Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S3NMolsEoZjz7_ecKTNRYGRwIj8.cer
File:                     S3NMolsEoZjz7_ecKTNRYGRwIj8.cer (raw, json)
Hash identifier:          usa1s8V43MdRSbjlPUgxwO4h93sVgFavQWrRLVGxD9Q=
Subject key identifier:   4B:73:4C:A2:5B:04:A1:98:F3:EF:F7:9C:29:33:51:60:64:70:22:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019A50B56B3EA1442734FFE677ECA09C24E4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://akane.maru.co.jp/repo/1073c6/11/4B734CA25B04A198F3EFF79C293351606470223F.mft
caRepository:             rsync://akane.maru.co.jp/repo/1073c6/11/
Notify URL:               https://akane.maru.co.jp/oshirase.xml
Certificate not before:   Tue 04 Nov 2025 21:10:58 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.155.75.0/24
                          IP: 2a13:c000::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:b5:6b:3e:a1:44:27:34:ff:e6:77:ec:a0:9c:24:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov  4 21:10:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4b734ca25b04a198f3eff79c293351606470223f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6c:2e:99:03:33:75:d9:13:60:9e:1e:52:22:
                    99:cb:a1:c6:ca:9a:24:42:6a:a8:e4:c3:86:38:e2:
                    8b:28:6a:89:fb:fc:46:3b:98:f2:7f:81:19:85:ef:
                    ad:a0:55:0e:9d:c0:16:8a:3f:1c:e7:c1:93:1f:2a:
                    5d:9a:8a:84:6d:82:d0:7e:8b:a9:0a:03:e2:b7:40:
                    38:bb:d8:c3:a7:4f:0f:31:4f:bf:ba:c0:c9:35:7f:
                    d4:e3:70:e8:61:c1:ad:e0:98:ea:3f:fa:4a:d0:5b:
                    9a:23:3a:8e:9f:cb:0f:a3:33:e6:c3:9a:27:0d:fa:
                    25:28:01:f9:5f:90:2f:17:cd:e7:c3:72:d9:c9:8c:
                    b8:19:60:ac:99:65:e8:99:b2:e3:ef:94:96:15:4a:
                    50:e2:97:2c:d6:d9:e4:d8:93:c8:40:93:06:71:43:
                    39:54:3b:aa:b3:86:fe:43:f4:71:f8:68:f4:7c:b2:
                    34:f5:03:2f:b4:cb:c1:fb:f7:ac:a3:65:4d:4e:1c:
                    d8:85:4c:2d:20:91:32:f8:cc:d6:cf:25:f1:1c:82:
                    95:f8:03:d5:50:36:96:f6:46:d0:cc:87:a8:d4:3a:
                    82:93:99:ea:a2:32:8c:f7:ce:c5:15:26:5c:fd:a7:
                    c5:83:1f:58:94:3b:58:4d:06:40:47:c7:e2:1a:b6:
                    de:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:73:4C:A2:5B:04:A1:98:F3:EF:F7:9C:29:33:51:60:64:70:22:3F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://akane.maru.co.jp/repo/1073c6/11/
                RPKI Manifest - URI:rsync://akane.maru.co.jp/repo/1073c6/11/4B734CA25B04A198F3EFF79C293351606470223F.mft
                RPKI Notify - URI:https://akane.maru.co.jp/oshirase.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.75.0/24
                IPv6:
                  2a13:c000::/29

    Signature Algorithm: sha256WithRSAEncryption
         9d:dc:e3:02:f6:82:e9:40:eb:87:21:31:ca:8c:df:88:89:58:
         c3:2c:c4:c0:2f:e9:c0:d4:7a:c5:fe:42:2f:5f:5a:7c:c7:d7:
         82:66:48:a7:44:89:2d:c6:33:3f:7f:9f:16:69:01:88:ee:aa:
         b3:ba:2d:25:93:80:ab:d7:6b:06:7e:c4:b1:21:71:eb:78:df:
         db:da:1e:8e:27:5d:71:4d:dc:8c:ad:b5:c6:b6:05:10:fa:93:
         f7:11:37:88:dc:24:e1:03:22:8e:7a:d5:b4:38:db:cb:b2:4b:
         bc:8e:b1:9e:42:11:af:4e:94:bc:26:37:51:cd:d6:fd:a5:9e:
         8d:87:b6:6c:1b:57:f9:50:11:b7:5a:b9:13:f7:41:d9:f4:62:
         23:bd:92:f7:de:fb:a2:64:ff:3a:6f:b7:c5:1b:b8:b2:33:97:
         f0:08:91:45:39:64:8c:da:a1:92:13:41:c9:c8:4a:ac:3a:3f:
         f6:1a:37:29:7e:f0:21:58:00:34:24:05:b4:23:07:8a:60:d4:
         a6:26:1b:41:0a:d9:d5:c7:0e:9a:3f:3c:11:a3:e6:de:99:08:
         99:c4:a9:75:9d:55:17:a4:29:10:92:d8:4c:89:d3:09:e0:e6:
         a3:73:8c:f1:2b:49:5b:1f:4a:e7:a4:70:66:ff:d9:c5:02:22:
         73:fa:23:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:23:20 2025 by rpki-client