RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/dwOkmxFW0VEBSLRBLkhf6-hZORc.cer (download)

Subject key identifier:   77:03:A4:9B:11:56:D1:51:01:48:B4:41:2E:48:5F:EB:E8:59:39:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/635321/0/7703A49B1156D1510148B4412E485FEBE8593917.mft
CA Repository:            nostromo.heficed.net/repo/635321/0/
Notification URL:         https://nostromo.heficed.net/rrdp/notification.xml
Subordinate resources:
    1: AS: 209526
    1: IP: 185.139.0.0/22
    2: IP: 2a0a:9600::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/dwOkmxFW0VEBSLRBLkhf6-hZORc.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503784777990 (0x754be9a906)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:02:43 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=7703a49b1156d1510148b4412e485febe8593917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f2:c8:97:64:33:f8:ae:77:88:f1:d0:e4:cc:
                    0d:ad:c3:c5:a1:93:f4:b9:09:0f:95:2f:bb:1c:ca:
                    ba:88:30:8f:84:86:41:bb:6e:ba:d8:a4:56:42:26:
                    eb:b6:9f:40:fb:f6:c3:3f:b4:cb:dd:8e:ba:42:c6:
                    82:47:f3:d6:83:3e:a5:17:7f:91:89:d7:5c:b0:94:
                    04:9c:42:c5:b5:da:0e:da:42:f9:bb:2a:99:ce:3e:
                    da:52:c1:41:96:e3:2a:be:52:90:0d:fd:aa:ec:6e:
                    72:32:fb:2a:04:fc:ea:36:a8:fd:18:ef:6d:dc:8c:
                    49:4f:38:fa:75:62:27:a3:53:d2:7a:4b:ed:33:fb:
                    35:4f:ac:b7:75:e5:cd:8e:cd:6b:74:e4:27:f6:91:
                    c1:0f:7d:81:ac:93:d5:01:a2:18:21:ed:3f:15:36:
                    a7:6f:fa:00:1c:92:96:c0:6b:2d:78:9e:b7:48:40:
                    17:f5:e7:1f:7d:aa:8a:2a:69:0f:54:d4:4c:42:30:
                    c9:f8:1d:0c:30:a9:64:48:0e:0f:ed:dc:89:8a:fb:
                    c5:87:3d:77:12:b8:fe:ed:7d:0a:df:21:a9:c7:27:
                    30:7b:42:cb:90:2a:3d:bd:a4:b1:ab:c4:86:3a:e7:
                    25:69:f6:0d:87:a1:1b:d0:aa:bc:33:c6:52:63:47:
                    e3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                77:03:A4:9B:11:56:D1:51:01:48:B4:41:2E:48:5F:EB:E8:59:39:17
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/635321/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/635321/0/7703A49B1156D1510148B4412E485FEBE8593917.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.139.0.0/22
                IPv6:
                  2a0a:9600::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209526

    Signature Algorithm: sha256WithRSAEncryption
         a3:9d:4f:d8:bc:0a:d3:58:9e:16:89:53:bd:d7:67:b6:d2:4a:
         c4:96:ef:43:e8:1e:f5:75:9e:6b:a5:0d:53:45:89:3d:f5:35:
         dc:e4:5a:2c:9a:42:a9:e5:fc:c6:fd:33:e7:16:97:7f:08:d2:
         f0:50:a2:9e:83:51:5a:7b:9f:38:ce:89:9f:cf:b7:b7:f6:b4:
         46:df:29:fa:ed:b7:31:35:f7:b8:df:06:f1:1d:63:24:bd:88:
         38:1e:6c:62:36:f7:3b:81:bf:3a:78:2e:fe:a7:0f:4c:9a:85:
         37:e3:02:c4:93:e4:1a:ed:ec:e8:8c:6f:ff:11:75:e1:30:84:
         4b:58:4c:32:19:25:2d:4f:f8:2c:d1:f5:1f:53:e6:4a:af:57:
         e1:a6:f6:ee:d1:c7:13:6b:c3:76:d8:b7:03:20:6c:c1:16:23:
         de:be:0a:c8:58:8b:6c:9e:3c:77:37:2e:52:96:61:6c:3a:5a:
         f2:ee:aa:5a:df:7f:f6:3b:a1:34:b4:83:09:e9:7c:45:69:52:
         be:0b:2c:dc:bc:80:33:fb:42:ea:a4:b5:94:09:4e:22:3a:59:
         fb:a0:4a:cb:ca:88:e0:16:7e:d2:58:65:a2:7f:f4:bb:19:bd:
         c5:24:b2:0d:64:b0:53:f0:ba:1b:dd:a8:d6:b0:2b:80:75:e5:
         48:43:b4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:28:48 2021 by LibreSSL & rpki-client.