PKCS #1 is wrong---it cited OIW agreements that were never adopted.
RFC 1319 defines the object identifier for RSA-MD2 as
1.2.840.113549.2.2.
May I recommend that the object identifier be included within RFC 1423 in
its entirety?
I referred to RFC 1319 when I did this coding so I wasn't led astray...
Just to be clear, the OID is included within RFC 1423, in Section 2,
which describes both the MD2 and MD5 message digest algorithms, cites
the RFCs, 1319 and 1321, respectively, AND includes the OIDs.
-DB