Certificate

$ rpki-client -vvf dev.tw/rpki/AS945/1/8D47937E5FB1C1169EEAD229E680E581B175465F.cer
File:                     8D47937E5FB1C1169EEAD229E680E581B175465F.cer (raw, json)
Hash identifier:          3GzvTRTJCKOEeUfEltK00OKpOoa9QIroNV7Vx4j/WJA=
Subject key identifier:   8D:47:93:7E:5F:B1:C1:16:9E:EA:D2:29:E6:80:E5:81:B1:75:46:5F
Authority key identifier: 12:96:20:28:A1:81:E7:58:B8:99:0A:6C:A4:F0:4A:99:8A:69:31:1E
Certificate issuer:       /CN=12962028A181E758B8990A6CA4F04A998A69311E
Certificate serial:       64191A1BE0150ACF67DC9117E59B2847B67216B7
Authority info access:    rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer
Manifest:                 rsync://rpki.co/repo/Rudaki/0/8D47937E5FB1C1169EEAD229E680E581B175465F.mft
caRepository:             rsync://rpki.co/repo/Rudaki/0/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Sat 12 Oct 2024 09:07:24 +0000
Certificate not after:    Sat 11 Oct 2025 09:12:24 +0000
Subordinate resources:    IP: 2a12:dd47:5300::/40

Validation:               OK
Signature path:           rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.crl
                          rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.mft
                          rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 03:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:19:1a:1b:e0:15:0a:cf:67:dc:91:17:e5:9b:28:47:b6:72:16:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12962028A181E758B8990A6CA4F04A998A69311E
        Validity
            Not Before: Oct 12 09:07:24 2024 GMT
            Not After : Oct 11 09:12:24 2025 GMT
        Subject: CN=8D47937E5FB1C1169EEAD229E680E581B175465F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4f:c3:e7:5a:34:7e:10:ad:28:b6:fb:99:25:
                    4e:21:41:da:b0:14:89:22:0b:79:96:81:38:e0:9c:
                    8c:59:9c:eb:9d:be:40:85:9b:ff:18:f3:b1:fa:9f:
                    80:ec:5e:a9:35:b1:fe:4c:4d:e2:5a:1b:08:95:af:
                    2e:d8:a3:57:ae:7f:fb:68:08:85:33:9c:c3:2d:f8:
                    b4:2c:3b:fa:ed:94:01:85:27:ab:1d:30:6d:51:e4:
                    85:20:a6:6d:e2:ce:69:06:a3:70:aa:45:17:e2:07:
                    6e:9b:7b:90:d6:5f:2e:c0:49:9a:c0:5a:5f:de:25:
                    4d:2f:62:63:e0:27:21:69:d5:34:b4:de:bd:6a:19:
                    b8:01:67:09:7f:51:d2:5d:a2:57:70:16:2f:72:2c:
                    42:7a:cb:a6:58:46:78:06:e7:e6:c9:b3:33:e5:9c:
                    a0:c2:a2:6a:7d:77:01:0b:c2:93:ae:55:ad:24:92:
                    a6:ac:18:89:34:da:b8:ba:ff:be:59:72:63:8c:7d:
                    c5:10:83:ee:26:77:31:c1:9e:72:68:72:2e:aa:df:
                    c7:4b:6f:ce:f9:fb:28:e2:a0:14:57:50:0b:53:27:
                    c4:9d:57:06:1e:ab:8b:71:b5:f0:61:a4:3f:f6:53:
                    84:14:fe:38:f6:d0:43:05:81:71:5b:1e:0d:ef:06:
                    0c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:47:93:7E:5F:B1:C1:16:9E:EA:D2:29:E6:80:E5:81:B1:75:46:5F
            X509v3 Authority Key Identifier:
                keyid:12:96:20:28:A1:81:E7:58:B8:99:0A:6C:A4:F0:4A:99:8A:69:31:1E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/Rudaki/0/
                RPKI Manifest - URI:rsync://rpki.co/repo/Rudaki/0/8D47937E5FB1C1169EEAD229E680E581B175465F.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5300::/40

    Signature Algorithm: sha256WithRSAEncryption
         05:07:71:1c:db:5d:6e:93:b1:34:68:9d:fb:f0:5e:0b:c1:78:
         2b:2b:a6:c2:1f:bb:b8:84:e8:79:a1:86:0d:5f:55:8c:b4:62:
         4b:1c:9a:dc:fa:40:ff:22:fe:71:4d:48:d2:bf:e5:d7:ed:13:
         21:b8:7d:6a:10:00:e8:d7:2a:50:7b:16:ae:34:d6:83:ae:58:
         a9:a9:ad:4e:f4:c6:7d:65:64:f0:48:fe:f8:34:6e:d4:3e:6a:
         86:b4:1f:4d:73:46:0a:8c:99:cd:f7:c3:5c:50:25:bb:81:5e:
         23:d7:48:3a:74:0b:15:91:6d:25:be:e3:ce:1f:cd:37:9a:1f:
         c4:5d:99:55:2c:27:47:8c:a0:2b:d2:4a:12:f4:23:2a:05:f2:
         f9:d1:5a:7c:26:a6:1d:37:39:e3:26:41:fb:93:4f:c2:ad:fc:
         c4:fe:e3:da:a2:f2:f7:5d:48:ab:c7:0d:db:2c:67:c9:f3:21:
         56:89:bb:b6:01:a9:bf:c8:53:df:ab:47:f9:48:5f:10:00:13:
         a4:67:fd:80:a0:3e:e5:a0:56:f0:88:87:d6:af:39:55:bb:45:
         6e:a8:56:2c:eb:fb:97:36:30:50:cb:27:4a:ab:23:a0:ca:dd:
         58:57:60:75:69:d7:76:c5:63:a4:c5:48:de:46:ec:81:2c:85:
         9b:1d:76:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:44 2024 by rpki-client on console-ams.rpki-client.org