RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/SxUe13AmKwJZLBeVBFH8t1_ygEg.cer (download)

Subject key identifier:   4B:15:1E:D7:70:26:2B:02:59:2C:17:95:04:51:FC:B7:5F:F2:80:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1123811/0/4B151ED770262B02592C17950451FCB75FF28048.mft
CA Repository:            nostromo.heficed.net/repo/1123811/0/
Notification URL:         https://nostromo.heficed.net/rrdp/notification.xml
Subordinate resources:
    1: IP: 91.233.198.0/24

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/SxUe13AmKwJZLBeVBFH8t1_ygEg.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503827436420 (0x754e749384)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:02:56 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=4b151ed770262b02592c17950451fcb75ff28048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:bd:4d:7a:40:3b:80:19:34:2e:93:b7:3d:fc:
                    28:98:54:cd:2a:fa:ee:62:ae:42:45:93:60:0c:11:
                    8e:7d:53:4b:81:e0:15:cf:e0:e7:0b:d0:be:18:d5:
                    eb:33:6c:df:f5:0e:87:6f:49:14:da:b4:28:37:f4:
                    1d:22:3c:5c:6d:10:9c:c8:9e:34:00:50:b2:b5:95:
                    b6:0c:cf:22:53:5d:83:85:a3:e2:9c:b3:9d:c3:9b:
                    5d:31:c4:19:64:a1:6a:22:b3:4e:67:7a:8b:d1:f1:
                    fb:23:2a:c9:47:dc:18:64:02:dc:91:d8:56:38:0e:
                    b9:49:df:de:99:58:52:ce:7e:4b:cc:b9:9d:af:a0:
                    1f:41:71:85:a0:b2:dc:54:34:3c:c1:05:32:6c:a3:
                    5c:60:bd:4d:82:9b:2f:c1:d7:ab:50:59:c2:36:fc:
                    6d:73:a3:91:01:3b:53:9b:c4:b0:68:4c:48:68:ce:
                    1c:b2:f6:aa:a6:8c:0c:bd:82:fa:b1:23:39:e3:ea:
                    00:28:7c:91:0a:78:f6:1b:8a:8f:6d:45:77:3c:c8:
                    7a:3d:95:00:72:bb:4b:9d:fd:9d:1e:db:3c:1b:9d:
                    de:f8:7c:ce:2c:8d:8e:44:be:04:27:94:1a:df:c1:
                    e2:4b:1e:a0:bf:e9:cd:7c:24:5b:d8:5d:4a:f2:01:
                    b9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4B:15:1E:D7:70:26:2B:02:59:2C:17:95:04:51:FC:B7:5F:F2:80:48
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123811/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123811/0/4B151ED770262B02592C17950451FCB75FF28048.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....[..
    Signature Algorithm: sha256WithRSAEncryption
         72:f0:42:79:0c:e5:25:09:d8:1b:8e:f9:6c:c3:21:af:50:78:
         1f:49:4b:57:c5:a8:2e:66:16:3f:99:9a:9b:ce:7d:59:56:c0:
         91:cc:ea:d8:cb:20:da:4d:5e:eb:1f:9f:d9:43:f8:41:ab:e0:
         4d:41:0f:aa:07:93:20:bb:98:de:e2:58:09:2f:13:2f:99:81:
         66:ab:45:06:3b:96:3e:7e:85:be:15:1f:48:7b:6c:0c:9e:17:
         a0:22:e8:49:cf:42:5a:18:48:a5:d2:0c:1c:3b:3f:21:38:3b:
         e4:94:d5:54:ee:af:06:17:cb:5f:2c:37:59:59:4c:3c:17:74:
         c1:cb:52:94:05:1c:e8:6b:19:e1:fd:9d:a6:4b:a7:ea:40:1e:
         04:50:f4:a6:1f:d5:0f:fb:e7:f0:93:3a:8f:e2:38:f8:50:3b:
         12:40:f7:8d:df:e0:f7:b7:59:27:c4:16:93:8a:d8:7e:19:ca:
         e0:c7:92:fb:0d:f0:25:2a:f9:76:16:c1:74:02:7a:de:61:4e:
         bd:26:3b:38:22:a1:62:e2:ec:56:4f:ac:f5:14:03:24:b1:90:
         e6:cc:08:68:3c:7f:2c:a1:2b:ad:53:c4:99:1d:3a:2b:8d:f3:
         30:0c:a7:39:0a:c2:de:e1:51:2e:6d:b4:d6:ac:f6:bb:2c:c2:
         0c:4d:e6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Aug 1 19:36:03 2021 by LibreSSL & rpki-client.