Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1lmnrw-n3KMxlNNS_JcUCucOjjo.cer
File:                     1lmnrw-n3KMxlNNS_JcUCucOjjo.cer (raw, json)
Hash identifier:          SsbEfL1w7v/VmbhtSPhGUdnHvUqML4xtKpNBYZQ8XbU=
Subject key identifier:   D6:59:A7:AF:0F:A7:DC:A3:31:94:D3:52:FC:97:14:0A:E7:0E:8E:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019D6259D1831DAF686E32C195121628916B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://akane.maru.co.jp/repo/1073c6/17/D659A7AF0FA7DCA33194D352FC97140AE70E8E3A.mft
caRepository:             rsync://akane.maru.co.jp/repo/1073c6/17/
Notify URL:               https://akane.maru.co.jp/oshirase.xml
Certificate not before:   Mon 06 Apr 2026 10:32:26 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 7257
                          IP: 168.151.54.0/24
                          IP: 208.88.66.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:62:59:d1:83:1d:af:68:6e:32:c1:95:12:16:28:91:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  6 10:32:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d659a7af0fa7dca33194d352fc97140ae70e8e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:50:ef:eb:de:7f:e1:a7:a2:d2:33:a7:67:43:
                    11:a5:a1:ac:b9:b9:cc:95:f2:d7:9a:cc:0f:81:31:
                    47:7a:17:de:c3:2c:c8:bf:6e:43:c8:98:5d:61:0d:
                    20:5e:83:b9:ce:37:2e:fa:40:ec:a1:aa:cc:3d:a0:
                    8e:4d:7c:b2:ce:e2:84:b5:93:ab:61:3e:fb:f1:53:
                    9d:f3:89:01:78:10:a1:c0:68:b0:8c:26:4c:7f:46:
                    2e:75:67:9b:32:7c:df:a4:ad:68:fa:2c:f8:1a:dc:
                    9a:92:d3:7e:2e:4f:75:46:61:37:91:a7:5e:90:a2:
                    a1:72:42:5b:ed:a9:1d:29:38:18:f9:f0:5a:28:35:
                    c6:cd:b8:62:3a:30:cd:17:e7:05:05:4e:8f:c1:6c:
                    12:19:9c:88:55:cf:c9:19:bd:29:48:85:cb:03:37:
                    41:97:6d:01:3c:bf:a3:c9:08:29:f9:52:b4:0d:8f:
                    1f:3b:76:28:ae:44:96:99:4d:c6:f9:9b:3c:39:37:
                    7a:ab:61:a2:dd:a9:13:f9:24:ae:9c:6b:df:73:bb:
                    e6:04:3a:6f:a8:60:5a:c4:e7:76:76:b0:e5:3d:ca:
                    09:b0:1b:0b:03:7c:86:a4:8b:fb:a2:10:3e:bf:1f:
                    6d:d1:3b:a5:ba:a9:5c:d1:b4:79:48:33:3e:d3:b6:
                    13:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:59:A7:AF:0F:A7:DC:A3:31:94:D3:52:FC:97:14:0A:E7:0E:8E:3A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://akane.maru.co.jp/repo/1073c6/17/
                RPKI Manifest - URI:rsync://akane.maru.co.jp/repo/1073c6/17/D659A7AF0FA7DCA33194D352FC97140AE70E8E3A.mft
                RPKI Notify - URI:https://akane.maru.co.jp/oshirase.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.151.54.0/24
                  208.88.66.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7257

    Signature Algorithm: sha256WithRSAEncryption
         30:b5:11:76:07:75:60:07:dc:19:68:c1:ef:3b:48:bb:5e:d1:
         24:47:14:86:46:f2:e9:3a:2b:d8:05:5d:0d:d7:cf:79:29:0f:
         f9:72:61:25:ee:cb:7b:1c:38:0c:8b:8a:aa:87:af:95:f6:ae:
         f5:56:f9:2c:d2:72:3a:d1:c1:f3:6c:83:bf:a4:74:42:18:ba:
         75:cc:ee:81:fd:50:56:a0:a1:a1:df:ee:8d:cb:b4:04:86:c8:
         fc:c1:3f:93:af:f1:ee:68:7a:90:6e:40:ce:99:4e:5d:53:5e:
         d7:44:35:96:e4:b7:ba:42:13:ba:a4:41:9f:4e:3c:bd:2a:b6:
         a3:f2:21:cc:5a:3e:25:af:5e:37:e4:ba:33:2f:65:06:2f:a2:
         6a:7c:6e:a6:f5:76:58:52:80:fa:2a:85:01:29:3a:b1:5a:08:
         7e:07:d8:4a:90:41:48:09:13:bb:f5:ec:c6:c9:53:23:ef:cf:
         57:42:48:d3:68:72:36:14:c2:10:26:62:17:55:82:80:40:bb:
         91:91:66:33:8c:be:56:2a:99:10:24:66:56:a6:c7:7a:b3:f8:
         81:25:d7:af:d7:13:77:6b:42:57:bb:4f:97:d0:ce:f7:36:6a:
         b1:ec:19:fe:45:d5:92:11:70:c7:8e:79:7d:83:75:cb:94:54:
         90:d7:55:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 20:59:29 2026 by rpki-client