Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/96495E25A01953ACA1A500125DE32FD2CAD7B989.cer
File:                     96495E25A01953ACA1A500125DE32FD2CAD7B989.cer (raw, json)
Hash identifier:          Rt4OqE9gWhdg774QlRdVgxOZRTOLQd7h08xqFyufG0o=
Subject key identifier:   96:49:5E:25:A0:19:53:AC:A1:A5:00:12:5D:E3:2F:D2:CA:D7:B9:89
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       5CF42E5BA784610A2B76D1C080D4B3B25690538C
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Manifest:                 rsync://rpki.co/repo/Mlgt/1/96495E25A01953ACA1A500125DE32FD2CAD7B989.mft
caRepository:             rsync://rpki.co/repo/Mlgt/1/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Thu 03 Oct 2024 19:46:33 +0000
Certificate not after:    Thu 02 Oct 2025 19:51:33 +0000
Subordinate resources:    IP: 2a12:dd47:3f00::/40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f4:2e:5b:a7:84:61:0a:2b:76:d1:c0:80:d4:b3:b2:56:90:53:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Oct  3 19:46:33 2024 GMT
            Not After : Oct  2 19:51:33 2025 GMT
        Subject: CN=96495E25A01953ACA1A500125DE32FD2CAD7B989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d7:99:02:bd:94:fc:0a:7a:6a:5e:4e:41:f1:
                    78:6d:21:f9:2c:fb:c5:6a:8f:b0:82:d2:80:e8:3a:
                    50:5e:a2:fc:03:f2:a2:80:f8:3b:73:41:5c:da:11:
                    12:5c:fe:0e:5f:7a:e5:01:5a:d1:1a:8e:d4:05:5a:
                    76:73:59:58:27:c9:70:dd:ff:27:d7:8d:59:fd:90:
                    52:cd:04:45:99:07:26:87:97:10:1b:d8:e5:c6:9c:
                    f4:f8:cb:95:35:47:57:65:b3:0b:7c:46:6a:0f:91:
                    51:34:88:da:eb:a8:f6:5d:6a:4f:22:02:10:d3:a4:
                    7b:30:b0:36:fb:2e:db:25:6a:b1:85:a3:07:28:41:
                    35:8d:80:eb:f2:1e:d9:14:55:eb:2a:c8:fc:28:dd:
                    a9:31:ce:b0:b6:c7:c0:6a:10:38:e4:20:e5:f1:79:
                    2f:c4:54:7f:ad:4b:58:00:0f:7a:62:c9:cc:1b:7a:
                    f8:5d:5e:10:6d:fc:a1:37:d0:e8:91:7b:63:3d:fa:
                    ce:d4:36:fe:1d:e0:89:c3:ed:34:f2:c3:d3:47:bf:
                    c1:b6:79:47:ac:c2:d7:65:0e:ea:1a:ad:cc:1b:76:
                    69:9d:27:db:d8:13:e1:39:97:cb:b7:fa:99:75:0a:
                    18:9c:55:46:0c:1f:e8:8f:98:ea:0b:21:8c:59:90:
                    0f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                96:49:5E:25:A0:19:53:AC:A1:A5:00:12:5D:E3:2F:D2:CA:D7:B9:89
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/Mlgt/1/
                RPKI Manifest - URI:rsync://rpki.co/repo/Mlgt/1/96495E25A01953ACA1A500125DE32FD2CAD7B989.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         81:50:24:2e:19:f0:45:3d:c8:25:e8:23:bd:58:ae:71:8d:9c:
         f0:a7:fa:39:94:c7:5b:bc:fd:66:e9:31:c5:71:51:ae:29:fe:
         d1:9f:25:56:9f:41:1a:95:fe:c5:b3:80:89:e2:f2:d6:1c:ca:
         75:af:f0:2f:d5:37:5f:22:70:41:1c:27:b4:ff:0c:42:92:ed:
         94:63:92:80:57:06:84:b7:97:97:22:2a:e2:d5:da:59:8b:02:
         44:bf:34:19:d7:d5:e5:99:03:40:d0:82:62:86:97:dc:aa:fc:
         72:9b:da:c5:9c:8a:3f:1e:b2:a1:11:a9:10:3d:ef:1d:da:7a:
         9c:6f:ed:9a:32:b9:c2:03:ec:c4:c7:66:c1:1c:4d:ee:1f:2f:
         dd:f5:f0:7d:ee:6f:c3:2d:7b:6f:40:29:84:f5:38:c0:a6:d8:
         54:ea:32:ea:56:27:64:d4:6f:69:57:da:ab:d6:fe:b0:ca:be:
         c0:7f:36:1b:43:7b:08:4a:34:22:23:9f:14:ee:99:b8:66:3d:
         08:f1:17:fc:bd:f9:03:df:32:56:5f:4f:69:78:5d:4d:e7:c2:
         ff:d6:29:f5:1a:21:32:20:31:cb:0f:d8:3b:3f:c1:20:5c:ca:
         67:bb:fd:6a:c0:b3:9f:62:e4:da:e6:44:e6:c1:3a:b6:a9:5b:
         9d:da:9f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 11:22:09 2025 by rpki-client