Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/FDA07574EA362EFB2E46B3038EE05A6ACA0BF301.cer
File:                     FDA07574EA362EFB2E46B3038EE05A6ACA0BF301.cer (raw, json)
Hash identifier:          HpgI6v0R3qtY543zwFK5e0K/bFArdEHLjccg18g14d0=
Subject key identifier:   FD:A0:75:74:EA:36:2E:FB:2E:46:B3:03:8E:E0:5A:6A:CA:0B:F3:01
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       718C2CE432609795FD0B122B9F4BBCD8959FD644
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Manifest:                 rsync://rpki.co/repo/Matt/2/FDA07574EA362EFB2E46B3038EE05A6ACA0BF301.mft
caRepository:             rsync://rpki.co/repo/Matt/2/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Thu 20 Jun 2024 16:19:57 +0000
Certificate not after:    Thu 19 Jun 2025 16:24:57 +0000
Subordinate resources:    IP: 2a12:dd47:b000::/36

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft
                          rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 15:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:8c:2c:e4:32:60:97:95:fd:0b:12:2b:9f:4b:bc:d8:95:9f:d6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 16:19:57 2024 GMT
            Not After : Jun 19 16:24:57 2025 GMT
        Subject: CN=FDA07574EA362EFB2E46B3038EE05A6ACA0BF301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fb:02:db:89:fe:f1:d9:27:33:e7:7c:ca:2a:
                    22:ea:21:8d:65:1b:dc:d1:a7:33:3c:0a:51:17:08:
                    55:6a:07:12:e9:43:3e:c0:3c:e4:38:68:a6:ad:c7:
                    a8:54:b8:82:4d:a0:4a:b3:c4:20:3e:47:2d:98:9c:
                    d4:ee:64:02:55:91:a8:8a:41:8b:46:47:ff:f6:dd:
                    67:0d:80:45:ff:c7:b6:b1:8b:84:1e:e0:65:ee:47:
                    69:0b:35:29:93:29:55:4c:ad:96:2d:a2:7b:a0:3a:
                    89:7d:54:4e:53:20:89:cb:36:3c:30:96:a1:69:81:
                    22:eb:6d:43:c8:d9:d5:f4:78:af:0f:09:6c:32:25:
                    a9:32:80:d7:11:4c:db:e4:7d:5f:f5:17:17:c7:22:
                    fc:4e:2c:78:f8:cd:ff:42:08:f1:f3:ae:70:22:48:
                    3e:51:1e:90:cd:db:00:42:eb:b8:05:69:89:ec:b4:
                    e4:4e:1c:ff:d8:0a:76:32:2b:af:99:ac:70:20:2f:
                    8d:65:d7:6a:c8:83:c7:64:49:05:1f:d8:9b:5a:9a:
                    01:14:90:56:17:cb:54:f5:42:6c:ef:58:4c:8b:22:
                    bc:61:79:67:eb:38:ab:2b:7e:21:a4:e7:6b:31:bb:
                    76:7f:59:58:48:3e:61:45:5e:f0:47:25:42:81:7c:
                    69:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:A0:75:74:EA:36:2E:FB:2E:46:B3:03:8E:E0:5A:6A:CA:0B:F3:01
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/Matt/2/
                RPKI Manifest - URI:rsync://rpki.co/repo/Matt/2/FDA07574EA362EFB2E46B3038EE05A6ACA0BF301.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         96:62:e1:5f:9c:4d:4c:e5:c5:f0:6a:43:37:73:28:79:10:00:
         25:79:74:7e:45:6a:ec:ea:10:1e:60:aa:d1:72:97:c2:4b:4b:
         e7:14:77:72:a0:d6:ef:39:db:12:e2:de:96:7f:6e:2c:60:61:
         d0:5d:2b:e3:10:3a:9c:ed:27:88:4e:51:f3:c0:a1:71:b7:74:
         b3:04:8a:05:0e:17:89:d7:a4:55:87:b7:d5:e7:78:20:34:1f:
         13:86:24:12:7b:e5:5b:25:96:98:61:3c:dc:fa:46:39:3d:93:
         77:d5:32:d4:0b:a7:d3:44:1f:d6:b3:57:54:df:93:31:8b:b8:
         92:0f:0d:37:8f:b7:02:07:f3:38:60:7a:82:4b:f8:90:4d:74:
         4c:49:3a:45:d6:1f:7e:10:a8:5a:c8:29:ce:88:e3:0c:53:80:
         53:e9:62:8c:10:11:0f:f0:7d:29:b7:15:b4:4d:22:51:94:8b:
         e5:ab:5c:0e:13:db:c7:13:86:06:20:1b:50:c4:e3:74:c8:9c:
         a8:0b:cf:a7:f8:e4:83:5f:ac:29:ea:7a:3d:47:e6:44:c1:dd:
         f8:ab:ba:09:9f:4f:52:e4:68:48:2d:41:b6:3f:e4:a4:bd:37:
         15:42:89:94:c9:41:fb:20:16:7f:ea:85:4f:26:3c:b2:bf:c9:
         6d:36:c8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 23:51:24 2024 by rpki-client on console-ams.rpki-client.org