RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/ZdfgDzqMj4p6oCPLaceQZv1oc98.cer (download)

Subject key identifier:   65:D7:E0:0F:3A:8C:8F:8A:7A:A0:23:CB:69:C7:90:66:FD:68:73:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1123591/0/65D7E00F3A8C8F8A7AA023CB69C79066FD6873DF.mft
CA Repository:            nostromo.heficed.net/repo/1123591/0/
Notification URL:         https://nostromo.heficed.net/rrdp/notification.xml
Subordinate resources:
    1: IP: 185.173.24.0/22
    2: IP: 2a0b:3300::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/ZdfgDzqMj4p6oCPLaceQZv1oc98.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503219447496 (0x752a3766c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:00:57 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=65d7e00f3a8c8f8a7aa023cb69c79066fd6873df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d5:88:62:17:50:a2:85:a9:68:3a:94:a6:ff:
                    8a:83:38:06:fd:5c:07:80:02:44:92:46:17:53:da:
                    b8:1d:c0:3a:51:97:cc:69:90:9a:1b:97:71:e5:0c:
                    6e:5b:bb:d7:1f:74:3d:c2:2e:4d:e3:35:08:b8:b9:
                    53:64:6f:b1:7b:8b:7c:e7:d5:2b:d2:77:c6:ea:97:
                    5e:ae:f2:55:4d:00:74:b2:f4:50:56:a5:c8:df:fb:
                    f1:40:42:2b:98:19:61:23:72:ef:1b:c5:6c:26:db:
                    0d:07:89:8f:9a:f8:bd:91:0f:d5:60:d6:63:0d:57:
                    47:73:6d:8f:a4:ba:95:6d:73:da:0e:e7:17:1d:06:
                    93:e6:a5:18:9d:32:9c:16:f6:ee:5a:39:b3:85:41:
                    4d:79:b6:2d:2c:21:f5:79:61:7f:b4:e0:8f:de:15:
                    1c:a5:24:e7:27:bc:ae:0d:99:f6:58:2e:3d:27:d7:
                    3f:09:2a:f1:b0:22:a1:d1:33:30:2d:7d:10:fd:59:
                    fc:45:27:e2:1f:5a:dd:7c:f7:c3:43:4f:3d:bc:3d:
                    da:f5:eb:bd:af:80:20:39:86:ae:47:fc:58:1d:6f:
                    da:92:b1:24:5a:b0:68:a0:82:c1:ea:f6:3d:3d:2c:
                    b1:cf:c0:c4:81:8a:e2:86:27:c7:69:ff:65:e3:13:
                    4e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                65:D7:E0:0F:3A:8C:8F:8A:7A:A0:23:CB:69:C7:90:66:FD:68:73:DF
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123591/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123591/0/65D7E00F3A8C8F8A7AA023CB69C79066FD6873DF.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.......0
....0....*.3.
    Signature Algorithm: sha256WithRSAEncryption
         19:51:36:d8:f9:21:5a:74:38:68:6e:e8:c6:e3:a9:c4:8b:03:
         1e:35:fb:ac:3c:89:21:6a:80:e4:17:9e:f2:97:79:4d:93:be:
         2d:97:63:a9:5e:9a:a2:f7:a7:02:36:15:5d:68:0b:78:4d:9e:
         6f:91:3e:52:91:e1:e4:be:90:ff:e2:c5:a9:70:18:11:28:58:
         b8:fa:96:09:26:61:d5:51:ff:08:e5:31:fc:3c:40:b5:f4:a0:
         77:0f:fd:d3:78:c9:04:3f:f2:93:80:35:f8:75:19:22:d8:1f:
         d9:19:c6:b6:00:cf:db:dd:3b:85:42:df:f3:29:8f:92:a1:6e:
         ff:ea:ff:61:b6:df:8b:b0:87:f1:a7:00:92:03:99:1d:ec:00:
         5f:6c:f7:25:34:21:fe:60:d8:b3:63:fc:47:06:9b:a4:10:7f:
         36:c9:d6:f5:74:2c:77:a8:aa:cc:48:0f:dd:25:ca:47:09:23:
         14:63:f1:25:2b:4f:d0:52:de:5b:3d:32:7f:cd:44:75:a4:fa:
         ba:b3:ea:30:eb:09:9a:b1:1f:85:36:23:60:18:11:64:1e:17:
         11:67:4b:59:0e:e1:81:29:a1:53:7d:9f:48:5d:25:94:3a:31:
         19:7b:6b:ba:cb:75:59:91:bd:de:73:68:35:40:b6:d3:98:15:
         81:0f:a3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jul 27 11:49:01 2021 by LibreSSL & rpki-client.