RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/pP79tLxIINrokGx4tGoyTIcr344.cer (download)

Subject key identifier:   A4:FE:FD:B4:BC:48:20:DA:E8:90:6C:78:B4:6A:32:4C:87:2B:DF:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1123861/0/A4FEFDB4BC4820DAE8906C78B46A324C872BDF8E.mft
CA Repository:            nostromo.heficed.net/repo/1123861/0/
Notification URL:         https://nostromo.heficed.net/rrdp/notification.xml
Subordinate resources:
    1: AS: 48410
    1: IP: 45.95.12.0/22

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/pP79tLxIINrokGx4tGoyTIcr344.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503632010400 (0x7542ce9ca0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:02:22 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=a4fefdb4bc4820dae8906c78b46a324c872bdf8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:14:47:a4:f1:0c:6c:26:5d:2e:43:55:6f:19:
                    90:db:ed:bc:e2:59:a0:b7:d9:57:c2:5b:85:e2:dd:
                    6e:e5:b6:48:89:1d:ca:f1:8e:99:ef:42:b1:46:37:
                    de:3b:e1:ec:85:18:64:ca:4d:26:b8:97:33:c8:32:
                    10:2c:32:06:d9:a5:47:69:83:d2:e6:4d:52:c9:4e:
                    ad:de:91:63:48:46:12:85:2b:ac:1c:3d:82:b6:66:
                    81:45:41:a6:e3:20:4b:3d:c1:60:34:f2:df:95:65:
                    dc:56:73:dc:54:0e:d0:8f:2d:cb:e8:27:09:eb:06:
                    48:8a:78:30:62:91:cd:ae:48:56:49:c6:9e:a8:2a:
                    7a:1e:3d:07:1b:63:9c:87:73:6e:f7:7e:02:00:a7:
                    aa:75:48:64:1b:0f:37:db:61:6f:ea:3d:2e:21:b4:
                    9f:f2:e7:72:44:06:0b:10:9a:33:ae:90:99:c8:41:
                    57:47:93:9f:cc:e0:44:07:a0:31:e4:cd:6d:bd:ab:
                    0d:0e:ba:4d:be:37:47:0e:6d:d6:6d:67:9d:95:df:
                    6e:34:50:40:d3:d7:d6:ee:36:bb:fb:fb:88:b9:b2:
                    29:49:01:af:6b:0c:e3:85:50:76:35:8c:21:dc:20:
                    af:a6:2a:dd:1f:36:78:e9:02:74:00:1a:28:3d:fd:
                    b0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A4:FE:FD:B4:BC:48:20:DA:E8:90:6C:78:B4:6A:32:4C:87:2B:DF:8E
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123861/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123861/0/A4FEFDB4BC4820DAE8906C78B46A324C872BDF8E.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....-_.
            sbgp-autonomousSysNum: critical
                0...0......
    Signature Algorithm: sha256WithRSAEncryption
         47:fc:4c:42:00:81:36:bb:07:06:5e:48:e2:65:f8:02:32:8b:
         3a:a9:4d:9c:59:51:8e:78:b6:d5:fd:27:18:0e:80:04:e9:05:
         06:ae:11:05:3d:20:7f:54:28:ab:ec:3c:56:26:e5:3c:0b:24:
         8e:27:9d:25:2f:b3:02:69:fa:ca:81:6c:ac:2e:3c:f7:14:ae:
         1f:31:7a:52:ed:ef:8f:cb:12:88:af:17:2a:28:3b:99:98:cd:
         a5:44:40:5b:7d:da:2a:f3:bd:a5:32:7d:21:b2:15:b9:79:ea:
         a9:89:9e:0e:99:bf:47:91:2e:98:54:72:97:ed:4c:e2:47:2e:
         f7:c9:e4:b0:e9:ba:76:92:e0:38:ba:7c:79:ce:38:c2:e8:b6:
         58:91:07:82:5f:26:ad:e0:64:e3:fb:f6:4c:fa:01:95:62:43:
         db:39:b7:18:bd:1e:2a:cb:63:b0:c7:8d:d0:8d:f3:69:2c:14:
         7a:99:c1:86:3f:0b:ba:ce:54:bd:73:44:9e:96:bb:79:a2:45:
         0e:e8:e4:cf:2c:f8:f4:09:75:03:c6:f7:eb:d9:56:bd:53:9b:
         33:20:b4:8d:c2:ed:1a:a5:3a:4c:80:e1:0d:12:d1:75:b7:e6:
         f8:ae:fb:3c:22:db:37:71:b8:84:c3:4e:b7:5a:01:78:2f:52:
         a5:8b:50:51
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIFdULOnKAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMDAyMjJaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGE0ZmVmZGI0YmM0
ODIwZGFlODkwNmM3OGI0NmEzMjRjODcyYmRmOGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDHFEek8QxsJl0uQ1VvGZDb7bziWaC32VfCW4Xi3W7ltkiJ
HcrxjpnvQrFGN9474eyFGGTKTSa4lzPIMhAsMgbZpUdpg9LmTVLJTq3ekWNIRhKF
K6wcPYK2ZoFFQabjIEs9wWA08t+VZdxWc9xUDtCPLcvoJwnrBkiKeDBikc2uSFZJ
xp6oKnoePQcbY5yHc273fgIAp6p1SGQbDzfbYW/qPS4htJ/y53JEBgsQmjOukJnI
QVdHk5/M4EQHoDHkzW29qw0Ouk2+N0cObdZtZ52V3240UEDT19buNrv7+4i5silJ
Aa9rDOOFUHY1jCHcIK+mKt0fNnjpAnQAGig9/bC3AgMBAAGjggJsMIICaDAdBgNV
HQ4EFgQUpP79tLxIINrokGx4tGoyTIcr344wHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCB
8AYIKwYBBQUHAQsEgeMwgeAwOAYIKwYBBQUHMAWGLHJzeW5jOi8vbm9zdHJvbW8u
aGVmaWNlZC5uZXQvcmVwby8xMTIzODYxLzAvMGQGCCsGAQUFBzAKhlhyc3luYzov
L25vc3Ryb21vLmhlZmljZWQubmV0L3JlcG8vMTEyMzg2MS8wL0E0RkVGREI0QkM0
ODIwREFFODkwNkM3OEI0NkEzMjRDODcyQkRGOEUubWZ0MD4GCCsGAQUFBzANhjJo
dHRwczovL25vc3Ryb21vLmhlZmljZWQubmV0L3JyZHAvbm90aWZpY2F0aW9uLnht
bDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAi1fDDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAvRowDQYJKoZIhvcNAQEL
BQADggEBAEf8TEIAgTa7BwZeSOJl+AIyizqpTZxZUY54ttX9JxgOgATpBQauEQU9
IH9UKKvsPFYm5TwLJI4nnSUvswJp+sqBbKwuPPcUrh8xelLt74/LEoivFyooO5mY
zaVEQFt92irzvaUyfSGyFbl56qmJng6Zv0eRLphUcpftTOJHLvfJ5LDpunaS4Di6
fHnOOMLotliRB4JfJq3gZOP79kz6AZViQ9s5txi9HirLY7DHjdCN82ksFHqZwYY/
C7rOVL1zRJ6Wu3miRQ7o5M8s+PQJdQPG9+vZVr1TmzMgtI3C7RqlOkyA4Q0S0XW3
5viu+zwi2zdxuITDTrdaAXgvUqWLUFE=
-----END CERTIFICATE-----

Generated at Tue Jul 27 11:50:44 2021 by LibreSSL & rpki-client.