Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.cer
File:                     F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.cer (raw, json)
Hash identifier:          Dw2iukvERqfilO0eWBMYy5Rxyutq7b63Raei7hhquos=
Subject key identifier:   F4:64:98:96:A7:0A:20:CD:8A:BB:96:44:DE:0C:03:99:CE:C6:FB:CE
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       0C690519EC50AAB13D6D6B6A344F9FD9E3F87FD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://dev.tw/rpki/August/13/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.mft
caRepository:             rsync://dev.tw/rpki/August/13/
Notify URL:               https://dev.tw/rpki/notification.xml
Certificate not before:   Mon 16 Sep 2024 02:10:01 +0000
Certificate not after:    Mon 15 Sep 2025 02:15:01 +0000
Subordinate resources:    IP: 2a05:dfc6::/32

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:69:05:19:ec:50:aa:b1:3d:6d:6b:6a:34:4f:9f:d9:e3:f8:7f:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Sep 16 02:10:01 2024 GMT
            Not After : Sep 15 02:15:01 2025 GMT
        Subject: CN=F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bb:1e:fd:c5:45:5e:0e:c8:8a:30:38:af:f6:
                    85:15:fd:d8:88:2b:65:fd:be:79:e8:13:f0:ce:0e:
                    2f:f5:bd:2f:96:cd:63:dd:64:66:41:1c:12:19:e6:
                    ac:55:e9:ea:71:e5:53:f3:ce:e5:57:68:2d:de:8f:
                    24:e9:73:35:17:81:30:ad:23:8f:86:bd:a2:eb:4e:
                    71:e6:d1:25:c9:c3:0b:c2:02:5f:83:78:80:f7:53:
                    8f:c1:2e:ec:6a:83:d3:a4:8d:a9:29:77:0e:bb:f1:
                    64:7b:31:b3:06:12:82:be:9a:8b:2f:31:d0:65:26:
                    36:31:3b:08:b7:56:ed:08:af:b1:76:3c:69:d0:2c:
                    53:9a:aa:8d:3b:2b:3d:1c:ae:a5:45:64:e6:ab:5c:
                    b4:73:e6:10:6f:30:6b:42:e5:2e:ac:e0:c0:7f:22:
                    45:44:f2:70:48:d8:1b:69:90:db:0c:cb:bd:4b:0b:
                    da:af:c2:88:46:79:80:11:60:79:79:b8:0c:7b:e0:
                    f1:e9:3b:0b:08:a6:46:17:a6:5e:c3:c5:1e:6a:8f:
                    6c:26:75:6c:6e:8f:c6:d5:67:ce:b4:c5:29:f1:d1:
                    02:89:75:1d:aa:cd:c1:3f:f8:95:c4:01:c4:82:48:
                    15:b1:18:9c:5a:43:6a:e9:3e:2f:f2:04:ee:11:23:
                    a5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F4:64:98:96:A7:0A:20:CD:8A:BB:96:44:DE:0C:03:99:CE:C6:FB:CE
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://dev.tw/rpki/August/13/
                RPKI Manifest - URI:rsync://dev.tw/rpki/August/13/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.mft
                RPKI Notify - URI:https://dev.tw/rpki/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc6::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:31:35:3c:a0:09:b7:45:06:46:6e:65:1b:91:8c:d3:38:0c:
         55:17:c3:0c:9a:79:74:29:31:e1:f8:d6:92:6f:db:38:b1:0d:
         a3:37:da:60:79:82:51:c3:65:4a:9c:f2:8c:6d:2d:c0:28:0a:
         df:c7:29:bd:43:24:9a:7a:3b:93:9d:07:01:bd:5c:a0:c0:73:
         67:c6:ef:ba:a6:ac:ce:3e:ae:48:c5:2d:55:0c:aa:ad:57:b1:
         ec:9e:f9:43:89:0c:95:2a:aa:b6:1a:07:e6:89:22:81:63:ff:
         da:cf:27:9a:25:ac:70:7f:5a:2e:3a:af:e7:e2:9a:1d:46:92:
         15:5b:fd:8d:24:fd:dc:7c:0c:6a:e9:91:32:57:c0:32:c8:37:
         ce:e1:a3:aa:1f:5c:04:73:34:7b:08:8e:ce:b9:bb:8a:c4:33:
         cd:69:7b:91:f7:3f:36:05:25:b0:1b:4a:94:e6:34:04:00:2d:
         ee:1c:58:74:36:5e:46:b3:b5:ca:56:09:78:1e:81:68:b4:ba:
         3e:b9:1e:b7:6a:8d:c3:b2:36:58:6b:8e:56:c4:85:eb:0a:7e:
         e4:55:4a:3c:bf:4c:bf:09:78:6b:d8:0b:01:f2:04:f2:93:6c:
         aa:37:4e:e8:2d:a1:f5:03:3c:56:67:34:bf:2f:f0:fc:66:fa:
         6e:8c:06:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:01:56 2024 by rpki-client on console-ams.rpki-client.org