Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2.cer
File:                     332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2.cer (raw, json)
Hash identifier:          OTgRZ4iyQXoNkJfBYPjBkvE/VQhUb9X7lMWwoZW8pcU=
Subject key identifier:   33:2D:0D:DB:8B:DE:F4:CC:79:84:74:C9:59:79:FD:CC:E3:EB:B0:C2
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       72FCE483AF379E9AFC7FE62B9DBC151714727D57
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Manifest:                 rsync://rpki.co/repo/AS199762/2/332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2.mft
caRepository:             rsync://rpki.co/repo/AS199762/2/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Thu 20 Jun 2024 17:55:47 +0000
Certificate not after:    Thu 19 Jun 2025 18:00:47 +0000
Subordinate resources:    IP: 2a12:dd47:3900::/40

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft
                          rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 15:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:fc:e4:83:af:37:9e:9a:fc:7f:e6:2b:9d:bc:15:17:14:72:7d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 17:55:47 2024 GMT
            Not After : Jun 19 18:00:47 2025 GMT
        Subject: CN=332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1f:9c:08:65:69:72:ae:d9:99:9a:2f:b5:92:
                    36:ad:ac:97:44:b9:c8:3e:81:7e:78:2f:bf:00:e7:
                    ed:92:b5:72:19:67:8d:4f:ce:08:8a:e1:d6:73:49:
                    86:49:9a:c5:e2:1d:46:bd:e6:bc:04:e0:9b:db:eb:
                    44:34:29:3b:bb:20:e5:51:cf:f6:ad:ff:3c:ee:8b:
                    64:8b:48:02:91:1f:50:e4:d2:e7:08:b8:c8:97:26:
                    50:bb:0d:ba:35:17:3d:3d:f5:eb:96:4f:66:3f:04:
                    b9:b5:61:5c:f8:63:10:b0:30:d7:a3:81:1a:f2:a3:
                    89:20:1e:ef:30:8e:4f:07:fd:cc:32:f4:9f:5d:39:
                    40:7b:ae:4d:3d:c3:17:1b:35:d2:15:dd:56:7c:9a:
                    13:47:0d:f2:7f:cb:f7:84:9e:36:fb:a7:fe:91:7d:
                    2f:00:25:7c:0d:c8:30:25:7a:04:bc:bb:54:98:47:
                    21:37:ea:a2:8f:bb:40:ff:94:d1:53:da:ea:93:43:
                    e6:9a:c9:42:bb:85:7b:8d:e9:7f:d4:a9:ad:1f:93:
                    5c:6f:4f:cd:1e:22:4c:b0:5d:b2:8c:5b:d9:d2:f6:
                    d6:5f:53:0a:c4:78:ed:1c:c3:ac:78:5b:c6:29:cc:
                    5c:30:88:18:7e:36:4e:27:86:f1:38:8d:60:71:e9:
                    b4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:2D:0D:DB:8B:DE:F4:CC:79:84:74:C9:59:79:FD:CC:E3:EB:B0:C2
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS199762/2/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS199762/2/332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3900::/40

    Signature Algorithm: sha256WithRSAEncryption
