Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.cer
File:                     CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.cer (raw, json)
Hash identifier:          KoXAAH8PEvAsewXZ4HS/fp20/hNJah3HZ6J9c+mdr6I=
Subject key identifier:   CD:67:25:68:ED:AF:D0:43:AC:C9:C2:B6:93:C6:F2:BF:9D:F6:42:FE
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       19445FC95BF0DAB94B2AAF1FABE1F4EEE09EB81E
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Manifest:                 rsync://rpki.co/repo/AS203843/0/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.mft
caRepository:             rsync://rpki.co/repo/AS203843/0/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Thu 20 Jun 2024 17:55:04 +0000
Certificate not after:    Thu 19 Jun 2025 18:00:04 +0000
Subordinate resources:    IP: 2a12:dd47:8047::/48
                          IP: 2a12:dd47:80e4::/48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft
                          rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 15:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:44:5f:c9:5b:f0:da:b9:4b:2a:af:1f:ab:e1:f4:ee:e0:9e:b8:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 17:55:04 2024 GMT
            Not After : Jun 19 18:00:04 2025 GMT
        Subject: CN=CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:19:b6:6f:b8:fb:f4:a3:d5:b9:5c:75:83:de:
                    78:b5:e1:2c:a6:88:ea:e1:b7:de:55:d5:96:bf:d2:
                    a3:ed:a9:98:33:ea:96:5d:9d:12:f8:13:cf:eb:43:
                    36:38:1c:c7:4a:90:e0:10:38:01:14:23:8c:76:1b:
                    83:00:20:e2:f7:1e:8a:03:20:1d:37:9a:15:66:4c:
                    52:2f:30:43:ff:ce:ad:82:85:03:37:68:ab:4a:fc:
                    43:5e:6b:7d:2a:b9:33:cd:cc:ee:24:e8:41:a7:53:
                    d8:91:29:94:78:4c:6b:45:70:78:3e:b3:b6:9a:ed:
                    d4:3e:e8:eb:83:f9:38:8e:1d:93:07:13:4c:88:3b:
                    ff:64:44:fb:26:66:71:3a:fa:be:c1:07:2a:61:98:
                    70:25:a1:f8:34:52:a7:b0:73:fe:f7:0f:9a:f1:05:
                    64:dd:f3:33:ab:87:10:d9:cc:9c:5f:80:2f:d5:0e:
                    b0:b7:be:ab:77:2a:01:5b:89:4b:45:2f:f1:19:7b:
                    38:d7:89:6f:0a:bd:1f:a8:75:11:37:6a:af:41:d2:
                    bc:e5:f8:47:da:61:cf:a2:23:31:ea:6c:05:6c:43:
                    06:9a:d7:01:41:bd:59:8c:f9:48:64:e3:15:4c:82:
                    c9:00:c6:4c:d1:64:5b:b0:df:cf:b1:b1:64:c3:cf:
                    1d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CD:67:25:68:ED:AF:D0:43:AC:C9:C2:B6:93:C6:F2:BF:9D:F6:42:FE
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS203843/0/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS203843/0/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8047::/48
                  2a12:dd47:80e4::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:42:ff:c3:0d:84:f1:38:73:54:c7:31:01:74:78:e2:91:d4:
