Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
File: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer (raw, json)
Hash identifier: OINjQgxvc3Ygtd5r0r7J33NWnd3pXNnfhYI3J1X6nlM=
Subject key identifier: DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94D8C04B64BE92817839882FB7D1CD2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 24972
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:8c:04:b6:4b:e9:28:17:83:98:82:fb:7d:1c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df6a9267b18b36d828890a86387f310b84c04b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9c:2b:9f:96:1e:e6:4a:77:36:78:d5:5a:e0:
65:31:2d:40:90:e6:d6:c6:68:20:79:80:b8:8f:51:
9a:0d:3d:0f:dd:65:41:74:3d:c6:aa:4b:ed:e6:ec:
70:82:2b:48:9a:85:4f:44:42:e1:a8:0e:d0:ab:53:
5d:15:3a:7e:db:27:79:77:80:70:c0:64:24:5d:77:
5d:29:3d:d1:43:5a:98:69:30:ca:1f:ee:87:82:b9:
53:77:ae:14:b4:6d:d9:09:b2:1c:28:3d:44:c7:23:
2f:bd:31:de:26:04:40:89:33:b4:5a:5e:98:ec:ed:
34:66:7b:03:fc:8f:ac:f3:05:35:fc:aa:75:bd:da:
9e:20:88:28:66:e4:a6:a6:cc:8a:05:46:8c:af:73:
f5:fa:ba:a5:34:31:08:8e:8b:3f:17:b5:30:87:d8:
61:c2:4d:75:9f:08:86:e6:e5:44:d0:95:78:e2:f2:
5f:c2:06:12:c4:c4:c3:af:28:04:47:6a:bb:31:60:
8f:89:a8:0c:13:6d:03:4b:47:11:bf:95:98:6a:da:
93:fa:d2:8d:e8:77:5c:01:b4:3d:1f:30:5f:e9:e6:
36:d8:b7:5a:4e:c4:67:55:b1:10:ac:d1:5d:3b:fc:
41:e6:bf:89:52:eb:82:46:c3:98:0d:c9:30:49:2f:
0c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24972
Signature Algorithm: sha256WithRSAEncryption
28:65:ff:1e:f4:6b:a1:97:1d:d7:d2:a3:c7:3a:06:ab:09:79:
39:5f:4e:cf:79:f3:e0:c1:e0:ef:61:cf:0d:85:c1:fe:6e:0c:
db:e8:14:45:d6:5a:fb:2f:de:fb:f7:f5:99:ea:6d:3d:38:3a:
fd:15:a5:32:2a:a9:10:0c:09:d2:35:fe:db:0c:bc:86:0e:65:
f8:07:af:20:a0:c6:20:3b:0c:a7:80:2b:29:33:e4:e7:31:41:
62:38:87:ee:ac:62:47:b1:49:86:4c:6f:cc:55:1c:42:db:92:
c9:c6:09:e4:15:19:95:95:6d:02:22:8d:c8:af:50:74:82:7e:
58:e8:34:a7:92:b3:bc:5d:8b:33:4e:5d:20:a1:61:f6:a0:19:
6d:ea:3f:21:ed:c6:28:51:52:8f:33:f4:84:7b:80:e1:8e:8f:
bb:e1:79:f2:93:8f:2a:42:67:37:0c:80:6e:52:ac:3a:59:ee:
0a:68:ed:16:01:b0:99:ff:04:d6:fd:a3:15:8c:f3:90:ed:f7:
1b:b7:7a:07:f3:9a:6f:61:1f:62:87:6e:9e:44:2d:13:60:0d:
b8:ce:66:eb:c9:7b:9a:b7:5a:e2:bf:fa:c6:87:0c:0d:c1:c9:
b2:d8:32:73:e2:b4:5f:36:02:ad:88:22:c9:08:72:ac:6d:15:
71:63:e3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 19:31:42 2024 by rpki-client on console-fra.rpki-client.org