Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
File: D34606949D385DB42714FE71274FAC9948EF279C.cer (raw, json)
Hash identifier: qgA0jA2ez8XC53EvikT1lnkoABgWAoo3F15bMD9yrMI=
Subject key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Certificate serial: 39CCF9CCA42D13878735541D44373DF7C0E54E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Manifest: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
caRepository: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/
Notify URL: https://magellan.ipxo.com/rrdp/notification.xml
Certificate not before: Mon 09 Oct 2023 09:58:32 +0000
Certificate not after: Mon 07 Oct 2024 10:03:32 +0000
Subordinate resources: IP: 82.140.182.0/23
IP: 84.46.170.0/23
IP: 84.46.200.0/24
IP: 84.46.234.0 -- 84.46.255.255
IP: 86.38.4.0/23
IP: 86.38.7.0/24
IP: 86.38.24.0/24
IP: 86.38.32.0/24
IP: 86.38.37.0/24
IP: 86.38.151.0/24
IP: 86.38.156.0/24
IP: 86.38.175.0/24
IP: 86.38.177.0 -- 86.38.187.255
IP: 86.38.189.0 -- 86.38.190.255
IP: 86.38.200.0/24
IP: 86.38.202.0 -- 86.38.205.255
IP: 86.38.214.0/24
IP: 86.38.216.0 -- 86.38.221.255
IP: 86.38.225.0 -- 86.38.226.255
IP: 86.38.232.0/24
IP: 86.38.235.0/24
IP: 86.38.238.0/24
IP: 86.38.241.0 -- 86.38.243.255
IP: 86.38.246.0 -- 86.38.255.255
IP: 89.116.20.0 -- 89.116.39.255
IP: 89.116.44.0 -- 89.116.54.255
IP: 89.116.56.0/24
IP: 89.116.58.0 -- 89.116.70.255
IP: 89.116.72.0 -- 89.116.76.255
IP: 89.116.80.0 -- 89.116.89.255
IP: 89.116.91.0 -- 89.116.92.255
IP: 89.116.96.0/24
IP: 89.116.99.0 -- 89.116.100.255
IP: 89.116.102.0/23
IP: 89.116.106.0 -- 89.116.108.255
IP: 89.116.112.0/23
IP: 89.116.115.0/24
IP: 89.116.123.0/24
IP: 89.116.125.0 -- 89.116.128.255
IP: 89.116.130.0 -- 89.116.132.255
IP: 89.116.135.0/24
IP: 89.116.137.0/24
IP: 89.116.140.0/23
IP: 89.116.144.0/24
IP: 89.116.146.0 -- 89.116.150.255
IP: 89.116.153.0 -- 89.116.154.255
IP: 89.116.156.0/24
IP: 89.116.158.0/24
IP: 89.116.161.0/24
IP: 89.116.163.0 -- 89.116.166.255
IP: 89.116.168.0/23
IP: 89.116.171.0 -- 89.116.173.255
IP: 89.116.175.0/24
IP: 89.116.177.0/24
IP: 89.116.179.0 -- 89.116.186.255
IP: 89.116.189.0 -- 89.116.190.255
IP: 89.116.193.0/24
IP: 89.116.198.0/24
IP: 89.116.200.0/24
IP: 89.116.202.0/23
IP: 89.116.208.0/21
IP: 89.116.218.0/24
IP: 89.116.220.0/23
IP: 89.116.223.0 -- 89.116.231.255
IP: 89.116.233.0 -- 89.116.234.255
IP: 89.116.236.0/23
IP: 89.116.239.0/24
IP: 89.116.241.0 -- 89.116.244.255
IP: 89.116.246.0 -- 89.116.248.255
IP: 89.116.250.0/24
IP: 89.116.252.0/23
IP: 89.116.255.0 -- 89.117.3.255
IP: 89.117.5.0 -- 89.117.9.255
IP: 89.117.11.0 -- 89.117.13.255
IP: 89.117.15.0 -- 89.117.25.255
IP: 89.117.27.0 -- 89.117.33.255
IP: 89.117.35.0 -- 89.117.38.255
