Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.cer
File:                     A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.cer (raw, json)
Hash identifier:          la/wADzVzQPgsP9fQnA2m6F3bH8lMc6sJ1sa4p7nXH0=
Subject key identifier:   A7:DB:DD:E4:5B:9B:ED:9C:17:CB:20:F2:AE:29:EC:70:3C:86:A1:36
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       3F044469D7C128E790DBCB014049C875E29C3B9E
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Manifest:                 rsync://rpki.co/repo/Riffi/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.mft
caRepository:             rsync://rpki.co/repo/Riffi/1/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Thu 20 Jun 2024 17:55:42 +0000
Certificate not after:    Thu 19 Jun 2025 18:00:42 +0000
Subordinate resources:    IP: 2a12:dd47:8046::/48
                          IP: 2a12:dd47:8700::/40
                          IP: 2a12:dd47:d000::/40

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft
                          rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 15:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:04:44:69:d7:c1:28:e7:90:db:cb:01:40:49:c8:75:e2:9c:3b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 17:55:42 2024 GMT
            Not After : Jun 19 18:00:42 2025 GMT
        Subject: CN=A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:95:1d:ca:f2:de:9a:52:4a:9e:8b:ba:56:16:
                    ad:7e:f7:6a:54:42:38:0f:1c:a7:55:89:d1:76:bb:
                    20:65:eb:8d:a3:3e:52:f0:7c:8c:3e:3d:05:4a:88:
                    ce:e3:85:01:64:7d:ab:52:b6:17:32:e5:80:cb:9a:
                    d3:d8:21:f3:77:7b:ab:55:10:ba:5a:95:1a:d9:cc:
                    79:c2:06:d1:7d:f9:b1:b1:29:62:a3:15:6b:a3:2c:
                    91:98:16:6d:a5:1e:fe:62:78:54:4c:0a:fe:78:ff:
                    12:21:1c:aa:23:20:e7:16:52:e1:ea:4f:0c:88:2b:
                    5e:eb:44:8d:25:58:e1:ca:2f:de:9f:9f:d2:92:77:
                    51:38:b6:fd:91:4f:65:ca:8c:22:dc:b5:f0:e4:b3:
                    ea:7f:c4:a2:f4:99:e2:b7:28:32:16:0a:37:c0:00:
                    cc:df:80:52:08:bb:73:82:21:4e:03:f9:39:c6:60:
                    ff:a1:b2:84:a0:21:db:c1:82:f5:78:5b:a4:47:01:
                    ab:ef:75:4e:b8:e1:ec:a9:f2:8f:27:43:ed:8e:82:
                    c7:d0:48:07:87:b5:32:56:51:93:48:6b:ce:c0:3a:
                    15:73:89:bd:39:18:f0:e7:1e:11:4d:1b:7b:1c:e1:
                    6b:4c:d0:2a:73:d3:86:1b:db:fb:11:15:fa:34:5f:
                    a6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A7:DB:DD:E4:5B:9B:ED:9C:17:CB:20:F2:AE:29:EC:70:3C:86:A1:36
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/Riffi/1/
                RPKI Manifest - URI:rsync://rpki.co/repo/Riffi/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8046::/48
                  2a12:dd47:8700::/40
                  2a12:dd47:d000::/40

