RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/s5GfdLLmgYUjTXCQh0P-oJQBavo.cer (download)

Subject key identifier:   B3:91:9F:74:B2:E6:81:85:23:4D:70:90:87:43:FE:A0:94:01:6A:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1123742/0/B3919F74B2E68185234D70908743FEA094016AFA.mft
CA Repository:            nostromo.heficed.net/repo/1123742/0/
Notification URL:         https://nostromo.heficed.net/rrdp/notification.xml
Subordinate resources:
    1: IP: 85.209.176.0/22

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/s5GfdLLmgYUjTXCQh0P-oJQBavo.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503279788072 (0x752dd02028)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:01:14 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=b3919f74b2e68185234d70908743fea094016afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bb:5e:6f:dc:81:e9:45:c4:2a:61:ef:fd:b4:
                    3d:04:9e:04:2b:db:91:c6:66:06:e2:6b:d5:54:97:
                    01:9d:06:57:0a:8b:15:7d:68:e6:7c:3a:c5:76:ae:
                    6e:7e:6e:49:82:fc:89:53:34:dc:78:be:4a:14:42:
                    73:d4:ec:08:3b:91:9a:46:7d:a6:8d:cf:4a:68:2d:
                    ea:68:b2:4c:73:da:ef:90:7d:16:7b:9c:dd:b8:1f:
                    b2:0f:78:cb:7d:38:e5:15:8f:52:71:a2:71:cc:e5:
                    06:93:f2:d6:19:97:d3:a0:1f:96:97:a6:3e:b1:2a:
                    15:cd:d5:4b:91:1f:f2:bb:6a:dc:77:69:01:97:9b:
                    32:31:53:96:32:75:e3:1c:c9:09:65:03:04:ad:f4:
                    6e:2f:5b:51:f4:05:01:8c:a2:2c:ec:21:e6:59:3d:
                    4d:73:34:d5:61:e0:cd:b5:98:47:64:7e:13:0e:21:
                    a3:49:36:b9:ab:a7:c6:e4:40:fd:e8:ee:68:50:99:
                    45:1f:48:24:b2:91:33:8e:23:9a:20:02:05:84:06:
                    9e:61:b8:29:72:fc:f6:df:dd:b7:a1:78:b1:fd:3a:
                    fe:2c:58:b4:22:58:84:c3:64:1f:04:38:5d:a8:ba:
                    c4:30:d5:e2:72:ca:94:a7:3a:ad:cf:6e:cf:2f:f0:
                    18:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B3:91:9F:74:B2:E6:81:85:23:4D:70:90:87:43:FE:A0:94:01:6A:FA
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123742/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123742/0/B3919F74B2E68185234D70908743FEA094016AFA.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....U..
    Signature Algorithm: sha256WithRSAEncryption
         16:46:f7:a1:40:8d:76:f9:7c:89:f6:e4:5e:a6:02:ef:09:9e:
         f3:60:8c:30:19:06:1e:f6:15:3b:e9:13:0c:c0:43:10:be:2b:
         e3:52:85:be:e7:5a:06:c1:12:4e:47:85:6b:22:d5:84:86:6f:
         00:00:af:56:5f:e5:0c:24:3d:f3:5c:4e:a1:a3:86:78:79:d3:
         d1:2c:95:8a:b8:af:38:0d:32:bc:e0:e3:a6:c3:53:a0:20:1d:
         a7:87:c1:57:74:83:57:9d:ac:f5:11:4f:03:22:4d:88:ad:79:
         55:33:e7:85:70:a8:82:87:e7:bf:b3:71:bc:30:79:51:45:5b:
         52:9a:4d:2b:82:be:c1:12:2b:96:c2:ed:69:59:92:54:84:b5:
         aa:16:8f:f8:5d:2d:f3:bd:42:18:1d:42:d1:35:3e:49:f1:c3:
         e7:fc:c6:56:b6:59:16:f7:07:62:de:5f:a0:a0:f2:72:08:dd:
         91:29:14:da:69:bf:22:27:2e:95:67:d3:b3:04:b1:83:93:75:
         8f:7e:dd:8b:13:aa:6a:92:2e:41:b1:5a:42:af:5b:87:49:15:
         23:28:f5:25:6f:44:4c:af:38:ee:ca:03:09:15:2a:fd:1e:fa:
         e0:f9:c7:0d:65:cb:33:23:68:aa:5f:71:f6:e7:1b:ef:03:fc:
         b0:f2:76:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jul 27 11:51:00 2021 by LibreSSL & rpki-client.