IP: 89.117.40.0 -- 89.117.68.255
IP: 89.117.70.0 -- 89.117.85.255
IP: 89.117.87.0 -- 89.117.91.255
IP: 89.117.94.0 -- 89.117.99.255
IP: 89.117.101.0 -- 89.117.107.255
IP: 89.117.109.0/24
IP: 89.117.111.0 -- 89.117.118.255
IP: 89.117.120.0 -- 89.117.124.255
IP: 89.117.126.0/24
IP: 89.117.129.0 -- 89.117.130.255
IP: 89.117.132.0 -- 89.117.136.255
IP: 89.117.139.0/24
IP: 89.117.142.0 -- 89.117.155.255
IP: 89.117.157.0 -- 89.117.164.255
IP: 89.117.167.0 -- 89.117.169.255
IP: 89.117.171.0 -- 89.117.175.255
IP: 89.117.188.0/24
IP: 89.117.190.0/24
IP: 89.117.215.0 -- 89.117.218.255
IP: 89.117.222.0/24
IP: 89.117.226.0 -- 89.117.229.255
IP: 89.117.245.0/24
IP: 89.117.250.0/24
IP: 89.117.254.0/24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 15:42:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:cc:f9:cc:a4:2d:13:87:87:35:54:1d:44:37:3d:f7:c0:e5:4e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Validity
Not Before: Oct 9 09:58:32 2023 GMT
Not After : Oct 7 10:03:32 2024 GMT
Subject: CN=D34606949D385DB42714FE71274FAC9948EF279C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:69:0e:d9:9c:35:ed:5c:9f:af:35:3a:4c:93:
c7:2f:83:e5:75:a3:de:5b:2a:b7:f8:d0:21:18:d4:
85:99:ad:3f:4c:89:64:75:d5:72:02:98:6d:23:15:
5b:7b:18:ed:c0:d9:40:08:4a:aa:3d:aa:5d:c3:6f:
b0:15:20:9f:ae:9a:26:88:0a:37:b3:aa:67:60:5a:
57:d1:15:c0:1d:ca:48:1c:a1:4a:12:98:57:93:47:
9e:72:2d:fb:0e:33:4f:83:5f:f1:91:ac:52:51:0a:
91:ce:db:d9:23:b8:b2:f7:a2:39:5a:19:54:4f:33:
6c:26:68:e1:15:f5:8c:31:54:d7:b4:d8:56:c7:fc:
5d:ec:a4:91:3c:ec:b3:e6:87:1b:61:3f:bc:5e:ea:
ae:c1:de:59:56:e4:36:2d:32:fa:66:47:4c:7e:f8:
6d:54:09:aa:42:45:7d:6c:28:be:9a:6b:88:1a:9f:
6b:9a:90:a9:ac:a5:10:70:fa:5b:dd:f1:97:07:f3:
83:3a:64:aa:1f:44:78:79:55:ba:c7:6d:9d:0d:ea:
73:55:4a:f8:f6:bf:4a:bd:21:49:65:a3:53:be:a4:
05:6f:4a:6f:97:be:3f:27:25:74:01:10:5a:da:e3:
5f:35:7e:5a:31:0d:41:d4:72:25:dd:4a:2f:a3:17:
04:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Authority Key Identifier:
keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject Information Access:
CA Repository - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/
RPKI Manifest - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
RPKI Notify - URI:https://magellan.ipxo.com/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.182.0/23
84.46.170.0/23
84.46.200.0/24
84.46.234.0-84.46.255.255
86.38.4.0/23
86.38.7.0/24
86.38.24.0/24
86.38.32.0/24
86.38.37.0/24
86.38.151.0/24
86.38.156.0/24
86.38.175.0/24
86.38.177.0-86.38.187.255
86.38.189.0-86.38.190.255
86.38.200.0/24
86.38.202.0-86.38.205.255
86.38.214.0/24
86.38.216.0-86.38.221.255
86.38.225.0-86.38.226.255
86.38.232.0/24
86.38.235.0/24
86.38.238.0/24
