RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/fUESYrlhSrFqD9rM9wNnbG_XsGY.cer (download)

Subject key identifier:   7D:41:12:62:B9:61:4A:B1:6A:0F:DA:CC:F7:03:67:6C:6F:D7:B0:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1123851/0/7D411262B9614AB16A0FDACCF703676C6FD7B066.mft
CA Repository:            nostromo.heficed.net/repo/1123851/0/
Notification URL:         https://nostromo.heficed.net/rrdp/notification.xml
Subordinate resources:
    1: AS: 42414
    1: IP: 45.93.44.0/22

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/fUESYrlhSrFqD9rM9wNnbG_XsGY.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503137714315 (0x752558408b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:00:41 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=7d411262b9614ab16a0fdaccf703676c6fd7b066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:33:e7:b9:c5:5c:9c:3a:35:f0:8a:4d:ec:ac:
                    e6:9d:f3:a1:92:2f:92:68:e8:32:3e:d4:e5:93:ea:
                    9c:8a:d9:58:73:42:90:72:17:b7:e1:54:9f:c9:23:
                    19:c6:36:94:c1:5c:b7:b5:50:b2:b1:1e:93:62:95:
                    8d:5d:a8:ea:ed:cf:b2:d4:11:1b:7a:95:a9:f3:f5:
                    d4:23:73:d5:44:17:83:6b:a9:68:7c:d2:bb:d3:ad:
                    2a:ab:d7:37:04:95:02:9a:fa:33:a2:56:28:39:72:
                    22:91:2a:1b:ec:c0:27:4f:c9:88:6c:72:99:76:28:
                    6e:8e:76:a6:d1:ce:85:99:ad:b4:7d:ce:01:09:43:
                    44:f8:7a:0c:f4:34:3b:d4:2d:1e:1a:a1:5c:26:d7:
                    de:0b:e7:d1:bd:a7:ad:12:63:13:cf:5a:72:6c:0a:
                    9e:1c:18:58:e1:29:18:b7:69:0d:60:90:1e:8a:b4:
                    ed:4b:e9:f5:9a:3f:1b:23:90:59:d9:01:c4:11:0a:
                    48:e3:30:e8:32:b1:07:1a:a6:ff:b9:6d:89:ba:5e:
                    b8:37:cc:be:49:1c:53:59:14:84:cb:f4:7f:22:4b:
                    73:23:27:b0:04:c9:6a:08:4d:48:21:f3:81:22:51:
                    3e:39:d2:de:cc:ec:a7:3a:b4:bf:3f:6a:7b:f2:12:
                    df:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7D:41:12:62:B9:61:4A:B1:6A:0F:DA:CC:F7:03:67:6C:6F:D7:B0:66
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123851/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123851/0/7D411262B9614AB16A0FDACCF703676C6FD7B066.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....-],
            sbgp-autonomousSysNum: critical
                0...0......
    Signature Algorithm: sha256WithRSAEncryption
         86:0f:ca:e3:02:3b:cd:00:9c:f9:08:28:f1:4c:f8:cc:df:e7:
         cc:2f:78:56:5d:37:0f:a9:27:4e:c6:d0:4d:da:a1:47:3d:1e:
         89:c2:35:44:fa:8c:27:4a:0a:5e:03:15:67:45:60:ab:28:0c:
         1f:2e:82:10:a9:ab:70:6d:e8:e2:c1:b8:b9:8b:bb:9b:62:ae:
         7a:f6:37:ac:88:c7:1d:b5:e4:32:68:49:bf:0f:9b:88:fc:87:
         6b:3f:ed:5c:ce:8e:c2:0f:76:85:58:b3:35:a9:91:31:14:3a:
         3a:a7:a2:bb:79:8a:c8:55:9b:e6:92:c6:71:48:1f:9f:a8:1a:
         6b:59:0d:eb:92:a6:da:5c:61:57:2f:25:91:c8:46:e4:79:38:
         ed:ce:92:e8:07:58:b3:6e:91:1c:35:df:da:94:5d:68:49:eb:
         9c:5e:ef:43:c0:69:ac:a5:6e:ef:30:2f:9e:c4:de:66:c2:57:
         92:07:a1:4b:d1:47:b0:d7:f1:3c:93:ae:34:5a:8f:fc:75:82:
         ab:d8:37:c7:a3:3d:e4:e9:2f:86:d7:33:7f:c3:3b:9c:31:c8:
         cb:bd:e8:35:97:6b:07:1e:63:a8:90:44:b8:0e:0b:e8:55:ff:
         e8:b9:8f:67:06:ac:19:08:e8:74:b5:a0:e2:a8:47:5b:4d:60:
         88:67:f0:e9
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIFdSVYQIswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMDAwNDFaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDdkNDExMjYyYjk2
MTRhYjE2YTBmZGFjY2Y3MDM2NzZjNmZkN2IwNjYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDqM+e5xVycOjXwik3srOad86GSL5Jo6DI+1OWT6pyK2Vhz
QpByF7fhVJ/JIxnGNpTBXLe1ULKxHpNilY1dqOrtz7LUERt6lanz9dQjc9VEF4Nr
qWh80rvTrSqr1zcElQKa+jOiVig5ciKRKhvswCdPyYhscpl2KG6OdqbRzoWZrbR9
zgEJQ0T4egz0NDvULR4aoVwm194L59G9p60SYxPPWnJsCp4cGFjhKRi3aQ1gkB6K
tO1L6fWaPxsjkFnZAcQRCkjjMOgysQcapv+5bYm6Xrg3zL5JHFNZFITL9H8iS3Mj
J7AEyWoITUgh84EiUT450t7M7Kc6tL8/anvyEt/HAgMBAAGjggJsMIICaDAdBgNV
HQ4EFgQUfUESYrlhSrFqD9rM9wNnbG/XsGYwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCB
8AYIKwYBBQUHAQsEgeMwgeAwOAYIKwYBBQUHMAWGLHJzeW5jOi8vbm9zdHJvbW8u
aGVmaWNlZC5uZXQvcmVwby8xMTIzODUxLzAvMGQGCCsGAQUFBzAKhlhyc3luYzov
L25vc3Ryb21vLmhlZmljZWQubmV0L3JlcG8vMTEyMzg1MS8wLzdENDExMjYyQjk2
MTRBQjE2QTBGREFDQ0Y3MDM2NzZDNkZEN0IwNjYubWZ0MD4GCCsGAQUFBzANhjJo
dHRwczovL25vc3Ryb21vLmhlZmljZWQubmV0L3JyZHAvbm90aWZpY2F0aW9uLnht
bDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAi1dLDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMApa4wDQYJKoZIhvcNAQEL
BQADggEBAIYPyuMCO80AnPkIKPFM+Mzf58wveFZdNw+pJ07G0E3aoUc9HonCNUT6
jCdKCl4DFWdFYKsoDB8ughCpq3Bt6OLBuLmLu5tirnr2N6yIxx215DJoSb8Pm4j8
h2s/7VzOjsIPdoVYszWpkTEUOjqnort5ishVm+aSxnFIH5+oGmtZDeuSptpcYVcv
JZHIRuR5OO3OkugHWLNukRw139qUXWhJ65xe70PAaaylbu8wL57E3mbCV5IHoUvR
R7DX8TyTrjRaj/x1gqvYN8ejPeTpL4bXM3/DO5wxyMu96DWXawceY6iQRLgOC+hV
/+i5j2cGrBkI6HS1oOKoR1tNYIhn8Ok=
-----END CERTIFICATE-----

Generated at Tue Jul 27 13:56:58 2021 by LibreSSL & rpki-client.