RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/i8itAdnAk2DO4ekCohG16yGtNtY.cer (download)

Subject key identifier:   8B:C8:AD:01:D9:C0:93:60:CE:E1:E9:02:A2:11:B5:EB:21:AD:36:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1047641/0/8BC8AD01D9C09360CEE1E902A211B5EB21AD36D6.mft
CA Repository:            nostromo.heficed.net/repo/1047641/0/
Notification URL:         https://nostromo.heficed.net/rrdp/notification.xml
Subordinate resources:
    1: IP: 185.143.228.0/22
    2: IP: 2a0a:ce00::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/i8itAdnAk2DO4ekCohG16yGtNtY.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503108950106 (0x7523a1585a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:00:35 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=8bc8ad01d9c09360cee1e902a211b5eb21ad36d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:55:32:b5:da:71:be:30:67:69:e5:02:6d:b7:
                    59:07:f6:de:31:8d:51:c7:ec:de:de:d0:67:5c:3c:
                    a5:e0:b1:ec:11:a4:a9:11:40:db:d9:25:a3:0c:e7:
                    cf:1d:58:4f:5d:d6:32:c8:26:0d:4f:ca:51:24:1c:
                    95:f1:51:0f:4b:29:90:13:11:9e:03:5c:a2:27:c9:
                    42:b2:1b:aa:bb:68:04:a7:d7:71:56:8b:2e:bd:5c:
                    69:85:60:ee:9b:08:35:9c:ec:f0:15:1f:83:e7:f4:
                    43:04:18:15:41:3f:97:b4:54:84:c6:6a:64:2b:76:
                    a7:2a:bf:b9:39:7b:3f:ef:fc:b0:df:78:4c:34:94:
                    93:b2:44:d9:7e:aa:54:c2:4b:4e:c8:7e:af:e6:c0:
                    31:54:54:15:f0:2c:61:4b:54:d9:fd:e6:00:43:f8:
                    57:06:17:07:c0:71:77:40:55:a5:2f:82:03:4b:6b:
                    63:42:c9:68:95:fd:2a:e9:1b:51:dc:d1:50:54:60:
                    96:55:6b:3f:fb:10:93:07:9b:56:c8:ab:e7:36:67:
                    e9:2a:71:62:08:4c:0c:5e:b9:47:24:82:b3:a9:91:
                    55:6c:6a:21:d2:a0:4e:71:e0:cd:82:07:0a:3f:65:
                    34:a1:45:87:77:2e:c2:93:43:cc:a9:f6:67:fd:1b:
                    a6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                8B:C8:AD:01:D9:C0:93:60:CE:E1:E9:02:A2:11:B5:EB:21:AD:36:D6
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1047641/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1047641/0/8BC8AD01D9C09360CEE1E902A211B5EB21AD36D6.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.......0
....0....*
..
    Signature Algorithm: sha256WithRSAEncryption
         9e:12:d2:e0:1c:92:60:e6:0c:32:fa:fd:3f:22:ec:2d:74:f4:
         bc:20:58:1c:e1:d6:57:2b:0c:80:bb:9c:60:12:59:7b:81:25:
         8a:5d:62:6f:c2:7a:27:88:94:9d:6f:6d:58:de:cf:ce:37:07:
         e4:9c:ab:c5:1c:18:de:a6:98:dc:2f:2a:d4:9c:15:41:e4:fc:
         f9:d6:0b:ee:83:70:71:d7:b9:9b:3b:83:11:7b:29:4a:ec:29:
         97:a1:70:34:a5:dc:d3:d3:4c:ec:65:8c:85:e2:57:5c:44:a2:
         e3:62:88:90:c2:8b:75:2f:4b:06:dc:96:b6:c6:64:80:89:b7:
         9f:60:74:7c:46:96:c9:b7:a2:97:11:83:69:dd:2f:af:5e:e5:
         96:25:06:27:72:7d:cc:ed:b8:ef:6c:96:50:7d:fb:cd:e9:1e:
         81:12:c4:62:29:0b:1e:d6:7e:97:5b:96:56:0e:91:ae:68:cf:
         1d:a5:71:74:f4:1d:54:b7:6b:3e:a2:f2:cc:63:75:6d:e6:54:
         12:af:c0:57:f8:16:e2:9b:9e:6e:88:f0:d4:ec:2c:b9:fb:16:
         74:ba:8b:80:a0:f0:58:97:6d:67:92:76:70:29:bb:11:20:73:
         04:00:48:a4:c5:02:bb:59:06:96:52:84:57:7c:f1:d7:ea:ab:
         4e:a1:fc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jul 27 11:49:58 2021 by LibreSSL & rpki-client.