RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/n8U2hiztQ5y2vk5AGm6uG7F1I-Y.cer (download)

Subject key identifier:   9F:C5:36:86:2C:ED:43:9C:B6:BE:4E:40:1A:6E:AE:1B:B1:75:23:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1123921/0/9FC536862CED439CB6BE4E401A6EAE1BB17523E6.mft
CA Repository:            nostromo.heficed.net/repo/1123921/0/
Notification URL:         https://nostromo.heficed.net/rrdp/notification.xml
Subordinate resources:
    1: AS: 50588
    1: IP: 45.95.36.0/22

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/n8U2hiztQ5y2vk5AGm6uG7F1I-Y.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503392899888 (0x75348e1330)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:01:36 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=9fc536862ced439cb6be4e401a6eae1bb17523e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f9:bc:f0:af:15:09:17:95:66:f3:a7:8b:75:
                    96:03:27:be:45:08:b3:83:26:a6:48:56:96:56:0e:
                    6b:d9:e0:bd:b0:ae:6b:82:90:d9:4a:ad:4d:16:d4:
                    b0:c5:a5:36:ef:93:50:43:4d:ce:a0:3f:92:e7:ab:
                    7f:b1:7b:08:ce:81:21:2d:ee:d3:d5:88:7a:17:ab:
                    e6:44:58:c4:f1:16:cc:1c:37:d4:ee:53:dd:67:68:
                    e0:3b:3c:b0:94:ae:1d:da:55:53:e5:e4:72:0e:eb:
                    9b:d1:dd:e7:33:60:b4:83:07:fd:7d:e9:e7:28:44:
                    8c:22:14:6b:77:06:03:94:21:fa:16:c6:0f:4b:f9:
                    1b:39:bd:be:1a:7a:3b:7b:12:37:88:f5:5a:82:f8:
                    57:5b:4e:6e:03:e0:28:b1:ac:08:3d:68:dc:1f:a5:
                    a8:ce:4e:44:a2:d2:4e:31:51:2d:89:de:51:c8:ad:
                    f3:8d:f9:09:4b:0d:ec:62:f7:50:03:1c:f3:1f:f5:
                    fc:9c:0c:2d:91:3e:15:69:8e:01:2d:f6:0c:2a:3f:
                    b1:03:17:5b:b9:8f:dc:f2:f9:96:3f:e7:3e:67:22:
                    0e:b5:71:83:31:ee:09:fa:f1:32:74:4f:91:20:18:
                    36:75:80:89:43:f7:27:d1:fe:a3:63:38:68:e8:0d:
                    6f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9F:C5:36:86:2C:ED:43:9C:B6:BE:4E:40:1A:6E:AE:1B:B1:75:23:E6
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123921/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123921/0/9FC536862CED439CB6BE4E401A6EAE1BB17523E6.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....-_$
            sbgp-autonomousSysNum: critical
                0...0......
    Signature Algorithm: sha256WithRSAEncryption
         16:c7:ba:0d:e1:2f:2e:e6:f2:a9:37:e5:b9:d5:f5:6f:3a:b2:
         40:43:5d:b6:32:04:a0:ac:d3:5c:c4:08:69:b4:20:95:f6:2b:
         01:4a:fd:e6:50:57:9c:12:16:e6:2f:b7:05:ec:44:b8:28:50:
         fb:8e:0c:c7:8f:75:5c:96:63:0a:e5:a2:b2:d6:f3:13:cb:1a:
         e9:05:aa:82:5d:45:74:90:1e:62:2b:7a:fd:fc:62:fb:a8:d6:
         93:cd:03:26:90:36:56:9c:b8:d9:13:dc:40:28:19:61:b2:16:
         63:b2:7a:50:f2:c2:1e:c0:1a:d4:c5:61:aa:32:0f:cf:87:93:
         3a:57:da:c6:b0:2b:4e:a1:3b:21:b4:36:a4:50:0a:5a:46:7a:
         f7:8a:14:f6:81:2b:b2:95:10:f5:bc:f5:ed:de:81:cb:b4:a0:
         f6:53:7f:34:86:d1:d0:1f:d9:43:32:66:a5:d4:97:fa:38:b4:
         db:03:b7:b0:67:21:d8:c7:c3:8f:10:9b:3b:05:df:36:88:24:
         28:99:66:39:1c:5f:ce:10:44:69:50:6c:24:35:f4:de:b6:99:
         58:da:cb:d1:b1:f3:ce:60:31:4e:2c:5f:6e:22:b7:24:65:b6:
         88:be:31:85:23:aa:35:d8:89:68:e8:c6:a7:ed:c4:d9:8c:81:
         ee:f4:13:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jul 27 20:23:37 2021 by LibreSSL & rpki-client.