Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
File:                     LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer (raw, json)
Hash identifier:          umk+Ft/QFoEr1LUAlTTt8QPVS83s5FBodnoTQPPKYL4=
Subject key identifier:   2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01981759EAEB3F0A2DDF3901025E9A559860
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 17 Jul 2025 07:47:05 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 9098
                          AS: 30788
                          IP: 5.181.13.0 -- 5.181.15.255
                          IP: 45.82.80.0/22
                          IP: 45.145.52.0/22
                          IP: 45.150.48.0/22
                          IP: 45.159.180.0/24
                          IP: 45.159.182.0/23
                          IP: 94.199.7.0/24
                          IP: 194.34.244.0/22
                          IP: 2a06:7840::/29
                          IP: 2a07:5340::/29
                          IP: 2a07:d940::/29
                          IP: 2a07:f600::/29
                          IP: 2a09:3900::/29
                          IP: 2a09:3c80::/29
                          IP: 2a09:cb00::/29
                          IP: 2a0a:f8c0::/29
                          IP: 2a0b:2a80::/29
                          IP: 2a0b:2d80::/29
                          IP: 2a0c:7b80::/29
                          IP: 2a0c:c180::/29
                          IP: 2a0d:4440::/29
                          IP: 2a0d:fb40::/29
                          IP: 2a0f:f00::/29
                          IP: 2a0f:4bc0::/29
                          IP: 2a0f:5080::/29
                          IP: 2a0f:59c0::/29
                          IP: 2a0f:8440::/29
                          IP: 2a0f:a380::/29
                          IP: 2a0f:e100::/29
                          IP: 2a0f:ff80::/29
                          IP: 2a11:1780::/29
                          IP: 2a11:2540::/29
                          IP: 2a11:3840::/29
                          IP: 2a11:3e40::/29
                          IP: 2a11:4100::/29
                          IP: 2a11:52c0::/29
                          IP: 2a11:5480::/29
                          IP: 2a11:6640::/29
                          IP: 2a11:7780::/29
                          IP: 2a11:78c0::/29
                          IP: 2a11:8d80::/29
                          IP: 2a11:8ec0::/29
                          IP: 2a11:fe00::/29
                          IP: 2a12:c0::/29
                          IP: 2a12:19c0::/29
                          IP: 2a12:23c0::/29
                          IP: 2a12:2940::/29
                          IP: 2a12:2bc0::/29
                          IP: 2a12:3400::/29
                          IP: 2a12:3540::/29
                          IP: 2a12:3940::/29
                          IP: 2a12:4340::/29
                          IP: 2a12:5640::/29
                          IP: 2a12:b580::/29
                          IP: 2a12:e580::/29
                          IP: 2a13:5200::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:17:59:ea:eb:3f:0a:2d:df:39:01:02:5e:9a:55:98:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 17 07:47:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:27:7d:94:c5:a9:4a:ea:0d:5f:b9:2c:db:85:
                    12:91:e6:f9:4f:73:e0:e4:97:7e:ce:e1:e5:a3:6c:
                    d0:44:5d:41:06:d7:3c:22:af:e8:dc:93:e1:6c:00:
                    7e:50:dd:f8:89:df:db:5d:1d:c9:ff:de:bf:ea:83:
                    6a:48:cd:18:f5:ec:0e:5d:bd:40:9d:01:5e:36:0c:
                    db:97:ee:3e:75:d4:37:1d:a3:2e:7e:ad:82:4f:c5:
                    55:5c:80:c4:1b:26:d5:c2:1a:3f:67:b2:7a:8b:1a:
