Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/40C513034911811188EE6887BB01091E1FE7EE0D.cer
File:                     40C513034911811188EE6887BB01091E1FE7EE0D.cer (raw, json)
Hash identifier:          XPPhtNulI9jHK3Z9PWsLREBkRr3l9oYdeZkUb2UauFU=
Subject key identifier:   40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       30CA81261671AC9719200F240DC02B313E178712
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Manifest:                 rsync://rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.mft
caRepository:             rsync://rpki.co/repo/Simple/1/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Thu 20 Jun 2024 06:52:45 +0000
Certificate not after:    Thu 19 Jun 2025 06:57:45 +0000
Subordinate resources:    IP: 2a12:dd46:1000::/36
                          IP: 2a12:dd47:f200::/40

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft
                          rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 28 Jun 2024 06:17:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ca:81:26:16:71:ac:97:19:20:0f:24:0d:c0:2b:31:3e:17:87:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 06:52:45 2024 GMT
            Not After : Jun 19 06:57:45 2025 GMT
        Subject: CN=40C513034911811188EE6887BB01091E1FE7EE0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f1:44:a3:16:26:5c:f9:49:43:8d:1f:51:77:
                    03:e6:ca:57:b7:ca:f3:7c:09:8e:28:f6:83:96:8b:
                    ad:0e:22:f1:6f:23:d9:9d:97:d4:a5:6f:68:24:82:
                    65:db:c2:86:c0:4f:6d:89:97:23:16:bd:31:32:32:
                    3e:f1:e1:be:d4:20:af:0e:88:e9:8c:b5:64:fb:32:
                    0f:8a:08:be:ff:ef:9b:dc:e2:48:97:aa:7a:71:88:
                    9d:1b:27:ea:93:51:69:11:b0:90:53:8a:e4:7e:f7:
                    f5:bb:7c:e5:17:dd:cf:1e:de:b3:0d:5b:53:69:2b:
                    a9:fe:d5:cd:47:f2:51:46:fa:0a:59:60:3d:e9:d6:
                    9f:e6:fa:f2:37:57:7c:27:25:2e:4a:f8:cc:4e:12:
                    73:63:f6:79:bb:3d:35:66:15:1b:53:5b:a8:32:ac:
                    e2:7b:fa:ae:ee:3a:b4:99:a1:1d:c1:df:d2:2b:29:
                    2c:09:cc:df:e3:6f:f2:b7:0b:7b:1b:cf:31:a5:fd:
                    04:a8:0e:50:71:e1:9f:9a:78:56:80:02:af:e6:72:
                    c5:17:9c:bc:7d:99:3d:99:6d:19:cf:99:df:e2:f7:
                    bf:5c:73:21:83:f6:8b:98:f9:6c:7d:00:d8:d2:e7:
                    44:b3:b0:0f:72:41:a7:3b:7e:8c:fe:cd:9f:75:e3:
                    6e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/Simple/1/
                RPKI Manifest - URI:rsync://rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd46:1000::/36
                  2a12:dd47:f200::/40

    Signature Algorithm: sha256WithRSAEncryption
         45:c1:24:28:20:c2:8f:2f:37:d7:57:4f:bf:5b:22:d0:8e:37:
         99:25:f6:a0:1c:2e:1d:be:8e:bb:32:16:15:bf:16:b9:d9:b9:
         97:58:f4:2f:f0:14:8b:ea:19:e6:52:c3:d5:f3:af:17:ea:ed:
         7b:34:35:24:b1:d3:46:2d:63:42:45:f4:e4:de:84:a6:bc:bf:
         50:fa:4f:e9:12:a2:7b:3e:44:26:f5:d3:ac:3f:1a:ee:44:2e:
         fb:ea:e2:e8:85:cf:40:ce:38:6c:e3:cd:11:55:39:47:d5:2c:
         61:f6:23:c7:f1:15:76:8a:27:ca:c8:1a:f7:a8:6f:cf:0a:a7:
         aa:70:4b:c7:b2:4d:cb:28:c7:bb:f9:83:c1:8e:87:b8:d6:2c:
         31:89:f4:1b:6b:1c:a8:c9:1d:19:7b:4b:40:9d:39:a3:d3:57:
         80:da:2c:bb:1e:43:a3:8e:ec:98:69:90:65:ab:6e:25:43:ef:
         f9:25:42:94:62:a0:44:bc:e1:72:0f:9e:0e:07:6c:2e:b2:26:
         b2:5f:2e:1a:af:61:7b:66:bc:12:9f:0f:74:20:85:40:a3:1d:
         4e:ad:07:5d:7f:1c:31:08:c2:7a:33:72:ae:35:17:72:a9:69:
         ab:74:5b:5f:3f:a7:69:60:0f:eb:47:75:92:3c:c6:9d:05:73:
         ee:ea:32:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 21:46:54 2024 by rpki-client on console-fra.rpki-client.org