Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/96495E25A01953ACA1A500125DE32FD2CAD7B989.cer
File:                     96495E25A01953ACA1A500125DE32FD2CAD7B989.cer (raw, json)
Hash identifier:          LiFzKEpVeAM2HthxPE/leGU45r6PyIQzQbo35cH25EU=
Subject key identifier:   96:49:5E:25:A0:19:53:AC:A1:A5:00:12:5D:E3:2F:D2:CA:D7:B9:89
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       7EDCCE18FE153D33937FE2624D58D059C4189A2C
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Manifest:                 rsync://rpki.co/repo/Mlgt/1/96495E25A01953ACA1A500125DE32FD2CAD7B989.mft
caRepository:             rsync://rpki.co/repo/Mlgt/1/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Thu 20 Jun 2024 17:55:10 +0000
Certificate not after:    Thu 19 Jun 2025 18:00:10 +0000
Subordinate resources:    IP: 2a12:dd47:3f00::/40

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft
                          rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 29 Jun 2024 00:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:dc:ce:18:fe:15:3d:33:93:7f:e2:62:4d:58:d0:59:c4:18:9a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 17:55:10 2024 GMT
            Not After : Jun 19 18:00:10 2025 GMT
        Subject: CN=96495E25A01953ACA1A500125DE32FD2CAD7B989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d7:99:02:bd:94:fc:0a:7a:6a:5e:4e:41:f1:
                    78:6d:21:f9:2c:fb:c5:6a:8f:b0:82:d2:80:e8:3a:
                    50:5e:a2:fc:03:f2:a2:80:f8:3b:73:41:5c:da:11:
                    12:5c:fe:0e:5f:7a:e5:01:5a:d1:1a:8e:d4:05:5a:
                    76:73:59:58:27:c9:70:dd:ff:27:d7:8d:59:fd:90:
                    52:cd:04:45:99:07:26:87:97:10:1b:d8:e5:c6:9c:
                    f4:f8:cb:95:35:47:57:65:b3:0b:7c:46:6a:0f:91:
                    51:34:88:da:eb:a8:f6:5d:6a:4f:22:02:10:d3:a4:
                    7b:30:b0:36:fb:2e:db:25:6a:b1:85:a3:07:28:41:
                    35:8d:80:eb:f2:1e:d9:14:55:eb:2a:c8:fc:28:dd:
                    a9:31:ce:b0:b6:c7:c0:6a:10:38:e4:20:e5:f1:79:
                    2f:c4:54:7f:ad:4b:58:00:0f:7a:62:c9:cc:1b:7a:
                    f8:5d:5e:10:6d:fc:a1:37:d0:e8:91:7b:63:3d:fa:
                    ce:d4:36:fe:1d:e0:89:c3:ed:34:f2:c3:d3:47:bf:
                    c1:b6:79:47:ac:c2:d7:65:0e:ea:1a:ad:cc:1b:76:
                    69:9d:27:db:d8:13:e1:39:97:cb:b7:fa:99:75:0a:
                    18:9c:55:46:0c:1f:e8:8f:98:ea:0b:21:8c:59:90:
                    0f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                96:49:5E:25:A0:19:53:AC:A1:A5:00:12:5D:E3:2F:D2:CA:D7:B9:89
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/Mlgt/1/
                RPKI Manifest - URI:rsync://rpki.co/repo/Mlgt/1/96495E25A01953ACA1A500125DE32FD2CAD7B989.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3a:f5:b5:6e:07:41:4e:00:84:84:e5:7b:47:b6:2e:22:55:c1:
