Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.cer
File:                     9788ACA0CB104D300847BED012FAF8E3269E8A01.cer (raw, json)
Hash identifier:          suQZVTzTCYmQCtfp3/UnHTcqZYA2IieGm6YAZEFbkTU=
Subject key identifier:   97:88:AC:A0:CB:10:4D:30:08:47:BE:D0:12:FA:F8:E3:26:9E:8A:01
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       146D5097803BE285AA016A84F5A290D208CAD7BA
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Manifest:                 rsync://rpki.co/repo/John/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.mft
caRepository:             rsync://rpki.co/repo/John/1/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Thu 20 Jun 2024 17:54:40 +0000
Certificate not after:    Thu 19 Jun 2025 17:59:40 +0000
Subordinate resources:    IP: 2a12:dd47:3e00::/40
                          IP: 2a12:dd47:df00::/44

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft
                          rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 15:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:6d:50:97:80:3b:e2:85:aa:01:6a:84:f5:a2:90:d2:08:ca:d7:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 17:54:40 2024 GMT
            Not After : Jun 19 17:59:40 2025 GMT
        Subject: CN=9788ACA0CB104D300847BED012FAF8E3269E8A01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ea:02:af:d6:37:85:13:fc:de:f8:8f:83:8b:
                    73:c6:ef:a4:5e:34:ad:80:48:18:7d:c2:75:ff:62:
                    0a:f1:14:81:1a:33:f3:d0:4c:1a:ac:1b:46:a0:39:
                    d5:b6:0e:95:83:fd:b6:4d:2f:b5:b0:cf:42:35:3d:
                    a5:4e:2f:8f:0e:67:4f:02:7f:05:b3:ea:d0:36:d4:
                    aa:c2:70:66:ac:db:81:a2:1d:b1:0e:0b:c8:3e:a5:
                    6c:75:a5:6c:d3:12:24:f7:28:b8:85:c6:ae:ba:47:
                    02:00:18:5d:28:74:eb:41:dd:ac:cc:b0:db:4d:1a:
                    0c:c5:58:75:01:5c:cc:a6:30:c2:36:58:cc:0d:af:
                    07:09:85:fd:3d:a4:a8:d9:16:03:6a:90:c0:02:23:
                    33:c5:14:c9:b5:0a:31:72:50:fa:1b:1a:78:1d:4c:
                    72:64:d7:a7:10:b3:b1:35:80:4d:84:ef:f3:bb:55:
                    e6:a9:95:05:8b:fd:ee:d0:44:99:8a:f2:0c:f2:ce:
                    8f:f1:d2:0a:a3:77:32:be:1f:ff:3c:37:b1:b8:08:
                    e1:38:59:6b:71:b9:32:35:b7:f4:87:e2:68:8c:3a:
                    a2:f8:ed:76:ec:bb:6a:d3:78:bf:8f:fd:cd:4d:5e:
                    8c:10:f7:7e:3a:aa:2a:ed:1a:45:46:46:f6:a7:48:
                    85:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:88:AC:A0:CB:10:4D:30:08:47:BE:D0:12:FA:F8:E3:26:9E:8A:01
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/John/1/
                RPKI Manifest - URI:rsync://rpki.co/repo/John/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3e00::/40
                  2a12:dd47:df00::/44

    Signature Algorithm: sha256WithRSAEncryption
         7a:bf:9c:73:8d:a7:3d:d3:99:f0:5b:b2:77:00:bb:97:31:68:
         70:6b:28:b7:38:31:59:20:7b:2d:e1:63:83:cb:3a:24:b9:ef:
         59:2e:8d:49:9f:25:f1:a8:6f:49:18:1f:f7:18:68:19:b0:42:
         cb:ab:6f:a6:f4:8e:f5:42:b4:fe:b7:dc:27:1e:5c:61:2b:16:
         53:3e:5c:73:16:ec:d5:48:e0:f5:51:17:10:62:49:d8:86:99:
         79:7f:d0:a4:59:92:06:12:1a:42:94:e4:df:84:86:cc:2e:29:
         7d:9d:b6:90:9a:d5:3f:a6:be:d7:73:36:7c:84:57:d6:4f:b6:
         64:77:85:62:da:82:f9:49:46:07:fb:a0:2e:89:4d:5a:94:37:
         12:d5:8b:6a:9a:6b:13:4f:5d:87:db:54:3e:1c:6f:ce:68:c5:
         17:47:a4:b0:64:18:3a:79:9d:ed:cc:91:4e:38:84:d0:bb:7a:
         89:85:b2:89:2b:16:6d:46:5c:22:30:d5:ee:7e:a0:09:8a:bb:
         b5:fa:04:21:6e:fe:71:19:c2:84:69:1e:46:7e:fb:40:b4:2d:
         4b:f1:48:ce:1f:f7:97:86:6e:90:ba:75:b7:1f:9b:77:23:dd:
         28:10:79:4a:85:df:df:07:d1:9f:83:96:85:8e:42:c3:c7:27:
         e7:67:21:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 23:51:24 2024 by rpki-client on console-ams.rpki-client.org