Certificate

$ rpki-client -vvf rpki.co/repo/AS945/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.cer
File:                     51E8BF04F872204D7BAF9626F16CDB039E3A2443.cer (raw, json)
Hash identifier:          /1Q6+092fqcDu/dKpNzE6mkMCyU/l5hhquYHU79H1Ok=
Subject key identifier:   51:E8:BF:04:F8:72:20:4D:7B:AF:96:26:F1:6C:DB:03:9E:3A:24:43
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       4991FB518E3E097E2D0094440F1CE70CF44518F1
Authority info access:    rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Manifest:                 rsync://rpki.co/repo/Pong/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.mft
caRepository:             rsync://rpki.co/repo/Pong/1/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Tue 23 Apr 2024 02:59:18 +0000
Certificate not after:    Tue 22 Apr 2025 03:04:18 +0000
Subordinate resources:    IP: 2a12:dd47:5200::/40

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
                          rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 11:55:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:91:fb:51:8e:3e:09:7e:2d:00:94:44:0f:1c:e7:0c:f4:45:18:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 23 02:59:18 2024 GMT
            Not After : Apr 22 03:04:18 2025 GMT
        Subject: CN=51E8BF04F872204D7BAF9626F16CDB039E3A2443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e5:d1:1a:f0:73:a2:c9:ad:20:f6:c4:5c:86:
                    51:f1:f0:10:0c:d9:27:73:c5:38:9d:d1:22:2f:0d:
                    c5:db:ba:a1:df:50:8e:3e:a7:9e:4c:4a:61:ef:35:
                    77:d3:19:16:51:07:33:97:af:c5:fe:e6:04:0b:2d:
                    39:a8:01:84:8d:0f:b5:f0:34:17:61:70:cd:8a:1f:
                    b8:cb:5e:85:9b:73:40:7e:2e:97:c3:5a:bd:7a:3c:
                    b4:57:94:c3:1f:0c:09:bd:38:e7:5c:1b:2e:85:a3:
                    26:59:0c:65:29:1c:c0:eb:be:a2:db:88:ae:23:75:
                    8e:32:bb:21:d8:1f:92:34:93:e3:1b:91:4d:e4:9c:
                    72:1b:43:38:27:0c:89:a6:b4:7e:64:40:59:28:c9:
                    9e:29:cb:8a:a1:6c:dc:a7:8c:28:44:bb:21:a8:09:
                    3b:32:eb:f0:a6:9b:f4:57:5c:e6:80:ed:ba:28:e5:
                    b1:d3:15:b6:94:f0:6c:cf:48:7a:bc:89:19:d4:b4:
                    ab:e9:44:84:30:8d:92:51:56:bc:e4:66:ae:9e:57:
                    ec:a1:71:bb:ab:f8:62:72:66:49:3b:9d:0d:fd:74:
                    1f:34:e8:e5:59:08:32:06:3d:c6:aa:ac:2e:78:06:
                    d9:2e:41:a0:50:4a:ba:cd:ec:5c:55:0a:79:05:ea:
                    c7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:E8:BF:04:F8:72:20:4D:7B:AF:96:26:F1:6C:DB:03:9E:3A:24:43
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/Pong/1/
                RPKI Manifest - URI:rsync://rpki.co/repo/Pong/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5200::/40

