RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/oWyQndzsuwrpfwHo75mAAaj7pCo.cer (download)

Subject key identifier:   A1:6C:90:9D:DC:EC:BB:0A:E9:7F:01:E8:EF:99:80:01:A8:FB:A4:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1123983/0/A16C909DDCECBB0AE97F01E8EF998001A8FBA42A.mft
CA Repository:            nostromo.heficed.net/repo/1123983/0/
Notification URL:         https://nostromo.heficed.net/rrdp/notification.xml
Subordinate resources:
    1: IP: 194.53.140.0/22
    2: IP: 2a0c:fa40::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/oWyQndzsuwrpfwHo75mAAaj7pCo.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503093062362 (0x7522aeeada)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:00:30 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=a16c909ddcecbb0ae97f01e8ef998001a8fba42a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:05:30:06:0a:c4:d5:61:c3:f7:50:40:12:9a:
                    ff:15:72:4f:e5:c7:53:bf:4e:f3:3e:79:26:54:1b:
                    75:8e:c9:e6:1b:ec:93:b1:c0:2a:0a:b2:50:6b:5f:
                    cc:e4:91:c2:b8:31:c7:25:6d:ef:18:54:d9:5b:cc:
                    e8:31:2f:df:09:94:38:ee:bb:1c:dc:66:30:d2:f6:
                    28:28:e3:8a:67:17:2f:f8:ce:f2:5a:5a:e6:c8:3e:
                    c9:d8:ec:27:c0:83:22:e5:d1:2d:e5:32:40:00:29:
                    44:04:e3:f7:d3:6f:02:86:af:c5:cc:26:ea:eb:d6:
                    b1:99:49:e5:bb:50:e2:80:10:c8:a4:15:df:90:70:
                    d0:95:64:51:be:9e:40:b8:9c:9b:ea:88:6a:22:54:
                    7d:27:12:d9:02:ca:78:93:0c:90:e7:33:ee:21:9f:
                    e0:7d:2d:70:36:52:38:ea:9f:7c:33:c9:80:6e:b0:
                    cb:5f:e3:d4:6c:57:e8:36:42:06:ff:90:1b:ea:ea:
                    22:d5:ae:8f:1e:99:9c:05:61:a5:95:ba:a7:52:25:
                    43:08:1f:55:e6:2c:d5:81:8c:17:25:ac:21:c9:84:
                    cf:ee:ff:a2:da:b8:c7:6a:9a:9d:51:52:58:78:ee:
                    32:7a:28:dc:8b:f4:8c:cc:b8:72:65:b2:c8:7f:57:
                    6f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A1:6C:90:9D:DC:EC:BB:0A:E9:7F:01:E8:EF:99:80:01:A8:FB:A4:2A
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123983/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123983/0/A16C909DDCECBB0AE97F01E8EF998001A8FBA42A.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.....5.0
....0....*..@
    Signature Algorithm: sha256WithRSAEncryption
         58:d2:54:46:b8:b5:1e:05:50:9e:ae:ef:74:e7:72:80:e3:58:
         ff:7a:fa:84:5d:eb:6a:ab:b5:e4:17:56:52:cd:ac:35:60:4e:
         2c:59:36:df:9a:84:82:8f:5a:aa:09:b1:30:94:33:ea:0e:92:
         7e:b9:fe:2c:95:60:08:e1:e0:f2:2f:d5:21:c2:fd:27:71:f2:
         fd:13:25:cc:71:2a:83:48:46:2a:04:78:73:8a:71:9c:44:f8:
         a4:2c:62:fc:47:11:5e:2c:24:59:92:d5:17:2d:d4:82:8d:c0:
         fc:f1:11:5c:87:f8:81:7d:1d:57:ce:0a:a8:0b:eb:bc:68:99:
         f1:32:8f:c1:93:80:83:09:33:27:e7:fc:c9:57:14:64:b8:54:
         bf:32:d1:fe:1d:35:28:70:73:47:ae:93:a5:2a:36:18:04:d7:
         ad:c1:5e:24:c9:5c:c8:97:8f:6d:40:20:44:81:67:d5:3f:17:
         f5:c5:f6:99:d6:9c:04:b9:06:22:90:5e:35:1d:96:5d:86:52:
         f9:91:f6:61:5e:87:21:3f:74:20:a2:73:55:58:4c:da:d4:19:
         fe:7d:65:45:80:79:f3:58:7f:26:81:4b:b5:35:56:9d:75:7e:
         71:38:7c:80:ad:e5:38:ca:3f:36:28:9a:7f:d6:66:94:a5:a7:
         68:95:00:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jul 27 13:57:55 2021 by LibreSSL & rpki-client.