         3b:f2:4b:3c:1e:46:da:80:5d:6c:fc:b7:83:b2:2f:ae:33:06:
         5b:b3:9b:1c:48:a3:f4:b3:f0:d8:27:50:72:e1:da:23:40:66:
         c9:bb:78:6c:66:54:d4:a9:c5:46:bf:fc:9f:37:36:1b:84:a0:
         7c:68:17:84:69:3a:2d:c1:3c:1b:40:6f:65:4c:2b:ed:86:a7:
         28:f8:b8:77:c3:ad:a0:92:50:2f:bc:87:4c:2f:37:ee:3a:e9:
         d1:4c:ad:6d:d3:c3:4a:c3:86:b4:ab:72:9f:4f:c7:53:8d:98:
         e6:d9:d9:36:78:51:a9:79:11:24:b5:22:fb:0f:c9:1b:4e:21:
         0b:9b:dc:82:26:b9:df:bc:63:7b:22:8f:02:51:30:17:7c:4f:
         bc:bd:08:1d:ab:e1:21:e8:0e:4f:c9:04:22:b5:e0:2e:04:4f:
         17:bd:0d:e6:e2:73:f4:d3:37:d8:57:df:d1:93:65:c3:0c:fb:
         e9:b8:07:c7:db:4f:04:c3:8b:97:29:db:a7:9b:06:fb:32:d0:
         dc:b0:09:0a:87:21:01:13:94:42:8b:49:e4:dd:04:42:e3:7e:
         25:95:28:dc:16:60:82:0a:22:22:8d:8d:a4:ed:2c:38:53:b9:
         b4:5d:08:53:12:7e:fa:cf:1b:a0:d4:2c:28:35:cd:ca:6e:9d:
         bf:ab:b0:df
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIUcvzkg683npr8f+YrnbwVFxRyfVcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZG
NEM4NTBDMTAeFw0yNDA2MjAxNzU1NDdaFw0yNTA2MTkxODAwNDdaMDMxMTAvBgNV
BAMTKDMzMkQwRERCOEJERUY0Q0M3OTg0NzRDOTU5NzlGRENDRTNFQkIwQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfH5wIZWlyrtmZmi+1kjatrJdE
ucg+gX54L78A5+2StXIZZ41PzgiK4dZzSYZJmsXiHUa95rwE4Jvb60Q0KTu7IOVR
z/at/zzui2SLSAKRH1Dk0ucIuMiXJlC7Dbo1Fz099euWT2Y/BLm1YVz4YxCwMNej
gRryo4kgHu8wjk8H/cwy9J9dOUB7rk09wxcbNdIV3VZ8mhNHDfJ/y/eEnjb7p/6R
fS8AJXwNyDAlegS8u1SYRyE36qKPu0D/lNFT2uqTQ+aayUK7hXuN6X/Uqa0fk1xv
T80eIkywXbKMW9nS9tZfUwrEeO0cw6x4W8YpzFwwiBh+Nk4nhvE4jWBx6bSzAgMB
AAGjggJkMIICYDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQzLQ3bi970zHmE
dMlZef3M4+uwwjAfBgNVHSMEGDAWgBR2W4s35VNr5JoL89YO9me29MhQwTAOBgNV
HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNj
NGZhNC8xLzc2NUI4QjM3RTU1MzZCRTQ5QTBCRjNENjBFRjY2N0I2RjRDODUwQzEu
Y3JsMGUGCCsGAQUFBwEBBFkwVzBVBggrBgEFBQcwAoZJcnN5bmM6Ly9kZXYudHcv
cnBraS9BdWd1c3QvNS83NjVCOEIzN0U1NTM2QkU0OUEwQkYzRDYwRUY2NjdCNkY0
Qzg1MEMxLmNlcjCB0AYIKwYBBQUHAQsEgcMwgcAwLAYIKwYBBQUHMAWGIHJzeW5j
Oi8vcnBraS5jby9yZXBvL0FTMTk5NzYyLzIvMFgGCCsGAQUFBzAKhkxyc3luYzov
L3Jwa2kuY28vcmVwby9BUzE5OTc2Mi8yLzMzMkQwRERCOEJERUY0Q0M3OTg0NzRD
OTU5NzlGRENDRTNFQkIwQzIubWZ0MDYGCCsGAQUFBzANhipodHRwczovL3JyZHAu
cnBraS5jby9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoS3Uc5MA0GCSqG
SIb3DQEBCwUAA4IBAQA78ks8HkbagF1s/LeDsi+uMwZbs5scSKP0s/DYJ1By4doj
QGbJu3hsZlTUqcVGv/yfNzYbhKB8aBeEaTotwTwbQG9lTCvthqco+Lh3w62gklAv
vIdMLzfuOunRTK1t08NKw4a0q3KfT8dTjZjm2dk2eFGpeREktSL7D8kbTiELm9yC
JrnfvGN7Io8CUTAXfE+8vQgdq+Eh6A5PyQQiteAuBE8XvQ3m4nP00zfYV9/Rk2XD
DPvpuAfH208Ew4uXKdunmwb7MtDcsAkKhyEBE5RCi0nk3QRC434llSjcFmCCCiIi
jY2k7Sw4U7m0XQhTEn76zxug1CwoNc3Kbp2/q7Df
-----END CERTIFICATE-----
Generated at Tue Jul 2 23:51:24 2024 by rpki-client on console-ams.rpki-client.org