         8f:48:a8:e0:04:97:a2:51:1d:31:01:9e:58:21:61:d0:1f:28:
         dd:c3:10:41:63:ae:9d:87:80:59:33:31:f2:24:24:97:0d:53:
         5c:f6:35:4a:5c:a8:e1:a2:75:46:8a:71:8f:d3:9b:e4:57:68:
         77:0b:6d:f2:cf:53:e2:ae:fd:83:24:8c:f7:f1:fe:28:36:91:
         6a:be:71:cb:96:9b:2c:2a:1b:e0:a6:b5:c0:ff:38:8a:0d:02:
         6d:ee:5b:c0:88:b2:b1:c9:5b:7a:12:c6:51:e3:4d:43:ae:65:
         d0:3a:e2:ef:b5:a0:00:76:24:2a:dd:20:66:25:36:92:1d:e0:
         81:fa:21:c5:fb:e1:3c:d8:e4:3f:00:d6:6c:d0:53:a0:3a:7b:
         32:54:6d:6d:83:5a:fa:18:b7:30:63:82:61:d5:3a:a6:23:f1:
         6a:4f:ad:e8:99:ed:55:1b:73:b6:76:d8:5f:86:3a:6f:6d:3b:
         1e:42:a2:79:64:9d:f1:ec:33:af:66:43:25:18:32:0c:72:a0:
         c0:a4:f3:b8:b8:0e:fa:4c:ae:9c:0e:3f:74:c2:b8:8f:49:87:
         83:f8:9a:e0:ce:8f:4c:e4:a6:60:3b:8d:04:e8:a0:34:1c:fe:
         0f:fa:ee:9d
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgIUGURfyVvw2rlLKq8fq+H07uCeuB4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZG
NEM4NTBDMTAeFw0yNDA2MjAxNzU1MDRaFw0yNTA2MTkxODAwMDRaMDMxMTAvBgNV
BAMTKENENjcyNTY4RURBRkQwNDNBQ0M5QzJCNjkzQzZGMkJGOURGNjQyRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6GbZvuPv0o9W5XHWD3ni14Sym
iOrht95V1Za/0qPtqZgz6pZdnRL4E8/rQzY4HMdKkOAQOAEUI4x2G4MAIOL3HooD
IB03mhVmTFIvMEP/zq2ChQM3aKtK/ENea30quTPNzO4k6EGnU9iRKZR4TGtFcHg+
s7aa7dQ+6OuD+TiOHZMHE0yIO/9kRPsmZnE6+r7BByphmHAlofg0Uqewc/73D5rx
BWTd8zOrhxDZzJxfgC/VDrC3vqt3KgFbiUtFL/EZezjXiW8KvR+odRE3aq9B0rzl
+EfaYc+iIzHqbAVsQwaa1wFBvVmM+Uhk4xVMgskAxkzRZFuw38+xsWTDzx17AgMB
AAGjggJuMIICajAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTNZyVo7a/QQ6zJ
wraTxvK/nfZC/jAfBgNVHSMEGDAWgBR2W4s35VNr5JoL89YO9me29MhQwTAOBgNV
HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNj
NGZhNC8xLzc2NUI4QjM3RTU1MzZCRTQ5QTBCRjNENjBFRjY2N0I2RjRDODUwQzEu
Y3JsMGUGCCsGAQUFBwEBBFkwVzBVBggrBgEFBQcwAoZJcnN5bmM6Ly9kZXYudHcv
cnBraS9BdWd1c3QvNS83NjVCOEIzN0U1NTM2QkU0OUEwQkYzRDYwRUY2NjdCNkY0
Qzg1MEMxLmNlcjCB0AYIKwYBBQUHAQsEgcMwgcAwLAYIKwYBBQUHMAWGIHJzeW5j
Oi8vcnBraS5jby9yZXBvL0FTMjAzODQzLzAvMFgGCCsGAQUFBzAKhkxyc3luYzov
L3Jwa2kuY28vcmVwby9BUzIwMzg0My8wL0NENjcyNTY4RURBRkQwNDNBQ0M5QzJC
NjkzQzZGMkJGOURGNjQyRkUubWZ0MDYGCCsGAQUFBzANhipodHRwczovL3JyZHAu
cnBraS5jby9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHACoS3UeARwMHACoS
3UeA5DANBgkqhkiG9w0BAQsFAAOCAQEAO0L/ww2E8ThzVMcxAXR44pHUj0io4ASX
olEdMQGeWCFh0B8o3cMQQWOunYeAWTMx8iQklw1TXPY1Slyo4aJ1Ropxj9Ob5Fdo
dwtt8s9T4q79gySM9/H+KDaRar5xy5abLCob4Ka1wP84ig0Cbe5bwIiysclbehLG
UeNNQ65l0Dri77WgAHYkKt0gZiU2kh3ggfohxfvhPNjkPwDWbNBToDp7MlRtbYNa
+hi3MGOCYdU6piPxak+t6JntVRtztnbYX4Y6b207HkKieWSd8ewzr2ZDJRgyDHKg
wKTzuLgO+kyunA4/dMK4j0mHg/ia4M6PTOSmYDuNBOigNBz+D/runQ==
-----END CERTIFICATE-----
Generated at Wed Jul 3 00:11:52 2024 by rpki-client on console-fra.rpki-client.org