RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/wKAcugrnuoPZ3SvvFKjjTEpBPG8.cer (download)

Subject key identifier:   C0:A0:1C:BA:0A:E7:BA:83:D9:DD:2B:EF:14:A8:E3:4C:4A:41:3C:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1123962/0/C0A01CBA0AE7BA83D9DD2BEF14A8E34C4A413C6F.mft
CA Repository:            nostromo.heficed.net/repo/1123962/0/
Notification URL:         https://nostromo.heficed.net/rrdp/notification.xml
Subordinate resources:
    1: IP: 192.109.123.0/24
    2: IP: 192.109.125.0/24
    3: IP: 192.109.127.0/24
    4: IP: 192.109.131.0/24

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/wKAcugrnuoPZ3SvvFKjjTEpBPG8.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503464949617 (0x7538d97771)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:01:52 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=c0a01cba0ae7ba83d9dd2bef14a8e34c4a413c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:77:71:50:cb:3d:50:1b:19:34:49:67:9b:61:
                    11:40:ff:ee:87:82:50:c1:b6:67:5d:07:12:9c:2c:
                    2d:b1:de:d8:ae:27:ce:d2:fb:05:28:f1:80:c7:84:
                    9e:b7:a0:e5:e4:26:53:4f:a7:62:34:0a:2a:ac:70:
                    46:4d:e4:2e:2d:aa:41:29:cd:40:5e:d2:bd:6f:ad:
                    9a:fd:e2:d7:23:be:94:db:c3:1b:99:dc:28:5b:de:
                    f0:42:0b:64:60:05:ce:17:df:5b:fc:09:5b:3c:5c:
                    5b:b0:b3:48:4b:9b:41:0d:58:5a:3c:fa:6f:f6:95:
                    ba:0b:be:71:c1:2b:13:f0:5b:59:6d:b6:fb:34:3e:
                    36:df:55:20:08:f3:4d:2f:d2:66:f9:6a:83:3c:a2:
                    84:85:d2:89:97:43:2d:32:b6:ed:56:fe:c9:4b:76:
                    bf:00:00:ab:5b:ab:e2:a4:c3:51:d4:37:53:c0:bb:
                    20:aa:ae:01:56:23:43:c8:ca:7d:78:b2:d6:bb:38:
                    eb:9a:91:50:e3:ff:df:13:77:9c:3c:e6:a6:b0:a0:
                    1d:b5:27:95:12:4f:da:1b:15:54:c6:99:21:ed:51:
                    0c:85:e3:f9:ae:b2:2f:e7:81:03:9b:ed:e2:7a:b1:
                    38:0d:3c:a9:a2:26:d0:4b:de:5a:ef:e1:0d:11:2f:
                    28:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C0:A0:1C:BA:0A:E7:BA:83:D9:DD:2B:EF:14:A8:E3:4C:4A:41:3C:6F
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123962/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123962/0/C0A01CBA0AE7BA83D9DD2BEF14A8E34C4A413C6F.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0 0.....0.....m{....m}....m.....m.
    Signature Algorithm: sha256WithRSAEncryption
         84:fc:e6:3c:67:59:5d:9b:ba:90:e7:f1:0e:37:f8:a7:7c:28:
         27:8a:6f:78:d2:5c:1f:8a:c7:ee:b6:04:92:50:2a:66:20:73:
         65:5d:12:fe:4d:0c:03:43:cf:05:be:4a:ec:ec:2f:61:97:c3:
         cc:2a:d1:b0:24:c4:38:48:83:a4:33:c6:85:89:20:05:53:47:
         50:19:13:ab:6f:78:f2:2c:45:56:7a:36:16:36:b9:dc:b4:c9:
         5d:95:cb:17:90:f4:f7:dc:e8:4c:43:d6:c8:63:ed:00:cf:24:
         39:f6:42:92:68:aa:10:5c:f5:3f:6f:22:69:07:24:19:73:c5:
         3c:21:df:08:53:e7:96:54:16:90:a1:7c:68:3a:d8:83:4b:b2:
         44:dc:d1:4b:d4:bc:3c:d7:66:24:f5:83:08:da:b3:5f:57:52:
         e3:ab:52:75:bf:0f:d7:18:2c:9e:db:07:2a:4d:b2:eb:95:b8:
         f8:d8:ed:3a:fe:85:0f:bf:13:61:c1:84:37:95:6b:0b:a5:d3:
         0e:0a:63:3f:46:8a:4c:52:ee:bc:71:85:8c:4d:cf:be:a2:bc:
         52:ab:37:d8:16:1d:91:f8:81:47:13:f1:83:81:65:29:01:58:
         34:c7:17:0e:fc:8d:48:c9:34:e9:4d:fc:6b:a7:1b:59:11:15:
         77:3b:b4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jul 27 13:58:43 2021 by LibreSSL & rpki-client.