                    7b:ad:13:b3:c7:9c:0d:a7:61:57:c7:9c:8f:62:16:
                    87:9f:c5:1b:20:e7:5a:ea:ab:1d:bd:3f:e3:79:a7:
                    e6:e6:18:1c:8f:39:80:25:23:68:5b:18:7a:03:96:
                    7b:85:cb:68:2e:d5:e4:fe:fd:9c:75:b0:f4:62:04:
                    00:c4:4a:58:06:b4:87:52:36:5f:85:4f:d1:64:db:
                    95:7d:c1:ef:42:48:44:d0:c7:84:0e:9f:99:24:ec:
                    32:ab:e9:f3:7f:07:1e:bd:a8:6f:9b:5a:91:cc:7d:
                    73:79:90:97:03:07:b5:64:9e:ee:94:0e:7c:10:2b:
                    ad:5a:b6:ee:12:a5:f6:b4:2d:14:aa:96:fd:1b:51:
                    d7:c1:09:ca:fa:ef:8f:c3:10:ec:7f:7b:75:99:96:
                    c4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.13.0-5.181.15.255
                  45.82.80.0/22
                  45.145.52.0/22
                  45.150.48.0/22
                  45.159.180.0/24
                  45.159.182.0/23
                  94.199.7.0/24
                  194.34.244.0/22
                IPv6:
                  2a06:7840::/29
                  2a07:5340::/29
                  2a07:d940::/29
                  2a07:f600::/29
                  2a09:3900::/29
                  2a09:3c80::/29
                  2a09:cb00::/29
                  2a0a:f8c0::/29
                  2a0b:2a80::/29
                  2a0b:2d80::/29
                  2a0c:7b80::/29
                  2a0c:c180::/29
                  2a0d:4440::/29
                  2a0d:fb40::/29
                  2a0f:f00::/29
                  2a0f:4bc0::/29
                  2a0f:5080::/29
                  2a0f:59c0::/29
                  2a0f:8440::/29
                  2a0f:a380::/29
                  2a0f:e100::/29
                  2a0f:ff80::/29
                  2a11:1780::/29
                  2a11:2540::/29
                  2a11:3840::/29
                  2a11:3e40::/29
                  2a11:4100::/29
                  2a11:52c0::/29
                  2a11:5480::/29
                  2a11:6640::/29
                  2a11:7780::/29
                  2a11:78c0::/29
                  2a11:8d80::/29
                  2a11:8ec0::/29
                  2a11:fe00::/29
                  2a12:c0::/29
                  2a12:19c0::/29
                  2a12:23c0::/29
                  2a12:2940::/29
                  2a12:2bc0::/29
                  2a12:3400::/29
                  2a12:3540::/29
                  2a12:3940::/29
                  2a12:4340::/29
                  2a12:5640::/29
                  2a12:b580::/29
                  2a12:e580::/29
                  2a13:5200::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9098
                  30788

    Signature Algorithm: sha256WithRSAEncryption
         25:4f:a8:50:1c:f0:fa:6d:69:96:3d:dd:89:06:c2:ab:31:a2:
         c8:7a:6f:19:17:95:d1:8c:0f:51:b8:72:76:c6:a8:27:b9:78:
         f9:c8:92:2f:c5:0f:65:56:16:d1:75:90:81:59:1d:c9:85:32:
         a0:11:4b:7b:ea:ed:1d:ac:34:87:97:e8:42:78:7e:cf:84:7f:
         3f:2d:13:e2:08:af:35:84:a6:11:8f:6d:b4:01:74:f9:80:9d:
         52:c0:c3:26:25:6a:fb:2a:6c:01:ce:92:c5:57:fb:14:5e:75:
         b1:57:5f:76:c6:4d:b2:5a:ae:17:2f:34:68:ac:f7:af:01:07:
         35:6e:a4:a6:a3:e4:db:82:98:70:9b:61:94:ad:37:2f:84:37:
         64:6a:63:b8:65:6f:c9:ea:ee:c3:b7:4f:e9:a3:08:eb:2d:19:
         af:67:8b:62:cc:47:54:42:bd:1f:3e:09:ed:aa:d5:a9:cc:4f:
         e5:b2:53:d6:e5:d4:49:6d:77:5f:95:b7:76:d5:46:70:be:54:
         5e:30:9e:e7:bc:32:4c:f0:30:e6:17:67:67:6f:80:21:03:83:
         cb:25:ea:a4:f0:22:4d:86:5f:8b:ec:f5:8e:dd:e3:3c:d4:92:
         f5:10:e0:66:60:a5:d1:3e:88:19:3a:3e:1c:40:d1:70:b7:df:
         14:fe:3e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:11:42 2025 by rpki-client