    Signature Algorithm: sha256WithRSAEncryption
         00:95:e4:8a:0b:e0:4a:71:0f:c6:0e:eb:8a:44:8e:7f:f1:37:
         74:45:fa:bb:2c:c1:a6:15:c9:52:6b:87:52:4e:93:b0:bd:fa:
         c6:fd:e2:2b:44:c8:30:9c:ba:ce:98:84:1a:8a:22:e3:95:4a:
         da:05:e0:19:31:a1:77:fd:83:f8:99:c3:e8:55:4d:da:9d:0c:
         55:7a:0f:e0:e7:2c:ad:58:b7:d5:ef:53:ab:e5:dd:a1:35:f8:
         b8:ad:13:73:1d:52:4d:d7:e9:8a:16:3a:4b:fb:77:7e:ea:ed:
         1f:50:fe:0b:0f:33:a6:79:c3:83:d4:c9:5c:5e:12:e8:9e:33:
         8b:e5:77:da:b6:63:64:c1:19:55:5c:cd:3e:89:8f:c1:27:5b:
         a0:a5:34:9f:d8:82:97:21:82:89:ea:68:cf:f6:fe:e4:c0:b0:
         6d:16:46:d6:bd:c0:11:9f:2b:21:41:c4:e9:b8:41:03:e5:c7:
         95:e0:52:7e:e3:b5:b7:dd:e5:d4:f0:df:df:0b:dc:f0:78:b4:
         cc:18:59:96:72:cf:7b:47:fd:90:80:43:99:b2:bc:f0:4c:8e:
         df:6b:f3:77:5a:0e:d0:eb:75:75:c7:af:20:71:8c:18:3d:71:
         e8:2b:d9:72:17:d8:2b:bf:7d:5e:53:4f:43:e7:63:ea:16:c9:
         4f:07:fb:92
-----BEGIN CERTIFICATE-----
MIIFZTCCBE2gAwIBAgIUPwREadfBKOeQ28sBQEnIdeKcO54wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZG
NEM4NTBDMTAeFw0yNDA2MjAxNzU1NDJaFw0yNTA2MTkxODAwNDJaMDMxMTAvBgNV
BAMTKEE3REJEREU0NUI5QkVEOUMxN0NCMjBGMkFFMjlFQzcwM0M4NkExMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYlR3K8t6aUkqei7pWFq1+92pU
QjgPHKdVidF2uyBl642jPlLwfIw+PQVKiM7jhQFkfatSthcy5YDLmtPYIfN3e6tV
ELpalRrZzHnCBtF9+bGxKWKjFWujLJGYFm2lHv5ieFRMCv54/xIhHKojIOcWUuHq
TwyIK17rRI0lWOHKL96fn9KSd1E4tv2RT2XKjCLctfDks+p/xKL0meK3KDIWCjfA
AMzfgFIIu3OCIU4D+TnGYP+hsoSgIdvBgvV4W6RHAavvdU644eyp8o8nQ+2OgsfQ
SAeHtTJWUZNIa87AOhVzib05GPDnHhFNG3sc4WtM0Cpz04Yb2/sRFfo0X6YPAgMB
AAGjggJvMIICazAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSn293kW5vtnBfL
IPKuKexwPIahNjAfBgNVHSMEGDAWgBR2W4s35VNr5JoL89YO9me29MhQwTAOBgNV
HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNj
NGZhNC8xLzc2NUI4QjM3RTU1MzZCRTQ5QTBCRjNENjBFRjY2N0I2RjRDODUwQzEu
Y3JsMGUGCCsGAQUFBwEBBFkwVzBVBggrBgEFBQcwAoZJcnN5bmM6Ly9kZXYudHcv
cnBraS9BdWd1c3QvNS83NjVCOEIzN0U1NTM2QkU0OUEwQkYzRDYwRUY2NjdCNkY0
Qzg1MEMxLmNlcjCBygYIKwYBBQUHAQsEgb0wgbowKQYIKwYBBQUHMAWGHXJzeW5j
Oi8vcnBraS5jby9yZXBvL1JpZmZpLzEvMFUGCCsGAQUFBzAKhklyc3luYzovL3Jw
a2kuY28vcmVwby9SaWZmaS8xL0E3REJEREU0NUI5QkVEOUMxN0NCMjBGMkFFMjlF
QzcwM0M4NkExMzYubWZ0MDYGCCsGAQUFBzANhipodHRwczovL3JyZHAucnBraS5j
by9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAyBggrBgEFBQcBBwEB/wQjMCEwHwQCAAIwGQMHACoS3UeARgMGACoS3UeHAwYA
KhLdR9AwDQYJKoZIhvcNAQELBQADggEBAACV5IoL4EpxD8YO64pEjn/xN3RF+rss
waYVyVJrh1JOk7C9+sb94itEyDCcus6YhBqKIuOVStoF4BkxoXf9g/iZw+hVTdqd
DFV6D+DnLK1Yt9XvU6vl3aE1+LitE3MdUk3X6YoWOkv7d37q7R9Q/gsPM6Z5w4PU
yVxeEuieM4vld9q2Y2TBGVVczT6Jj8EnW6ClNJ/YgpchgonqaM/2/uTAsG0WRta9
wBGfKyFBxOm4QQPlx5XgUn7jtbfd5dTw398L3PB4tMwYWZZyz3tH/ZCAQ5myvPBM
jt9r83daDtDrdXXHryBxjBg9cegr2XIX2Cu/fV5TT0PnY+oWyU8H+5I=
-----END CERTIFICATE-----
Generated at Tue Jul 2 23:51:24 2024 by rpki-client on console-ams.rpki-client.org