RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/fZnSdY8lJg54Pp-ty6LxBO6Ppes.cer (download)

Subject key identifier:   7D:99:D2:75:8F:25:26:0E:78:3E:9F:AD:CB:A2:F1:04:EE:8F:A5:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/635153/0/7D99D2758F25260E783E9FADCBA2F104EE8FA5EB.mft
CA Repository:            nostromo.heficed.net/repo/635153/0/
Notification URL:         https://nostromo.heficed.net/rrdp/notification.xml
Subordinate resources:
    1: IP: 141.98.88.0/22

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/fZnSdY8lJg54Pp-ty6LxBO6Ppes.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503207679601 (0x752983d671)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:00:53 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=7d99d2758f25260e783e9fadcba2f104ee8fa5eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6d:15:0b:4d:b1:16:97:9b:27:10:f6:f3:50:
                    e3:a4:7a:ab:c6:e0:a2:4e:b0:89:cd:65:39:a7:be:
                    64:01:98:8b:45:da:f8:60:dd:5f:28:a0:5a:0e:16:
                    1f:ef:f8:0a:76:f9:8c:d2:df:20:93:9d:6a:7c:95:
                    32:8d:8c:5e:50:18:2b:11:38:f1:21:d4:f0:07:a5:
                    9d:85:cd:17:88:82:4e:31:f9:47:ab:7f:e4:47:01:
                    89:71:11:db:e6:fd:5b:fc:c9:53:6f:5c:25:ea:a9:
                    75:3d:7b:e8:eb:8d:76:4e:7c:91:06:d0:ac:8f:1c:
                    0c:6c:64:06:dd:ad:dc:5d:ae:05:c6:66:84:e2:25:
                    37:bd:6f:4f:4a:41:3c:2f:ce:2c:54:9e:38:7e:21:
                    73:95:f9:f7:d0:7d:f0:d6:62:60:f9:1b:a4:9b:0b:
                    d5:af:d3:01:55:92:b0:c0:37:09:e4:bd:c5:6c:30:
                    f6:5b:3c:50:f3:45:7b:10:29:1b:36:32:64:1a:b5:
                    2a:1c:65:ea:b7:c5:6f:67:ac:ff:db:0d:40:1e:8d:
                    81:70:f4:ff:67:df:10:cf:d5:fb:41:a5:7a:13:d3:
                    93:69:aa:b3:06:cc:a6:81:c4:0f:a1:bf:5a:82:68:
                    24:a4:67:b7:0d:f0:6e:6e:f2:29:44:e8:59:98:f5:
                    35:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7D:99:D2:75:8F:25:26:0E:78:3E:9F:AD:CB:A2:F1:04:EE:8F:A5:EB
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/635153/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/635153/0/7D99D2758F25260E783E9FADCBA2F104EE8FA5EB.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.98.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:0d:1a:19:bd:13:92:c3:a3:db:4f:13:25:7a:66:70:73:e7:
         39:e0:6c:f7:87:f0:b1:37:2c:96:94:17:16:f3:23:3e:f9:1b:
         c6:f7:b0:20:d8:82:4f:f2:2f:b0:20:e0:db:23:5c:78:a3:3d:
         6d:52:46:ab:66:db:1f:74:dd:a4:29:a7:40:e8:d3:40:6e:3f:
         fe:76:f9:0d:6e:24:d5:c7:6a:70:3c:2b:1e:ad:68:7b:78:ce:
         82:0a:a3:3d:73:05:2d:dd:d0:cc:29:61:aa:18:b3:d0:0a:37:
         26:b3:2a:c0:65:f0:39:52:55:56:5a:93:3f:aa:81:7a:7d:e2:
         7d:ac:3c:b5:ac:43:e7:14:cd:7f:c6:c0:a4:b4:67:b9:37:66:
         b5:a0:12:63:b0:83:ae:be:66:1b:13:cd:ea:c2:55:ae:31:03:
         ba:6d:22:5e:86:7c:41:cf:11:bf:f8:c8:93:39:53:12:ce:ab:
         d0:9f:b1:08:ee:03:10:b2:10:6d:a5:f7:c5:8a:ea:51:4b:06:
         32:73:04:47:bf:a7:14:d1:d8:e2:68:16:7a:b4:b3:86:3a:86:
         2d:50:b9:22:00:32:31:ae:be:57:4f:8e:28:c9:80:7c:3c:a0:
         c2:30:35:7b:a3:ab:df:03:8b:a2:c7:16:17:01:db:2f:f8:90:
         4b:7a:d2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:29:13 2021 by LibreSSL & rpki-client.