBS5eNV3xdaPF0lQqAemHu1Mz0CM1Hx+HS3h0BH2XAeHL0s2QlropHSr
FDdxp0AR72iybotlqp+Zhm/eoYUGuh9rx/PY3CM8t2Q/yf7WvTiQbQcb25wpj0G7
LklUtYQf4BpFlp0yevcDh1NO13uimojPXEJw0kc8GtrEQ8b1vUq4TK/ikATzdRs5
otPpMF0oRxJbPyGfmxWuVsn5Mh168F1siiybFSC102IMUcd+Qdi+8Opt5g==
-----END CERTIFICATE-----

Generated at Fri Jul 30 02:03:20 2021 by LibreSSL & rpki-client.