RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/wKAcugrnuoPZ3SvvFKjjTEpBPG8.cer (download)

Subject key identifier:   C0:A0:1C:BA:0A:E7:BA:83:D9:DD:2B:EF:14:A8:E3:4C:4A:41:3C:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1123962/0/C0A01CBA0AE7BA83D9DD2BEF14A8E34C4A413C6F.mft
CA Repository:            nostromo.heficed.net/repo/1123962/0/
Notification URL:         https://nostromo.heficed.net/rrdp/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: IP: 192.109.123.0/24
    2: IP: 192.109.125.0/24
    3: IP: 192.109.127.0/24
    4: IP: 192.109.131.0/24

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/wKAcugrnuoPZ3SvvFKjjTEpBPG8.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 655870913297 (0x98b4f3eb11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:00:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c0a01cba0ae7ba83d9dd2bef14a8e34c4a413c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:77:71:50:cb:3d:50:1b:19:34:49:67:9b:61:
                    11:40:ff:ee:87:82:50:c1:b6:67:5d:07:12:9c:2c:
                    2d:b1:de:d8:ae:27:ce:d2:fb:05:28:f1:80:c7:84:
                    9e:b7:a0:e5:e4:26:53:4f:a7:62:34:0a:2a:ac:70:
                    46:4d:e4:2e:2d:aa:41:29:cd:40:5e:d2:bd:6f:ad:
                    9a:fd:e2:d7:23:be:94:db:c3:1b:99:dc:28:5b:de:
                    f0:42:0b:64:60:05:ce:17:df:5b:fc:09:5b:3c:5c:
                    5b:b0:b3:48:4b:9b:41:0d:58:5a:3c:fa:6f:f6:95:
                    ba:0b:be:71:c1:2b:13:f0:5b:59:6d:b6:fb:34:3e:
                    36:df:55:20:08:f3:4d:2f:d2:66:f9:6a:83:3c:a2:
                    84:85:d2:89:97:43:2d:32:b6:ed:56:fe:c9:4b:76:
                    bf:00:00:ab:5b:ab:e2:a4:c3:51:d4:37:53:c0:bb:
                    20:aa:ae:01:56:23:43:c8:ca:7d:78:b2:d6:bb:38:
                    eb:9a:91:50:e3:ff:df:13:77:9c:3c:e6:a6:b0:a0:
                    1d:b5:27:95:12:4f:da:1b:15:54:c6:99:21:ed:51:
                    0c:85:e3:f9:ae:b2:2f:e7:81:03:9b:ed:e2:7a:b1:
                    38:0d:3c:a9:a2:26:d0:4b:de:5a:ef:e1:0d:11:2f:
                    28:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C0:A0:1C:BA:0A:E7:BA:83:D9:DD:2B:EF:14:A8:E3:4C:4A:41:3C:6F
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123962/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123962/0/C0A01CBA0AE7BA83D9DD2BEF14A8E34C4A413C6F.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.123.0/24
                  192.109.125.0/24
                  192.109.127.0/24
                  192.109.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:ec:20:04:44:d9:6b:55:38:32:b4:8b:22:c1:28:3a:7e:df:
         31:11:8e:2c:da:b7:fb:05:aa:fe:75:67:32:11:c0:5f:2f:13:
         04:46:27:52:7d:e8:31:f7:41:6d:39:c9:a8:88:3c:16:48:6e:
         cd:6c:0e:75:e8:96:46:51:f5:1c:58:8f:59:e3:8a:6e:04:97:
         54:08:14:1d:cf:c1:c6:52:43:52:ab:5e:31:ce:ea:c2:d8:59:
         40:cd:d2:e5:07:bf:b8:92:d7:9b:77:20:7b:ca:c3:a3:17:96:
         eb:3d:e0:e7:48:3b:f5:bc:a4:d5:a9:80:db:22:4b:5f:79:2e:
         06:0a:cf:01:d5:e1:7f:08:f9:d5:cb:a6:09:26:04:1e:f7:ab:
         c6:e4:85:b1:3a:6a:17:3e:e8:93:d8:ca:b4:de:c6:9b:e2:91:
         cf:82:f3:41:52:03:15:e4:80:eb:81:3f:42:ff:67:8b:ab:6d:
         d6:e8:ba:d4:9b:95:a2:23:65:a7:99:a2:df:50:8a:13:84:3d:
         41:65:f6:5f:d5:96:84:2a:09:55:49:d7:55:87:93:95:ca:f5:
         8d:92:55:91:1c:a2:d5:5d:9b:7f:9e:2d:68:3f:74:66:79:4d:
         fb:21:ca:b3:e2:a5:65:53:a9:ee:9e:73:a2:f7:d6:20:5f:1b:
         28:97:c2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 01:18:22 2022 by LibreSSL & rpki-client.