Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer
File:                     34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer (raw, json)
Hash identifier:          yUXWybF5YA6SHDu4+Bys83AfkpLe3IQEmbJLGp+FCjw=
Subject key identifier:   34:E6:AA:C7:41:93:FE:34:C5:7C:B5:F5:62:60:8E:E1:E5:0D:AD:51
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       04DCD1D0DD5A4D9DD8DA9B62C64DD45E7EEE63BF
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Thu 20 Jun 2024 08:08:03 +0000
Certificate not after:    Thu 19 Jun 2025 08:13:03 +0000
Subordinate resources:    IP: 2a12:dd47:802c::/46
                          IP: 2a12:dd47:8230::/44
                          IP: 2a12:dd47:8400::/40

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft
                          rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 15:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:dc:d1:d0:dd:5a:4d:9d:d8:da:9b:62:c6:4d:d4:5e:7e:ee:63:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 08:08:03 2024 GMT
            Not After : Jun 19 08:13:03 2025 GMT
        Subject: CN=34E6AAC74193FE34C57CB5F562608EE1E50DAD51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:91:72:3e:89:00:b2:cb:30:2a:54:7a:b5:1f:
                    e6:ab:16:9f:bc:0b:4d:12:e9:86:f7:f7:d6:78:ce:
                    a3:00:12:93:08:4a:53:d6:07:ff:b1:c8:73:78:c5:
                    7c:3a:6a:a2:b4:6b:d4:4b:2e:55:3a:7b:ad:c4:af:
                    17:a8:94:ad:94:81:c7:f3:47:7f:dc:e8:27:57:42:
                    9f:b4:f8:fc:d6:b5:6e:15:a8:11:61:6d:3d:7b:68:
                    4c:b7:4f:59:5e:27:c6:19:1f:a9:c6:7a:95:6e:dc:
                    c5:03:84:a3:59:5f:cc:a0:c6:47:82:4b:a4:bb:f0:
                    27:95:0f:03:a4:a8:f6:a6:3d:b9:4d:c7:92:68:f6:
                    e9:fa:9a:dd:92:d1:06:ee:b5:d1:bb:f7:de:36:c0:
                    5d:c1:b9:1d:c3:a4:ff:93:ef:35:81:19:65:e7:98:
                    d4:33:84:18:b5:e2:36:4f:35:1b:02:bb:86:87:f7:
                    64:11:63:89:c2:23:df:15:a7:d3:f2:0c:fa:bb:7e:
                    b4:5e:f6:3d:5e:e5:bf:e8:06:e2:86:dc:38:51:8e:
                    2a:37:40:4e:ab:e2:d6:40:e2:5b:1c:5a:48:69:84:
                    1c:c6:0d:85:89:2f:13:73:97:95:b4:e2:83:fc:fc:
                    d0:cc:d9:72:76:c1:b8:57:32:d2:56:dd:46:d9:03:
                    f9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                34:E6:AA:C7:41:93:FE:34:C5:7C:B5:F5:62:60:8E:E1:E5:0D:AD:51
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:802c::/46
                  2a12:dd47:8230::/44
                  2a12:dd47:8400::/40

    Signature Algorithm: sha256WithRSAEncryption
         1c:82:33:c7:b1:7c:36:fd:7c:e8:bd:7e:31:f3:00:49:cd:f1:
         a8:b1:3e:9d:86:65:83:b4:10:23:ed:9e:f6:1f:ac:29:e6:39:
         68:7d:0b:f8:03:af:90:9b:a3:7b:10:86:8b:1a:1c:6e:22:2c:
         26:00:e6:6c:23:44:42:09:08:8f:8f:72:62:5d:33:09:f6:69:
         ef:b0:3b:80:ef:11:83:f7:37:74:83:af:81:6b:ea:ba:e9:71:
         5c:02:6d:d7:52:3a:2a:b7:e0:bb:c4:7a:94:80:36:6b:82:6c:
         e8:e2:f2:c2:25:56:b1:1e:4a:90:e8:83:42:a7:69:78:2d:ab:
         46:f5:dc:91:5a:2e:cb:14:aa:87:6a:32:69:02:53:76:df:e6:
         47:bb:73:53:12:b7:4b:b6:2e:f3:d0:61:e7:15:b2:58:5c:83:
         92:b0:b8:5b:0a:b9:51:c0:04:9d:29:b5:39:0b:b3:38:4a:8e:
         28:7c:f8:05:bb:e1:77:6c:5a:11:73:e5:cc:e5:c3:1a:b6:90:
         08:06:ee:b4:c0:f1:89:d3:15:7d:7f:97:6a:a4:ae:d1:03:e4:
         fe:a7:d2:86:71:77:bf:c5:a6:16:94:22:b6:3f:f8:38:ef:75:
         a7:a7:7e:fd:57:84:99:5b:1f:9e:21:3c:58:8c:a1:b9:bd:5a:
         d6:ff:3c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 23:51:24 2024 by rpki-client on console-ams.rpki-client.org