RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/r4w-3yOL34dkeEGPxI5_z_GjOAM.cer (download)

Subject key identifier:   AF:8C:3E:DF:23:8B:DF:87:64:78:41:8F:C4:8E:7F:CF:F1:A3:38:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1123831/0/AF8C3EDF238BDF876478418FC48E7FCFF1A33803.mft
CA Repository:            nostromo.heficed.net/repo/1123831/0/
Notification URL:         https://nostromo.heficed.net/rrdp/notification.xml
Subordinate resources:
    1: IP: 185.139.236.0/22
    2: IP: 2a03:a960::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/r4w-3yOL34dkeEGPxI5_z_GjOAM.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503033503505 (0x751f221f11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:00:19 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=af8c3edf238bdf876478418fc48e7fcff1a33803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6a:6d:72:7e:da:92:94:57:53:d1:4e:37:26:
                    50:44:3a:74:e7:a1:40:46:45:4b:50:0c:1c:71:88:
                    10:6e:f2:24:79:fe:59:37:ae:83:23:07:91:1e:93:
                    2d:70:e7:30:d7:d2:bd:8f:f6:6f:65:b6:13:c8:bd:
                    99:17:fe:0c:76:5e:68:2f:df:87:13:6b:26:c3:24:
                    f2:d8:f4:26:d3:85:2b:35:7b:a9:c2:0e:28:ed:6f:
                    fe:cc:3b:da:a6:f5:03:ae:dc:98:44:a6:a2:0b:42:
                    30:c0:fd:9e:e6:a6:e9:dc:97:9b:a6:6b:05:91:fa:
                    e3:62:bf:ce:b2:02:fe:ec:f3:5e:69:c8:59:79:b2:
                    4c:43:4c:20:3b:8c:2f:ce:ec:20:97:4d:49:6f:fa:
                    c2:ea:a4:d2:18:fa:5a:70:38:6a:f3:13:04:2f:24:
                    72:ea:57:0c:6a:9f:0a:08:03:4a:27:5d:63:8d:c6:
                    89:58:63:e7:f5:4e:30:5a:1f:3f:99:4c:50:3a:f3:
                    20:00:6f:de:cc:31:66:21:cf:20:71:62:36:ed:ca:
                    64:93:68:47:d6:5f:fe:9c:5e:b3:03:a8:9d:95:b5:
                    9a:e6:55:ef:bb:5b:d3:17:87:d5:e2:9a:23:a2:50:
                    c3:5b:33:06:0b:c8:70:b3:a1:e2:9a:0a:bb:0d:56:
                    95:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                AF:8C:3E:DF:23:8B:DF:87:64:78:41:8F:C4:8E:7F:CF:F1:A3:38:03
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123831/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123831/0/AF8C3EDF238BDF876478418FC48E7FCFF1A33803.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.139.236.0/22
                IPv6:
                  2a03:a960::/29

    Signature Algorithm: sha256WithRSAEncryption
         29:84:a8:6a:ac:bd:54:d1:06:1c:7b:59:2a:d1:40:b4:f1:5f:
         ac:15:34:99:9e:ad:ec:7b:8c:14:36:f7:1a:ef:8d:85:57:c1:
         53:1e:6a:c1:f0:58:cc:26:7f:6e:8d:cb:aa:36:82:05:d9:0e:
         b9:19:6e:ca:e7:6b:db:63:81:b6:1f:57:e7:fe:b4:12:fc:b1:
         36:be:81:56:04:52:00:19:06:d2:ea:88:3c:32:bf:6e:47:6f:
         24:b6:69:41:90:30:3a:8d:97:c2:87:8e:a7:0c:1d:45:78:7c:
         2f:25:1c:85:66:e4:52:c3:12:23:42:15:b9:09:da:e4:09:5c:
         01:0a:4e:8d:f9:e9:fa:3f:62:84:db:c7:15:00:79:02:52:b5:
         0e:6a:b5:92:19:d6:bd:70:b5:ce:65:a0:12:8c:9f:78:5d:bc:
         dd:b7:00:a8:79:20:90:37:6a:08:46:8e:6f:22:34:22:b0:7f:
         eb:86:a5:7f:fa:02:8e:73:64:4d:0e:43:b1:2c:80:64:31:a0:
         54:cf:83:23:a2:63:ae:4c:37:91:c2:4a:34:a3:ee:f6:43:ba:
         5f:4b:ed:c4:98:59:bc:9b:9b:68:8a:ad:9c:11:12:50:33:94:
         3f:20:4c:dd:8f:ce:68:93:1f:f3:9a:01:5f:7d:d9:db:a9:b0:
         ce:bb:50:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:32:27 2021 by LibreSSL & rpki-client.