86.38.241.0-86.38.243.255
86.38.246.0-86.38.255.255
89.116.20.0-89.116.39.255
89.116.44.0-89.116.54.255
89.116.56.0/24
89.116.58.0-89.116.70.255
89.116.72.0-89.116.76.255
89.116.80.0-89.116.89.255
89.116.91.0-89.116.92.255
89.116.96.0/24
89.116.99.0-89.116.100.255
89.116.102.0/23
89.116.106.0-89.116.108.255
89.116.112.0/23
89.116.115.0/24
89.116.123.0/24
89.116.125.0-89.116.128.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.140.0/23
89.116.144.0/24
89.116.146.0-89.116.150.255
89.116.153.0-89.116.154.255
89.116.156.0/24
89.116.158.0/24
89.116.161.0/24
89.116.163.0-89.116.166.255
89.116.168.0/23
89.116.171.0-89.116.173.255
89.116.175.0/24
89.116.177.0/24
89.116.179.0-89.116.186.255
89.116.189.0-89.116.190.255
89.116.193.0/24
89.116.198.0/24
89.116.200.0/24
89.116.202.0/23
89.116.208.0/21
89.116.218.0/24
89.116.220.0/23
89.116.223.0-89.116.231.255
89.116.233.0-89.116.234.255
89.116.236.0/23
89.116.239.0/24
89.116.241.0-89.116.244.255
89.116.246.0-89.116.248.255
89.116.250.0/24
89.116.252.0/23
89.116.255.0-89.117.3.255
89.117.5.0-89.117.9.255
89.117.11.0-89.117.13.255
89.117.15.0-89.117.25.255
89.117.27.0-89.117.33.255
89.117.35.0-89.117.38.255
89.117.40.0-89.117.68.255
89.117.70.0-89.117.85.255
89.117.87.0-89.117.91.255
89.117.94.0-89.117.99.255
89.117.101.0-89.117.107.255
89.117.109.0/24
89.117.111.0-89.117.118.255
89.117.120.0-89.117.124.255
89.117.126.0/24
89.117.129.0-89.117.130.255
89.117.132.0-89.117.136.255
89.117.139.0/24
89.117.142.0-89.117.155.255
89.117.157.0-89.117.164.255
89.117.167.0-89.117.169.255
89.117.171.0-89.117.175.255
89.117.188.0/24
89.117.190.0/24
89.117.215.0-89.117.218.255
89.117.222.0/24
89.117.226.0-89.117.229.255
89.117.245.0/24
89.117.250.0/24
89.117.254.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:f5:16:08:12:d3:8d:10:ea:ac:21:85:53:ba:d0:89:05:db:
3b:eb:1c:c7:85:19:14:e8:30:4c:e9:84:5a:6e:56:d9:4d:35:
8d:0d:94:86:f3:44:1b:d1:0c:19:af:d6:ea:a0:e6:0b:16:1f:
6d:92:83:ae:f0:c4:77:bd:d8:92:11:85:de:54:b3:00:68:56:
22:cb:5c:91:47:aa:51:bb:11:8b:a1:00:e3:b5:c2:d6:3b:55:
df:9e:65:8c:47:9e:04:68:af:02:1f:bd:9d:5d:71:74:6c:d0:
18:e4:91:b7:1b:60:da:a9:8c:b2:be:49:fe:d9:7e:38:49:fa:
5a:22:b2:bb:28:19:55:86:e8:94:82:cd:42:1a:d2:ac:cd:7e:
4f:d8:1b:08:12:ba:4f:c3:55:13:59:5b:85:ba:61:8c:71:fe:
04:ce:1b:43:f2:7d:c1:fb:29:c0:64:72:72:b6:0d:ba:4b:5f:
ed:cd:50:10:30:ca:3d:29:a4:58:c8:8b:29:fd:f9:0b:47:1d:
31:f8:a6:c7:e6:62:fe:32:b4:95:73:53:0c:15:a3:d3:09:7c:
96:79:e0:69:90:bb:51:7f:e0:3f:ee:2c:40:78:b5:74:5c:b6:
a6:5b:f1:fe:d5:15:f5:ed:c2:de:b6:f3:e3:3a:a4:f0:20:94:
61:46:ab:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 21:50:23 2024 by rpki-client on console-ams.rpki-client.org