         47:7f:de:67:49:b4:a9:90:0b:03:1f:e0:2f:cd:a5:c5:0c:f6:
         9e:35:c8:ea:cf:74:74:13:f4:d9:f6:a4:3e:21:79:f3:02:ce:
         dc:3f:8f:93:c7:f9:21:81:9a:e4:97:cb:29:43:89:44:5d:54:
         f3:05:0b:0f:21:09:53:92:be:68:11:37:47:42:87:7d:f2:29:
         62:5b:cb:bb:6e:59:5c:48:c9:bd:ac:b3:97:24:a1:80:b7:36:
         c6:4d:87:a2:c3:eb:0d:35:fa:78:76:21:8d:09:18:da:2d:cb:
         7c:1f:31:b5:56:0d:82:f0:e2:7b:6f:62:91:df:13:fe:b0:60:
         9a:05:bb:a8:e3:c5:a2:16:69:7a:ff:a2:a5:62:2b:0c:54:82:
         eb:f6:0d:f5:12:33:72:f4:f0:55:2b:84:b5:5e:d1:b0:a0:9f:
         68:14:14:90:86:57:d4:f8:ba:68:d5:3a:c3:b0:9f:47:18:c9:
         4f:3e:0d:aa:74:4c:8c:c9:51:a1:ab:e8:ff:99:71:01:0b:c8:
         3f:94:0e:6a:90:43:a3:2d:3c:a1:1e:97:46:53:3e:62:b7:64:
         c3:81:47:17:9a:8c:82:e4:3f:20:2a:09:99:68:34:0e:62:e1:
         41:66:51:98
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUftzOGP4VPTOTf+JiTVjQWcQYmiwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZG
NEM4NTBDMTAeFw0yNDA2MjAxNzU1MTBaFw0yNTA2MTkxODAwMTBaMDMxMTAvBgNV
BAMTKDk2NDk1RTI1QTAxOTUzQUNBMUE1MDAxMjVERTMyRkQyQ0FEN0I5ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR15kCvZT8CnpqXk5B8XhtIfks
+8Vqj7CC0oDoOlBeovwD8qKA+DtzQVzaERJc/g5feuUBWtEajtQFWnZzWVgnyXDd
/yfXjVn9kFLNBEWZByaHlxAb2OXGnPT4y5U1R1dlswt8RmoPkVE0iNrrqPZdak8i
AhDTpHswsDb7LtslarGFowcoQTWNgOvyHtkUVesqyPwo3akxzrC2x8BqEDjkIOXx
eS/EVH+tS1gAD3piycwbevhdXhBt/KE30OiRe2M9+s7UNv4d4InD7TTyw9NHv8G2
eUeswtdlDuoarcwbdmmdJ9vYE+E5l8u3+pl1ChicVUYMH+iPmOoLIYxZkA+JAgMB
AAGjggJcMIICWDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSWSV4loBlTrKGl
ABJd4y/Syte5iTAfBgNVHSMEGDAWgBR2W4s35VNr5JoL89YO9me29MhQwTAOBgNV
HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNj
NGZhNC8xLzc2NUI4QjM3RTU1MzZCRTQ5QTBCRjNENjBFRjY2N0I2RjRDODUwQzEu
Y3JsMGUGCCsGAQUFBwEBBFkwVzBVBggrBgEFBQcwAoZJcnN5bmM6Ly9kZXYudHcv
cnBraS9BdWd1c3QvNS83NjVCOEIzN0U1NTM2QkU0OUEwQkYzRDYwRUY2NjdCNkY0
Qzg1MEMxLmNlcjCByAYIKwYBBQUHAQsEgbswgbgwKAYIKwYBBQUHMAWGHHJzeW5j
Oi8vcnBraS5jby9yZXBvL01sZ3QvMS8wVAYIKwYBBQUHMAqGSHJzeW5jOi8vcnBr
aS5jby9yZXBvL01sZ3QvMS85NjQ5NUUyNUEwMTk1M0FDQTFBNTAwMTI1REUzMkZE
MkNBRDdCOTg5Lm1mdDA2BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLnJwa2kuY28v
cnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqEt1HPzANBgkqhkiG9w0BAQsF
AAOCAQEAOvW1bgdBTgCEhOV7R7YuIlXBR3/eZ0m0qZALAx/gL82lxQz2njXI6s90
dBP02fakPiF58wLO3D+Pk8f5IYGa5JfLKUOJRF1U8wULDyEJU5K+aBE3R0KHffIp
YlvLu25ZXEjJvayzlyShgLc2xk2HosPrDTX6eHYhjQkY2i3LfB8xtVYNgvDie29i
kd8T/rBgmgW7qOPFohZpev+ipWIrDFSC6/YN9RIzcvTwVSuEtV7RsKCfaBQUkIZX
1Pi6aNU6w7CfRxjJTz4NqnRMjMlRoavo/5lxAQvIP5QOapBDoy08oR6XRlM+Yrdk
w4FHF5qMguQ/ICoJmWg0DmLhQWZRmA==
-----END CERTIFICATE-----
Generated at Fri Jun 28 17:09:11 2024 by rpki-client on console-ams.rpki-client.org