RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/u47pWfzvPP0fJpA70cDyZRamw24.cer (download)

Subject key identifier:   BB:8E:E9:59:FC:EF:3C:FD:1F:26:90:3B:D1:C0:F2:65:16:A6:C3:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/635213/0/BB8EE959FCEF3CFD1F26903BD1C0F26516A6C36E.mft
CA Repository:            nostromo.heficed.net/repo/635213/0/
Notification URL:         https://nostromo.heficed.net/rrdp/notification.xml
Subordinate resources:
    1: IP: 5.253.200.0/22

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/u47pWfzvPP0fJpA70cDyZRamw24.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503404001269 (0x75353777f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:01:39 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=bb8ee959fcef3cfd1f26903bd1c0f26516a6c36e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6a:8f:4d:c3:d4:34:06:5c:dc:c6:9d:b4:1f:
                    33:82:01:f8:5a:4e:ce:da:d2:22:8e:44:91:66:76:
                    b5:ad:10:cb:0e:46:67:3b:1b:80:f7:92:2a:dd:8e:
                    56:ba:fa:11:3a:c2:56:42:ee:d7:4f:4a:83:ab:30:
                    ff:64:4c:27:5e:c6:d1:a2:db:57:95:08:fb:f4:00:
                    51:93:df:85:15:49:b5:64:cb:14:bf:be:28:46:be:
                    84:82:e4:e2:23:10:9e:f5:1e:0c:6c:8c:cd:52:da:
                    2b:9f:2c:18:b9:fe:02:3c:a1:f4:74:40:a4:4a:67:
                    59:c9:c1:56:c2:51:f5:7a:dd:87:6f:32:aa:8f:b2:
                    4b:cf:3c:e6:6f:42:66:03:ab:93:a9:43:74:b4:c0:
                    11:5e:48:45:47:1d:b1:1c:f2:84:e1:9d:4f:f3:60:
                    80:14:e2:19:1c:90:ee:a7:d6:ff:5c:ad:d3:9b:1c:
                    52:ca:cf:a6:f4:94:83:99:e1:81:5d:e6:8f:3e:ae:
                    87:ef:be:71:ad:81:00:c7:08:31:82:18:61:57:bc:
                    74:16:f7:34:98:66:70:93:8e:f3:5c:07:39:ae:0a:
                    b8:2a:22:8c:0b:89:da:35:96:a4:f7:f9:14:63:ac:
                    0f:b2:d1:83:cc:d3:f7:fb:88:c5:39:75:43:e1:8d:
                    19:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BB:8E:E9:59:FC:EF:3C:FD:1F:26:90:3B:D1:C0:F2:65:16:A6:C3:6E
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/635213/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/635213/0/BB8EE959FCEF3CFD1F26903BD1C0F26516A6C36E.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.......
    Signature Algorithm: sha256WithRSAEncryption
         8d:f8:52:6a:5d:d7:ac:34:57:73:01:e1:2a:fa:44:fc:d0:77:
         61:fb:41:8d:86:c4:07:da:ee:1c:d3:1e:4c:4c:64:62:f0:78:
         a0:fb:2f:b0:5f:21:e6:31:b3:99:5c:2e:14:4d:b9:d2:00:a9:
         e6:1a:76:77:b3:95:f4:0d:fc:7f:12:3c:c6:30:2d:7e:8c:2c:
         6e:f5:96:be:d1:2e:3d:4d:e1:77:f6:6c:07:a3:35:b4:d6:5b:
         4a:f5:38:f6:1f:81:66:33:69:83:b6:c7:ef:7b:c0:e4:75:17:
         f3:62:60:80:47:39:05:8e:21:02:f5:0e:85:4a:5b:25:27:d4:
         fa:94:5f:b0:a9:86:c9:cd:d7:16:8f:7c:56:18:a4:2b:95:80:
         6d:82:79:1a:a1:9b:7f:4d:c3:db:c8:0e:ff:25:4a:4a:34:a0:
         a8:50:98:7e:f4:64:02:88:7c:b4:cf:80:55:e2:04:fa:77:0a:
         e0:27:2a:8b:6e:4e:1d:f0:72:38:f3:05:7a:b5:01:13:4e:07:
         f7:e7:a1:33:27:18:53:5a:a4:d3:63:42:ef:52:2a:a4:27:a9:
         62:3c:63:4c:1b:16:33:7b:7f:cb:4b:d3:fe:ad:57:d1:17:12:
         a3:29:be:96:8f:59:f8:08:32:9a:a9:d3:81:a2:01:ea:25:10:
         90:8a:e7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Aug 1 19:38:57 2021 by LibreSSL & rpki-client.