Certificate

$ rpki-client -vvf rpki.august.tw/repo/HYSP/0/96D0EC0D9F1A81636AABCEEFA2CE1521EFD2D2CD.cer
File:                     96D0EC0D9F1A81636AABCEEFA2CE1521EFD2D2CD.cer (raw, json)
Hash identifier:          YChc6OpJuxudm+5gJmlQAlxZ3avpbCjllZEaSd2RUWA=
Subject key identifier:   96:D0:EC:0D:9F:1A:81:63:6A:AB:CE:EF:A2:CE:15:21:EF:D2:D2:CD
Authority key identifier: 18:DA:FE:16:77:1B:DA:7D:2E:6B:D2:8A:A7:0B:9A:40:CE:71:D5:0E
Certificate issuer:       /CN=6506a66ed00c6bd26c2aaa062a69b2946ea9ff517ae5bf34de
Certificate serial:       20F4C3B35CD372D6DB8C649C69613547C65072BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed00c6bd26c2aaa062a69b2946ea9ff517ae5bf34de.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/2/96D0EC0D9F1A81636AABCEEFA2CE1521EFD2D2CD.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/2
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 08 Jan 2023 16:51:52 +0000
Certificate not after:    Sun 07 Jan 2024 16:56:52 +0000
Subordinate resources:    IP: 2602:fc23:120::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f4:c3:b3:5c:d3:72:d6:db:8c:64:9c:69:61:35:47:c6:50:72:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed00c6bd26c2aaa062a69b2946ea9ff517ae5bf34de
        Validity
            Not Before: Jan  8 16:51:52 2023 GMT
            Not After : Jan  7 16:56:52 2024 GMT
        Subject: CN=96D0EC0D9F1A81636AABCEEFA2CE1521EFD2D2CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:38:39:c0:0f:a5:ce:71:64:0f:71:9f:a9:0f:
                    c9:0a:0e:a3:83:68:c3:e6:da:f0:5d:32:cc:53:5f:
                    2f:4b:e5:9e:50:4e:c5:d0:05:de:c1:95:38:b0:4a:
                    68:09:f6:49:e0:f3:b0:a4:ce:90:14:55:96:a4:63:
                    1f:52:6f:d0:4a:76:4a:51:90:da:f2:61:9d:f4:75:
                    4f:99:2e:e2:6e:ca:c1:68:5c:fe:b3:ba:85:60:96:
                    f1:de:30:45:0e:da:c5:7f:f1:db:da:f2:c2:37:1c:
                    03:24:f3:af:98:85:8c:07:ef:9c:a8:3e:87:64:f3:
                    b2:06:49:6d:ee:20:8e:95:97:cd:c3:50:af:c2:6a:
                    92:10:e7:25:73:7a:78:b5:38:ce:bc:e2:4c:6f:33:
                    4d:a7:7e:b5:3c:cb:d0:13:4d:e4:73:d8:63:4f:85:
                    a1:9d:d8:f3:97:8f:8e:a3:2e:5d:b7:23:ce:8a:1e:
                    da:11:7d:83:3c:10:48:81:76:ee:32:7a:12:5d:94:
                    f1:f3:65:90:fe:c8:1d:8c:e3:10:ca:49:74:0c:e5:
                    a2:f1:00:77:c1:c3:0e:c1:5f:77:48:80:cf:14:0e:
                    5b:58:27:8b:26:44:10:66:b9:6c:71:4e:9f:33:38:
                    26:ca:af:f9:49:ea:b0:5a:dd:7a:3d:9b:5b:2b:2d:
                    7e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                96:D0:EC:0D:9F:1A:81:63:6A:AB:CE:EF:A2:CE:15:21:EF:D2:D2:CD
            X509v3 Authority Key Identifier:
                keyid:18:DA:FE:16:77:1B:DA:7D:2E:6B:D2:8A:A7:0B:9A:40:CE:71:D5:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/HYSP/0/18DAFE16771BDA7D2E6BD28AA70B9A40CE71D50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed00c6bd26c2aaa062a69b2946ea9ff517ae5bf34de.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/2
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/2/96D0EC0D9F1A81636AABCEEFA2CE1521EFD2D2CD.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:120::/44

    Signature Algorithm: sha256WithRSAEncryption
         9f:cb:c9:9d:f4:6c:81:19:be:35:2a:85:7b:96:16:00:c6:cb:
         cc:81:10:13:ec:46:37:57:04:b0:6c:66:fb:a0:d8:04:fb:0e:
         ed:c4:1e:23:1f:ee:c6:3a:33:00:f6:5f:6b:32:64:13:15:df:
         c7:b8:32:2b:26:0e:89:4d:e4:d8:d3:10:0c:2e:7e:2e:5c:1e:
         9c:27:3b:24:3b:6f:5c:56:b7:44:bc:1a:a5:75:d8:1d:65:a1:
         70:8c:44:d4:ed:a5:60:49:bd:15:d4:fc:2f:9b:88:f4:35:ff:
         55:24:b8:e0:a6:a2:75:e7:01:4f:9c:cf:9e:f6:5c:6b:f5:8a:
         0b:b6:b2:cc:fc:ab:3b:d6:6e:fd:23:f9:69:9c:43:bb:4c:0a:
         ea:c4:a1:c3:98:47:d3:2d:49:3c:80:f2:95:1f:d7:b0:74:9b:
         ea:fc:06:10:a8:33:9e:a5:f9:a5:8d:85:4f:34:7e:59:23:9b:
         8b:02:16:86:27:9b:d3:d5:33:70:92:48:16:d7:2a:03:6f:30:
         5f:44:bf:bb:d5:dd:c6:3f:1a:8d:fe:fa:09:a4:20:94:f1:42:
         ca:20:a0:f1:c2:73:90:81:bd:69:49:e7:4e:47:d5:75:14:5c:
         eb:b5:c4:d9:52:49:5e:f8:70:d5:ae:57:5b:a9:37:72:ac:d6:
         08:fe:1d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:59 2024 by rpki-client on console-fra.rpki-client.org