RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/sfXdHuLMTCXYntwij-2oEmX4P64.cer (download)

Subject key identifier:   B1:F5:DD:1E:E2:CC:4C:25:D8:9E:DC:22:8F:ED:A8:12:65:F8:3F:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1123741/0/B1F5DD1EE2CC4C25D89EDC228FEDA81265F83FAE.mft
CA Repository:            nostromo.heficed.net/repo/1123741/0/
Notification URL:         https://nostromo.heficed.net/rrdp/notification.xml
Subordinate resources:
    1: IP: 5.252.160.0/22
    2: IP: 2a09:4b40::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/sfXdHuLMTCXYntwij-2oEmX4P64.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503599353749 (0x7540dc4f95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:02:15 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=b1f5dd1ee2cc4c25d89edc228feda81265f83fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:59:ad:67:70:2b:00:c7:ff:49:f9:d0:c5:4f:
                    55:c7:9a:68:b1:a9:a0:90:85:d1:87:af:64:24:ba:
                    ab:5f:fd:c9:9c:12:d4:fa:7f:aa:87:af:0a:33:9a:
                    d7:2c:b5:39:86:10:35:3a:26:99:ac:fc:ee:9a:2b:
                    18:fd:eb:f0:19:94:51:e1:48:86:d0:43:92:61:19:
                    95:6f:36:5d:d0:46:f4:fe:3e:6e:8b:9e:46:32:24:
                    ee:ab:3e:b4:83:49:19:54:96:92:fe:4e:aa:18:87:
                    2b:90:5c:33:66:cf:01:00:40:b8:87:47:da:e1:92:
                    ff:46:4b:81:4e:04:42:b0:62:87:d1:65:ac:d0:b0:
                    b3:7c:3e:4c:fe:c9:36:56:84:7b:42:14:12:09:10:
                    d7:b8:e2:62:8a:f0:d1:bc:34:92:46:be:c8:c8:af:
                    8f:e4:60:76:2c:36:4f:53:85:cc:9a:4d:b6:d6:38:
                    8a:30:ad:e3:e1:ae:92:d1:1f:40:36:e9:55:b5:f0:
                    fb:13:41:44:0f:33:ae:86:8a:3d:46:8e:d2:c9:ea:
                    24:2b:6a:89:e9:c3:50:98:ce:30:19:30:c7:37:95:
                    16:de:73:1f:2e:f2:31:0e:cb:be:af:77:23:21:8f:
                    11:0c:56:15:f1:a2:4b:3d:6a:c8:e4:ef:3b:87:66:
                    83:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B1:F5:DD:1E:E2:CC:4C:25:D8:9E:DC:22:8F:ED:A8:12:65:F8:3F:AE
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123741/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123741/0/B1F5DD1EE2CC4C25D89EDC228FEDA81265F83FAE.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.......0
....0....*.K@
    Signature Algorithm: sha256WithRSAEncryption
         14:4e:93:a0:11:84:0e:00:f4:da:74:bc:12:3a:75:f4:4b:89:
         79:da:e0:34:31:59:4f:89:43:2c:80:11:9d:81:39:6d:a3:c0:
         26:95:e0:e4:0e:b2:ec:41:9e:35:01:e0:ac:93:66:c0:12:63:
         29:93:78:a7:de:0d:b9:8c:61:ba:6f:bc:08:c9:4f:62:6d:c7:
         cc:02:67:05:8c:97:7b:17:30:69:84:2c:c2:ab:70:56:6a:00:
         45:9c:f4:38:f9:ba:d7:72:d2:de:4b:5a:d5:77:11:b1:de:28:
         e1:89:80:bc:80:50:78:de:ab:e6:6c:92:f7:0b:b4:8e:82:4f:
         91:86:49:69:d2:ee:b8:48:20:c9:93:0f:34:c6:21:e6:31:88:
         3a:d7:5b:a0:3c:06:95:03:a1:b3:71:59:5c:aa:28:04:82:da:
         94:7b:88:04:b1:29:fb:ef:fc:3f:ed:f9:fb:40:f2:09:19:41:
         e9:e4:74:d4:54:3e:e6:e8:86:46:da:44:80:4e:30:f2:5c:14:
         94:c3:df:b2:97:f1:f3:84:df:ba:7e:0e:dc:a3:72:c4:e9:0b:
         1f:0a:3d:72:2e:3b:10:ea:7e:55:b6:7c:5b:ad:3e:ca:66:5e:
         29:32:56:f7:b2:f3:fc:cd:2a:54:47:f4:f6:7c:c2:3c:cc:f1:
         45:dc:ae:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jul 27 13:58:20 2021 by LibreSSL & rpki-client.