RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/uJpHHcRbW0Jn-uAWq25iLI-9420.cer (download)

Subject key identifier:   B8:9A:47:1D:C4:5B:5B:42:67:FA:E0:16:AB:6E:62:2C:8F:BD:E3:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1123871/0/B89A471DC45B5B4267FAE016AB6E622C8FBDE36D.mft
CA Repository:            nostromo.heficed.net/repo/1123871/0/
Notification URL:         https://nostromo.heficed.net/rrdp/notification.xml
Subordinate resources:
    1: AS: 49018
    1: IP: 45.95.20.0/22

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/uJpHHcRbW0Jn-uAWq25iLI-9420.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503503360709 (0x753b2392c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:01:59 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=b89a471dc45b5b4267fae016ab6e622c8fbde36d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:40:8e:4a:51:0a:4d:9f:5c:4b:c7:23:0e:fb:
                    d7:2a:a0:b8:ed:00:76:1d:6d:86:84:44:64:2f:6a:
                    a1:a4:0b:82:0e:0e:f3:e0:15:f8:c3:6a:75:4b:64:
                    0c:53:b6:bf:d7:c9:45:a1:56:b2:b7:64:d1:a8:df:
                    42:df:0f:c7:38:86:05:2c:9c:37:8e:f3:25:dc:07:
                    f6:72:8f:3a:6f:e3:10:66:79:ee:1d:d3:d8:c4:c1:
                    7f:2f:d5:8a:fb:c3:97:60:b1:e4:66:ad:77:f0:63:
                    08:1e:9d:cc:a5:f1:d5:88:03:28:1f:93:8a:82:c4:
                    d9:6f:e1:ef:60:26:4d:ab:52:e6:80:a6:20:69:51:
                    e3:f9:3a:e5:82:a1:48:e0:eb:fb:fa:1a:18:10:06:
                    32:c4:4c:78:3c:dd:46:f7:24:81:42:45:cb:fb:fc:
                    13:41:e7:b3:97:f6:fa:a8:92:a5:e9:bd:3c:5c:7a:
                    8f:1e:bb:d3:9c:2c:93:97:50:09:59:9b:bc:d2:e8:
                    c8:e6:03:34:45:ff:92:46:0c:8d:24:58:c7:c4:2d:
                    3c:48:4f:0c:51:71:80:8c:3d:6b:ab:67:0d:65:9a:
                    5a:b6:d6:e4:08:eb:f9:e5:a7:88:e6:66:e0:35:3f:
                    58:02:b2:26:ab:55:d6:d9:76:2f:3f:9a:e2:cc:dd:
                    63:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B8:9A:47:1D:C4:5B:5B:42:67:FA:E0:16:AB:6E:62:2C:8F:BD:E3:6D
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123871/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123871/0/B89A471DC45B5B4267FAE016AB6E622C8FBDE36D.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.20.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49018

    Signature Algorithm: sha256WithRSAEncryption
         63:cb:71:38:b2:c4:8a:3e:67:21:be:0b:70:dc:08:d5:e6:55:
         49:01:57:9f:74:13:06:40:b6:20:0d:7d:01:71:a3:8a:11:b0:
         44:d5:9a:96:2e:33:19:a3:f1:34:71:72:49:65:a9:5a:87:6e:
         ab:54:50:86:0f:bf:14:4c:6b:a8:90:24:ef:cf:cf:e2:86:76:
         59:c9:d8:5e:de:39:d6:db:41:d0:ac:5b:75:07:a1:4e:64:71:
         e5:99:82:90:06:84:c5:c7:99:1f:88:85:34:aa:23:7b:19:fd:
         4c:51:1b:de:2f:fd:e4:a7:aa:90:a4:2e:77:e6:13:4b:3e:15:
         5f:8b:3c:fe:40:77:d5:f3:9f:6e:b5:c6:8b:df:45:97:8d:b1:
         18:f5:6c:a4:82:93:2c:ee:3b:40:70:31:d0:a3:5e:13:c0:00:
         6e:47:bf:3b:db:de:3c:c1:e3:f3:99:4a:df:cb:a0:ba:96:13:
         6f:61:a7:e2:2f:07:3e:cc:f5:0d:6f:5b:85:5e:c4:e7:e6:9a:
         a9:81:32:63:fc:ed:06:41:68:0c:c4:6b:6c:ec:a0:13:b8:48:
         2d:e4:54:2e:6d:19:60:03:dd:ad:7b:c7:84:d7:22:ca:20:56:
         60:b2:6e:6c:31:a8:8c:82:16:6f:15:08:92:74:1b:a2:3c:61:
         c4:87:e6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:33:22 2021 by LibreSSL & rpki-client.