Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
File:                     ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer (download)
Hash identifier:          EjWeCHi9Nxz0n1JQKllLyzMVQldtCd4r+/utv34oAP0=
Subject key identifier:   22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856AC3009EDD4C9D3C9FAEEE849F178A2B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.mft
caRepository:             rsync://rpki1.terratransit.de/repo/TerraTransit/3
Notify URL:               https://rpki1.terratransit.de/rrdp/notification.xml
Certificate valid until:  Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:
    1: IP: 185.133.48.0/22
    2: IP: 185.171.96.0/22
    3: IP: 185.175.56.0/22
    4: IP: 185.176.158.0/23
    5: IP: 185.176.228.0/22
    6: IP: 185.178.32.0/22
    7: IP: 185.182.44.0/22
    8: IP: 185.183.180.0/22
    9: IP: 185.185.124.0/22
   10: IP: 185.189.24.0/22
   11: IP: 185.190.236.0/22
   12: IP: 185.192.172.0/22
   13: IP: 185.194.36.0/22
   14: IP: 185.196.20.0/22
   15: IP: 185.197.28.0/22
   16: IP: 185.198.24.0/22
   17: IP: 185.199.68.0/22
   18: IP: 185.200.136.0/22
   19: IP: 185.201.160.0/22
   20: IP: 185.202.156.0/22
   21: IP: 185.205.12.0/22
   22: IP: 185.206.160.0/22
   23: IP: 185.208.236.0/22
   24: IP: 185.209.252.0/22
   25: IP: 185.211.32.0/22
   26: IP: 185.213.24.0/22
   27: IP: 185.214.124.0/22
   28: IP: 185.215.208.0/22
   29: IP: 185.216.230.0/23
   30: IP: 185.217.148.0/22
   31: IP: 185.218.52.0/22
   32: IP: 185.220.20.0/22
   33: IP: 185.222.124.0/22
   34: IP: 185.223.252.0/22
   35: IP: 185.226.212.0/22
   36: IP: 185.228.4.0/22
   37: IP: 185.229.112.0/22
   38: IP: 185.232.12.0/22
   39: IP: 185.234.32.0/22
   40: IP: 185.237.144.0/22
   41: IP: 185.239.212.0/22
   42: IP: 185.241.236.0/22
   43: IP: 185.243.56.0/22
   44: IP: 185.245.252.0/22
   45: IP: 185.250.220.0/22
   46: IP: 194.31.52.0/22

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6a:c3:00:9e:dd:4c:9d:3c:9f:ae:ee:84:9f:17:8a:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:37:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=22d29c996abcc72c72279ef78987951b825ae400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5e:cf:e7:b9:6d:2d:c7:11:be:9e:99:06:9c:
                    9e:25:5b:19:8f:85:17:2c:60:f8:82:8c:e8:b3:63:
                    a8:6c:c0:65:57:ba:f4:88:95:a9:88:90:4c:30:a3:
                    c7:21:f2:c0:e6:bd:e3:cf:11:e8:de:c6:57:29:9a:
                    bd:c1:fc:16:50:c9:ed:f6:ff:a8:a5:ea:de:ef:28:
                    5e:0f:d3:ca:71:c3:0a:e2:fd:7c:0f:5f:b1:41:32:
                    37:1f:89:5c:7e:9b:cb:2e:c0:6c:b8:64:c2:83:3a:
                    a2:f2:1e:20:42:ee:33:86:94:a7:52:c2:d7:2a:1d:
                    b5:55:76:44:b0:da:43:99:16:b9:7f:e4:fc:99:ef:
                    96:3e:42:99:aa:90:23:ee:db:c0:10:d6:1b:9b:13:
                    8a:1a:d7:23:cc:71:55:99:9e:c2:66:20:17:48:3c:
                    03:8a:74:97:fa:39:eb:42:5e:e8:99:f5:28:0c:8e:
                    b1:8e:f9:cb:9e:55:e9:0b:d6:45:5c:41:ad:f5:0f:
                    38:91:5c:35:f2:1d:61:cd:da:f3:33:90:c2:4a:2e:
                    95:f4:e7:33:77:f4:23:fa:da:ce:ca:f8:fe:a7:f6:
                    67:c0:1d:51:32:b5:f8:42:d8:e0:84:e3:72:2a:07:
                    1c:6b:b6:e5:ba:0c:79:9e:da:15:50:66:2d:76:67:
                    3d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3
                RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.mft
                RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.133.48.0/22
                  185.171.96.0/22
                  185.175.56.0/22
                  185.176.158.0/23
                  185.176.228.0/22
                  185.178.32.0/22
                  185.182.44.0/22
                  185.183.180.0/22
                  185.185.124.0/22
                  185.189.24.0/22
                  185.190.236.0/22
                  185.192.172.0/22
                  185.194.36.0/22
                  185.196.20.0/22
                  185.197.28.0/22
                  185.198.24.0/22
                  185.199.68.0/22
                  185.200.136.0/22
                  185.201.160.0/22
                  185.202.156.0/22
                  185.205.12.0/22
                  185.206.160.0/22
                  185.208.236.0/22
                  185.209.252.0/22
                  185.211.32.0/22
                  185.213.24.0/22
                  185.214.124.0/22
                  185.215.208.0/22
                  185.216.230.0/23
                  185.217.148.0/22
                  185.218.52.0/22
                  185.220.20.0/22
                  185.222.124.0/22
                  185.223.252.0/22
                  185.226.212.0/22
                  185.228.4.0/22
                  185.229.112.0/22
                  185.232.12.0/22
                  185.234.32.0/22
                  185.237.144.0/22
                  185.239.212.0/22
                  185.241.236.0/22
                  185.243.56.0/22
                  185.245.252.0/22
                  185.250.220.0/22
                  194.31.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:92:e4:11:91:68:84:9b:9a:df:da:ca:88:5c:c6:d5:18:b7:
         22:fa:86:1d:54:34:4a:3f:81:02:61:0c:9f:9a:8d:63:d4:67:
         bd:fb:b9:98:11:57:98:bf:7e:f0:6f:4f:53:41:47:c6:9c:0a:
         38:1d:8b:e7:48:4d:aa:06:51:16:16:76:39:89:15:99:40:58:
         cf:d4:d4:ce:46:68:3b:e5:10:1b:0f:10:dd:7a:dd:52:98:a3:
         fc:ba:00:3c:50:3d:74:38:a4:13:cb:3d:9e:b0:0a:17:60:3f:
         61:42:55:07:7d:75:a1:43:e0:f1:09:16:2d:66:37:ea:34:10:
         07:e2:b1:63:f8:7b:0a:1f:fe:88:b6:e8:2b:b3:52:92:8f:50:
         33:a0:95:fb:27:a4:e3:31:16:3a:91:29:69:3d:89:e6:bd:a3:
         64:ee:c8:30:e2:1b:9c:97:18:cc:29:f3:00:b7:01:89:bd:a3:
         53:34:97:4a:be:ab:5a:9f:9b:3b:e8:9c:ce:8a:0d:01:fc:71:
         04:e8:62:8a:14:98:d4:c9:c4:0c:e0:20:78:b0:38:8c:7a:fe:
         26:44:b8:f3:e3:72:35:9f:d9:88:c8:25:85:41:af:6c:aa:38:
         37:18:6d:c4:89:c1:53:ad:65:e8:d2:4e:92:6c:6b:42:96:05:
         d8:93:9c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 29 17:18:26 2023 by rpki-client.