    Signature Algorithm: sha256WithRSAEncryption
         40:b2:bc:ac:c5:4d:d7:ee:13:b0:4f:42:a5:e2:60:aa:c9:1e:
         5a:17:12:40:1c:57:c1:d0:8e:5b:17:de:e2:88:57:80:65:ae:
         89:3a:2e:4d:4a:f1:90:19:55:49:91:94:f1:bf:43:c4:e0:ae:
         56:11:0b:9f:64:af:87:46:a2:b6:7a:8d:c1:f3:ac:61:36:4b:
         4f:4a:ed:b6:dd:fb:47:c8:a4:c3:96:45:99:5b:2e:50:2f:08:
         9b:97:cf:ff:cd:7d:29:39:5f:78:bb:82:ab:f9:7f:11:30:c2:
         24:46:86:24:d5:92:57:b0:5c:16:3a:95:73:81:21:61:53:35:
         32:a9:62:f9:e7:b8:ed:90:50:04:9c:4a:01:78:e2:80:37:53:
         9c:71:74:2d:07:00:88:af:f0:bf:0d:79:13:c8:5e:44:b7:a2:
         fb:29:19:5b:2e:0b:8b:22:e2:74:8a:03:1a:f1:8b:b8:4e:69:
         7f:38:9e:ca:64:23:45:ec:db:cb:06:90:94:fc:be:19:e1:26:
         f7:03:7a:22:50:59:fe:f4:f9:3e:ef:f7:38:f9:a4:c1:dc:c1:
         58:e6:f9:29:d2:49:53:2e:fd:be:11:b3:f0:a8:c6:48:63:e4:
         79:e4:64:c0:1d:70:7c:ad:27:b9:ae:ee:c0:a6:ad:aa:82:bb:
         b7:94:15:ef
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUSZH7UY4+CX4tAJREDxznDPRFGPEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yNDA0MjMwMjU5MThaFw0yNTA0MjIwMzA0MThaMDMxMTAvBgNV
BAMTKDUxRThCRjA0Rjg3MjIwNEQ3QkFGOTYyNkYxNkNEQjAzOUUzQTI0NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC65dEa8HOiya0g9sRchlHx8BAM
2SdzxTid0SIvDcXbuqHfUI4+p55MSmHvNXfTGRZRBzOXr8X+5gQLLTmoAYSND7Xw
NBdhcM2KH7jLXoWbc0B+LpfDWr16PLRXlMMfDAm9OOdcGy6FoyZZDGUpHMDrvqLb
iK4jdY4yuyHYH5I0k+MbkU3knHIbQzgnDImmtH5kQFkoyZ4py4qhbNynjChEuyGo
CTsy6/Cmm/RXXOaA7boo5bHTFbaU8GzPSHq8iRnUtKvpRIQwjZJRVrzkZq6eV+yh
cbur+GJyZkk7nQ39dB806OVZCDIGPcaqrC54BtkuQaBQSrrN7FxVCnkF6sfJAgMB
AAGjggIwMIICLDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRR6L8E+HIgTXuv
libxbNsDnjokQzAfBgNVHSMEGDAWgBRmBCicfjngjhrhJVzuc8Bb/Znz5jAOBgNV
HQ8BAf8EBAMCAQYwWgYDVR0fBFMwUTBPoE2gS4ZJcnN5bmM6Ly9ycGtpLmNvL3Jl
cG8vQVM5NDUvMS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlG
M0U2LmNybDBlBggrBgEFBQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2
LnR3L3Jwa2kvQXVndXN0LzUvNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0Mw
NUJGRDk5RjNFNi5jZXIwgcgGCCsGAQUFBwELBIG7MIG4MCgGCCsGAQUFBzAFhhxy
c3luYzovL3Jwa2kuY28vcmVwby9Qb25nLzEvMFQGCCsGAQUFBzAKhkhyc3luYzov
L3Jwa2kuY28vcmVwby9Qb25nLzEvNTFFOEJGMDRGODcyMjA0RDdCQUY5NjI2RjE2
Q0RCMDM5RTNBMjQ0My5tZnQwNgYIKwYBBQUHMA2GKmh0dHBzOi8vcnJkcC5ycGtp
LmNvL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhLdR1IwDQYJKoZIhvcN
AQELBQADggEBAECyvKzFTdfuE7BPQqXiYKrJHloXEkAcV8HQjlsX3uKIV4Blrok6
Lk1K8ZAZVUmRlPG/Q8TgrlYRC59kr4dGorZ6jcHzrGE2S09K7bbd+0fIpMOWRZlb
LlAvCJuXz//NfSk5X3i7gqv5fxEwwiRGhiTVklewXBY6lXOBIWFTNTKpYvnnuO2Q
UAScSgF44oA3U5xxdC0HAIiv8L8NeRPIXkS3ovspGVsuC4si4nSKAxrxi7hOaX84
nspkI0Xs28sGkJT8vhnhJvcDeiJQWf70+T7v9zj5pMHcwVjm+SnSSVMu/b4Rs/Co
xkhj5HnkZMAdcHytJ7mu7sCmraqCu7eUFe8=
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:28:07 2024 by rpki-client on console-ams.rpki-client.org