RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/pkkyxWpdpfSll0uMf0Ma_MLkUgg.cer (download)

Subject key identifier:   A6:49:32:C5:6A:5D:A5:F4:A5:97:4B:8C:7F:43:1A:FC:C2:E4:52:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1123972/0/A64932C56A5DA5F4A5974B8C7F431AFCC2E45208.mft
CA Repository:            nostromo.heficed.net/repo/1123972/0/
Notification URL:         https://nostromo.heficed.net/rrdp/notification.xml
Subordinate resources:
    1: IP: 193.186.253.0/24
    2: IP: 193.187.1.0/24
    3: IP: 193.188.1.0/24
    4: IP: 193.188.195.0/24

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/pkkyxWpdpfSll0uMf0Ma_MLkUgg.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503623367064 (0x75424ab998)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:02:19 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=a64932c56a5da5f4a5974b8c7f431afcc2e45208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:c8:a0:bc:72:a9:a4:d6:dd:48:f3:58:7c:
                    f8:85:c8:2d:0e:95:02:f2:c1:da:6f:51:b7:cc:3f:
                    06:64:b9:12:bc:00:ef:7c:e5:b4:2b:e8:10:fd:c9:
                    96:9f:5c:55:81:26:70:43:ae:f0:fd:84:3c:71:e4:
                    28:5b:68:cb:5c:f7:10:26:79:bc:63:ef:88:7b:4c:
                    f8:d3:36:71:7f:8f:01:a8:58:e8:37:64:a1:81:da:
                    8e:c0:8e:73:33:6d:87:d6:3d:1e:34:52:16:ce:c1:
                    c2:e7:98:aa:6d:c5:45:bb:f7:b6:ad:4f:f9:4d:63:
                    c7:85:f8:c7:b3:a9:9d:72:8d:54:3b:06:51:b5:eb:
                    af:ee:3c:6c:fd:a9:55:f1:e2:11:64:23:48:53:72:
                    d7:dd:83:db:cf:0d:ba:2e:e1:a4:75:b3:14:d2:c9:
                    58:eb:92:eb:e9:49:8f:0a:90:f9:05:c4:11:43:3c:
                    0e:40:4f:48:70:52:0e:d4:af:e0:af:6d:74:cc:a9:
                    10:be:f0:72:01:3a:e3:96:d9:fd:7c:25:73:7a:68:
                    24:02:a9:32:a1:73:93:86:e9:56:4d:88:eb:b4:c1:
                    ed:79:9d:e0:29:ba:07:68:ef:73:40:71:69:3a:5e:
                    af:ad:0a:65:71:50:0e:b8:f2:c6:d4:c6:78:24:f8:
                    f6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A6:49:32:C5:6A:5D:A5:F4:A5:97:4B:8C:7F:43:1A:FC:C2:E4:52:08
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123972/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123972/0/A64932C56A5DA5F4A5974B8C7F431AFCC2E45208.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.186.253.0/24
                  193.187.1.0/24
                  193.188.1.0/24
                  193.188.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:ab:1d:83:e1:07:68:5e:b6:fc:6e:29:83:6a:98:4b:4f:bf:
         17:13:32:a2:47:d8:13:a0:d7:1b:9c:52:cc:41:0c:38:b1:6a:
         4b:30:ed:b9:e1:aa:22:4e:c0:a4:7e:12:0f:dd:28:7a:3c:5e:
         85:17:1f:e3:c7:fd:c8:96:de:37:3e:87:ef:8e:80:9e:60:d4:
         45:9b:45:90:f6:9f:6f:b0:a4:40:8c:c4:ef:94:e1:cc:cc:85:
         be:f3:58:20:21:f1:e0:3f:f9:70:5b:4a:7a:08:83:9b:72:19:
         fc:6f:05:ce:1a:e7:c4:1c:13:e4:b4:7b:47:28:b1:3a:4d:f4:
         ce:73:15:ad:e0:2d:95:e7:27:1c:78:8c:e3:2f:2a:a7:20:b7:
         e6:f1:48:30:21:23:b7:78:f6:84:bc:85:90:6c:2e:66:9c:bf:
         86:07:0c:d4:f4:6f:b6:a2:cf:ad:70:57:07:b7:e4:a7:72:81:
         56:17:b0:b3:0b:c4:78:5c:ba:44:74:2b:bc:ed:bc:49:84:97:
         e0:e5:63:34:e3:88:72:98:aa:57:a7:bf:9d:a3:50:bf:c1:41:
         25:4e:c5:7d:8d:17:fc:d7:1f:fa:01:ec:18:8e:b3:b3:89:d2:
         d1:bc:74:4f:a5:79:2b:2f:ac:10:bb:af:42:ef:22:99:8c:b9:
         6a:2a:53:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:32:05 2021 by LibreSSL & rpki-client.