RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/f5M6YUWk853a4eIkkkx-Cy9OcNU.cer (download)

Subject key identifier:   7F:93:3A:61:45:A4:F3:9D:DA:E1:E2:24:92:4C:7E:0B:2F:4E:70:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1123891/0/7F933A6145A4F39DDAE1E224924C7E0B2F4E70D5.mft
CA Repository:            nostromo.heficed.net/repo/1123891/0/
Notification URL:         https://nostromo.heficed.net/rrdp/notification.xml
Subordinate resources:
    1: AS: 56762
    1: IP: 45.133.176.0/22

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/f5M6YUWk853a4eIkkkx-Cy9OcNU.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503823988139 (0x754e3ff5ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:02:54 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=7f933a6145a4f39ddae1e224924c7e0b2f4e70d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a0:0f:b0:73:37:e3:b6:0c:9a:e8:54:94:9c:
                    79:66:7d:9f:11:c7:c4:65:6a:9e:d4:b6:85:32:2d:
                    cc:3f:1a:81:56:b3:52:cf:8a:04:18:97:58:dc:07:
                    23:35:bb:2f:7c:16:bb:df:ce:f7:e2:2e:d5:5e:dc:
                    a6:3e:22:26:d4:ed:22:8a:b0:58:ea:d9:9b:84:c2:
                    6e:a5:78:7a:99:f4:2b:17:ad:3e:8d:ea:66:66:af:
                    b0:8b:b7:db:c3:3d:f3:66:67:fe:9d:61:74:b8:ff:
                    c6:1f:87:33:18:a8:18:59:65:dc:84:f2:0e:77:62:
                    90:3e:cd:d3:d7:00:e2:4e:cc:ea:48:f6:43:eb:03:
                    d6:99:4a:fa:28:f2:dc:2d:8a:00:8d:1e:02:cd:07:
                    53:26:d9:87:22:bc:8d:0c:4f:72:94:43:c0:e3:4a:
                    5a:66:84:10:c0:33:90:40:8b:d5:fe:1f:af:76:02:
                    37:e5:74:2d:2c:f1:f0:22:5a:60:d5:ee:bd:f5:17:
                    15:9f:32:92:ee:13:cf:eb:1b:02:11:8b:da:9f:47:
                    a9:33:f8:b8:a3:84:77:83:bf:fa:0a:ec:aa:ad:28:
                    ef:39:30:36:c2:a2:c6:01:92:eb:97:c7:f1:88:2c:
                    64:5a:41:ba:9c:d0:92:2d:a4:9a:fc:bc:48:a0:1f:
                    90:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7F:93:3A:61:45:A4:F3:9D:DA:E1:E2:24:92:4C:7E:0B:2F:4E:70:D5
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123891/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123891/0/7F933A6145A4F39DDAE1E224924C7E0B2F4E70D5.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.133.176.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56762

    Signature Algorithm: sha256WithRSAEncryption
         7b:28:f2:81:ff:1c:99:8d:d7:14:5a:ff:45:61:2c:8c:2d:40:
         1e:65:98:2e:34:4a:b7:58:1b:d3:b3:61:f9:a5:58:bb:13:7d:
         d6:a1:50:e8:fb:81:5e:b6:e1:3b:b8:a6:96:77:f8:1c:63:3f:
         14:09:91:c6:24:f4:03:1f:45:86:5d:4f:8d:3e:87:7d:12:19:
         f5:d6:78:86:cb:6e:ac:7d:07:b5:cf:ad:24:9b:74:c8:cd:88:
         9d:ff:74:1a:58:97:b0:92:57:5f:58:aa:2a:72:99:70:52:1d:
         4d:0e:a7:18:56:1d:4e:09:65:5b:4a:f2:19:f5:2e:e2:a3:36:
         32:70:d4:79:8e:4d:c9:8d:ff:c2:23:d8:c6:ee:10:67:93:8e:
         a4:2f:53:58:dc:4c:7b:e9:0d:0a:bf:fe:cc:cc:67:45:35:80:
         ad:10:ed:49:85:1a:e7:1c:c4:d1:af:c7:fb:6e:63:36:4a:50:
         21:a8:b8:57:2c:76:c6:fc:b4:07:6b:ca:98:67:9c:e8:01:08:
         3b:fa:04:b9:98:ac:c7:3d:b6:a3:ed:48:f8:ed:a2:7f:32:d9:
         98:53:f8:2a:7a:fa:60:c1:4d:8e:25:09:5b:de:9e:13:37:35:
         42:1d:ae:a7:a5:ce:01:7f:fd:d5:21:24:a2:5f:05:d1:83:cc:
         e8:9d:35:9b
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIFdU4/9aswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMDAyNTRaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDdmOTMzYTYxNDVh
NGYzOWRkYWUxZTIyNDkyNGM3ZTBiMmY0ZTcwZDUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5oA+wczfjtgya6FSUnHlmfZ8Rx8Rlap7UtoUyLcw/GoFW
s1LPigQYl1jcByM1uy98FrvfzvfiLtVe3KY+IibU7SKKsFjq2ZuEwm6leHqZ9CsX
rT6N6mZmr7CLt9vDPfNmZ/6dYXS4/8YfhzMYqBhZZdyE8g53YpA+zdPXAOJOzOpI
9kPrA9aZSvoo8twtigCNHgLNB1Mm2YcivI0MT3KUQ8DjSlpmhBDAM5BAi9X+H692
AjfldC0s8fAiWmDV7r31FxWfMpLuE8/rGwIRi9qfR6kz+LijhHeDv/oK7KqtKO85
MDbCosYBkuuXx/GILGRaQbqc0JItpJr8vEigH5ADAgMBAAGjggJsMIICaDAdBgNV
HQ4EFgQUf5M6YUWk853a4eIkkkx+Cy9OcNUwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCB
8AYIKwYBBQUHAQsEgeMwgeAwOAYIKwYBBQUHMAWGLHJzeW5jOi8vbm9zdHJvbW8u
aGVmaWNlZC5uZXQvcmVwby8xMTIzODkxLzAvMGQGCCsGAQUFBzAKhlhyc3luYzov
L25vc3Ryb21vLmhlZmljZWQubmV0L3JlcG8vMTEyMzg5MS8wLzdGOTMzQTYxNDVB
NEYzOUREQUUxRTIyNDkyNEM3RTBCMkY0RTcwRDUubWZ0MD4GCCsGAQUFBzANhjJo
dHRwczovL25vc3Ryb21vLmhlZmljZWQubmV0L3JyZHAvbm90aWZpY2F0aW9uLnht
bDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAi2FsDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA3bowDQYJKoZIhvcNAQEL
BQADggEBAHso8oH/HJmN1xRa/0VhLIwtQB5lmC40SrdYG9OzYfmlWLsTfdahUOj7
gV624Tu4ppZ3+BxjPxQJkcYk9AMfRYZdT40+h30SGfXWeIbLbqx9B7XPrSSbdMjN
iJ3/dBpYl7CSV19YqipymXBSHU0OpxhWHU4JZVtK8hn1LuKjNjJw1HmOTcmN/8Ij
2MbuEGeTjqQvU1jcTHvpDQq//szMZ0U1gK0Q7UmFGuccxNGvx/tuYzZKUCGouFcs
dsb8tAdryphnnOgBCDv6BLmYrMc9tqPtSPjton8y2ZhT+Cp6+mDBTY4lCVvenhM3
NUIdrqelzgF//dUhJKJfBdGDzOidNZs=
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:29:06 2021 by LibreSSL & rpki-client.