Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/8D47937E5FB1C1169EEAD229E680E581B175465F.cer
File:                     8D47937E5FB1C1169EEAD229E680E581B175465F.cer (raw, json)
Hash identifier:          ccuz/pIj4BmU9Q27rTXeeN3aXmYHbr5OVrLShXHvy48=
Subject key identifier:   8D:47:93:7E:5F:B1:C1:16:9E:EA:D2:29:E6:80:E5:81:B1:75:46:5F
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       0A960F18B9B1D109E7AF7FC558E88EB2DBDA2D20
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Manifest:                 rsync://rpki.co/repo/Rudaki/0/8D47937E5FB1C1169EEAD229E680E581B175465F.mft
caRepository:             rsync://rpki.co/repo/Rudaki/0/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Thu 20 Jun 2024 10:00:02 +0000
Certificate not after:    Thu 19 Jun 2025 10:05:02 +0000
Subordinate resources:    IP: 2a12:dd47:5300::/40

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft
                          rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 15:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:96:0f:18:b9:b1:d1:09:e7:af:7f:c5:58:e8:8e:b2:db:da:2d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 10:00:02 2024 GMT
            Not After : Jun 19 10:05:02 2025 GMT
        Subject: CN=8D47937E5FB1C1169EEAD229E680E581B175465F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4f:c3:e7:5a:34:7e:10:ad:28:b6:fb:99:25:
                    4e:21:41:da:b0:14:89:22:0b:79:96:81:38:e0:9c:
                    8c:59:9c:eb:9d:be:40:85:9b:ff:18:f3:b1:fa:9f:
                    80:ec:5e:a9:35:b1:fe:4c:4d:e2:5a:1b:08:95:af:
                    2e:d8:a3:57:ae:7f:fb:68:08:85:33:9c:c3:2d:f8:
                    b4:2c:3b:fa:ed:94:01:85:27:ab:1d:30:6d:51:e4:
                    85:20:a6:6d:e2:ce:69:06:a3:70:aa:45:17:e2:07:
                    6e:9b:7b:90:d6:5f:2e:c0:49:9a:c0:5a:5f:de:25:
                    4d:2f:62:63:e0:27:21:69:d5:34:b4:de:bd:6a:19:
                    b8:01:67:09:7f:51:d2:5d:a2:57:70:16:2f:72:2c:
                    42:7a:cb:a6:58:46:78:06:e7:e6:c9:b3:33:e5:9c:
                    a0:c2:a2:6a:7d:77:01:0b:c2:93:ae:55:ad:24:92:
                    a6:ac:18:89:34:da:b8:ba:ff:be:59:72:63:8c:7d:
                    c5:10:83:ee:26:77:31:c1:9e:72:68:72:2e:aa:df:
                    c7:4b:6f:ce:f9:fb:28:e2:a0:14:57:50:0b:53:27:
                    c4:9d:57:06:1e:ab:8b:71:b5:f0:61:a4:3f:f6:53:
                    84:14:fe:38:f6:d0:43:05:81:71:5b:1e:0d:ef:06:
                    0c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:47:93:7E:5F:B1:C1:16:9E:EA:D2:29:E6:80:E5:81:B1:75:46:5F
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/Rudaki/0/
                RPKI Manifest - URI:rsync://rpki.co/repo/Rudaki/0/8D47937E5FB1C1169EEAD229E680E581B175465F.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5300::/40

    Signature Algorithm: sha256WithRSAEncryption
         57:f8:f0:d5:c9:8b:ae:f5:cf:68:04:1c:85:39:ef:00:ed:ab:
         46:07:4a:ca:0a:88:30:17:54:16:c5:43:df:f7:51:da:6f:d3:
         b6:6d:ef:95:10:7c:ba:9f:ca:ff:61:c5:23:f8:38:e8:28:84:
         64:15:01:78:a6:f9:b7:92:98:57:20:17:17:70:1c:0f:72:ab:
         60:f2:04:f6:61:4c:15:4d:35:b4:0b:93:9c:3c:00:53:82:84:
         bd:45:31:de:c1:36:4a:68:17:64:dd:00:c3:6c:24:36:18:d8:
         1b:e7:e0:c8:13:f2:ce:b9:54:05:0b:2f:53:96:19:f1:4f:aa:
         62:f6:d9:71:31:bf:e1:71:32:05:dc:23:29:d4:cb:57:eb:52:
         f5:df:aa:09:e1:6e:04:bb:88:51:dd:96:4d:cb:be:df:67:5d:
         1d:8a:a8:80:6f:86:88:93:d2:9c:35:14:d8:ba:b8:58:98:5f:
         e7:80:7e:e6:d5:97:b1:dd:d9:26:be:6c:db:eb:40:c4:77:94:
         00:af:f5:38:32:b4:5e:ee:2a:cf:e0:e4:7e:87:74:09:d8:64:
         00:98:51:3f:ad:89:0c:52:da:13:d3:c5:7f:26:e0:74:98:5f:
         13:7b:ba:2a:39:70:89:51:9b:fd:41:0c:42:18:e5:eb:61:7b:
         cb:99:b8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 23:51:24 2024 by rpki-client on console-ams.rpki-client.org