Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
File:                     8D57D440906265349F6DEF98557AC28D0381C47E.cer (raw, json)
Hash identifier:          H2a5WQJ74Dp042CFl1IL4yGx4KyYe6C680ZWX4txm8M=
Subject key identifier:   8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       27EFF27E80D1EA4C526F1DC73774A9870D742855
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Thu 20 Jun 2024 12:55:04 +0000
Certificate not after:    Thu 19 Jun 2025 13:00:04 +0000
Subordinate resources:    IP: 2a12:dd47:8240::/43
                          IP: 2a12:dd47:a000::/36

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft
                          rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 15:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ef:f2:7e:80:d1:ea:4c:52:6f:1d:c7:37:74:a9:87:0d:74:28:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 12:55:04 2024 GMT
            Not After : Jun 19 13:00:04 2025 GMT
        Subject: CN=8D57D440906265349F6DEF98557AC28D0381C47E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:12:47:80:48:b0:2c:ae:72:2e:a0:e5:ea:c7:
                    d5:f6:45:d9:c7:1a:bd:fc:5e:b0:f0:89:b2:9b:43:
                    3f:38:78:7d:73:87:cf:e4:ea:d2:13:19:81:54:1d:
                    d6:f4:e8:bc:9b:2b:38:7a:96:f5:d7:f2:3e:6b:ac:
                    95:2f:6b:7c:51:97:75:53:0e:6e:8a:60:b1:4a:d1:
                    96:12:c2:78:0b:87:99:49:f4:9a:ce:56:98:e6:36:
                    94:6a:24:33:d3:fc:2d:15:c0:91:5a:7c:40:ee:ab:
                    63:18:82:08:b8:0c:94:29:2d:57:8a:aa:95:9f:e3:
                    f6:14:9b:9d:cc:ef:63:70:a7:97:d4:ac:34:53:da:
                    71:ed:b5:18:f9:c1:19:32:f2:8c:18:b0:a4:b9:93:
                    bc:b3:11:b0:9a:e6:68:de:45:8f:7b:f2:38:07:64:
                    1d:b5:7f:9a:54:4a:b1:eb:90:e4:6c:18:23:75:89:
                    6d:51:07:e0:95:3a:a5:d8:1a:c6:93:bd:9a:d6:7d:
                    a0:24:a4:ed:dd:57:53:f1:90:29:f0:d8:98:f0:df:
                    ed:37:bd:b4:52:4f:de:a1:93:db:5b:8b:e8:07:91:
                    44:0f:f7:7b:ce:c3:27:b8:1e:da:91:f6:7b:8d:2e:
                    82:63:01:54:3f:34:db:91:86:3b:f4:b4:90:0f:c8:
                    5a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8240::/43
                  2a12:dd47:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         94:16:43:c3:2c:46:ac:11:86:cd:59:96:32:f1:65:cc:cb:83:
         91:01:4e:cd:8e:0e:a2:eb:6f:16:2c:8e:44:e2:49:1a:d4:0a:
         f1:95:2a:ff:c0:2c:cf:04:e1:83:32:82:08:cb:0c:4c:3a:f5:
         db:2b:a0:00:50:50:a0:e8:aa:db:90:f0:d3:3b:4e:0c:9d:59:
         9e:80:54:e2:7c:12:ce:32:11:37:f8:5a:5c:ca:c7:60:60:bd:
         60:09:ab:7b:83:41:02:c0:32:98:dd:9d:6c:26:7b:54:61:f9:
         92:16:55:79:5f:63:9c:f2:eb:60:4c:44:cc:99:0b:67:05:6f:
         d9:32:63:f1:e0:31:bc:70:e8:d6:cd:b4:43:5d:66:d5:21:c8:
         fc:31:47:36:95:40:05:88:2c:c8:02:d7:93:84:00:4c:a0:5c:
         04:1b:4b:20:55:04:6f:37:a4:bd:df:b9:2a:ab:bd:3f:24:e7:
         23:95:8a:eb:d6:59:88:38:d9:3a:d4:4d:00:f0:3a:9b:df:1b:
         74:36:dd:7a:cc:3c:36:cf:12:0e:34:c7:d5:b2:86:90:30:e1:
         03:59:c5:f3:bd:f4:4b:90:b3:ba:f5:3e:ab:40:90:69:c1:52:
         f1:5a:bd:ef:f9:69:e7:93:a1:f9:c1:39:89:74:00:59:15:82:
         a0:26:c0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 00:11:52 2024 by rpki-client on console-fra.rpki-client.org