Certificate

$ rpki-client -vvf rpki.co/repo/AS945/1/8D47937E5FB1C1169EEAD229E680E581B175465F.cer
File:                     8D47937E5FB1C1169EEAD229E680E581B175465F.cer (raw, json)
Hash identifier:          0zoaP6pRIouVGR1zrSPO9nydXHP70kLkEqu+8yffPWc=
Subject key identifier:   8D:47:93:7E:5F:B1:C1:16:9E:EA:D2:29:E6:80:E5:81:B1:75:46:5F
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       79703D5CC56E38F39A4B1FB8206C3D7054551DC0
Authority info access:    rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Manifest:                 rsync://rpki.co/repo/Rudaki/0/8D47937E5FB1C1169EEAD229E680E581B175465F.mft
caRepository:             rsync://rpki.co/repo/Rudaki/0/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Wed 24 Apr 2024 01:43:07 +0000
Certificate not after:    Wed 23 Apr 2025 01:48:07 +0000
Subordinate resources:    IP: 2a12:dd47:5300::/40

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
                          rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:70:3d:5c:c5:6e:38:f3:9a:4b:1f:b8:20:6c:3d:70:54:55:1d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 24 01:43:07 2024 GMT
            Not After : Apr 23 01:48:07 2025 GMT
        Subject: CN=8D47937E5FB1C1169EEAD229E680E581B175465F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4f:c3:e7:5a:34:7e:10:ad:28:b6:fb:99:25:
                    4e:21:41:da:b0:14:89:22:0b:79:96:81:38:e0:9c:
                    8c:59:9c:eb:9d:be:40:85:9b:ff:18:f3:b1:fa:9f:
                    80:ec:5e:a9:35:b1:fe:4c:4d:e2:5a:1b:08:95:af:
                    2e:d8:a3:57:ae:7f:fb:68:08:85:33:9c:c3:2d:f8:
                    b4:2c:3b:fa:ed:94:01:85:27:ab:1d:30:6d:51:e4:
                    85:20:a6:6d:e2:ce:69:06:a3:70:aa:45:17:e2:07:
                    6e:9b:7b:90:d6:5f:2e:c0:49:9a:c0:5a:5f:de:25:
                    4d:2f:62:63:e0:27:21:69:d5:34:b4:de:bd:6a:19:
                    b8:01:67:09:7f:51:d2:5d:a2:57:70:16:2f:72:2c:
                    42:7a:cb:a6:58:46:78:06:e7:e6:c9:b3:33:e5:9c:
                    a0:c2:a2:6a:7d:77:01:0b:c2:93:ae:55:ad:24:92:
                    a6:ac:18:89:34:da:b8:ba:ff:be:59:72:63:8c:7d:
                    c5:10:83:ee:26:77:31:c1:9e:72:68:72:2e:aa:df:
                    c7:4b:6f:ce:f9:fb:28:e2:a0:14:57:50:0b:53:27:
                    c4:9d:57:06:1e:ab:8b:71:b5:f0:61:a4:3f:f6:53:
                    84:14:fe:38:f6:d0:43:05:81:71:5b:1e:0d:ef:06:
                    0c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:47:93:7E:5F:B1:C1:16:9E:EA:D2:29:E6:80:E5:81:B1:75:46:5F
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/Rudaki/0/
                RPKI Manifest - URI:rsync://rpki.co/repo/Rudaki/0/8D47937E5FB1C1169EEAD229E680E581B175465F.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5300::/40

    Signature Algorithm: sha256WithRSAEncryption
         af:f6:00:10:ad:68:c0:72:10:9b:e3:e0:69:49:1e:31:76:97:
         c3:b4:54:aa:e0:71:de:e0:b3:16:b7:c8:cf:52:79:e6:00:3f:
         33:27:61:4c:56:59:71:f5:7e:45:f8:54:79:6d:c5:ff:fe:7c:
         b1:a7:bf:26:8c:c8:b1:b2:c1:ea:a2:4b:5d:88:a3:a5:2d:ce:
         fa:03:ed:02:73:ae:38:71:7a:8e:45:d9:ef:61:88:40:d2:04:
         9a:70:75:1c:51:61:2a:23:f5:12:0b:bb:c8:9c:1b:79:82:f3:
         ab:78:b5:81:0c:2b:60:e0:50:dc:b5:3b:d9:45:1e:35:27:6b:
         3d:9d:27:5e:62:cd:fc:83:7a:64:72:16:83:37:43:00:fa:46:
         14:64:85:ff:39:fd:9a:fd:66:5d:e6:e3:34:6b:4c:a1:16:98:
         23:1c:4c:c8:37:06:9b:19:b2:0f:85:b0:5f:b1:ba:6d:18:c3:
         f4:22:a1:e8:22:28:e9:ac:37:34:94:d6:25:07:47:93:de:7e:
         6a:1e:d4:59:1a:2c:44:73:f5:3c:6b:6a:5a:a5:b0:6f:1f:46:
         57:10:d9:e0:15:50:d3:88:00:49:76:a9:dd:ad:08:37:10:10:
         ef:61:e5:2e:64:0c:01:30:4d:d1:79:60:18:be:8b:5c:02:fc:
         53:d9:d8:90
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUeXA9XMVuOPOaSx+4IGw9cFRVHcAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yNDA0MjQwMTQzMDdaFw0yNTA0MjMwMTQ4MDdaMDMxMTAvBgNV
BAMTKDhENDc5MzdFNUZCMUMxMTY5RUVBRDIyOUU2ODBFNTgxQjE3NTQ2NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrT8PnWjR+EK0otvuZJU4hQdqw
FIkiC3mWgTjgnIxZnOudvkCFm/8Y87H6n4DsXqk1sf5MTeJaGwiVry7Yo1euf/to
CIUznMMt+LQsO/rtlAGFJ6sdMG1R5IUgpm3izmkGo3CqRRfiB26be5DWXy7ASZrA
Wl/eJU0vYmPgJyFp1TS03r1qGbgBZwl/UdJdoldwFi9yLEJ6y6ZYRngG5+bJszPl
nKDComp9dwELwpOuVa0kkqasGIk02ri6/75ZcmOMfcUQg+4mdzHBnnJoci6q38dL
b875+yjioBRXUAtTJ8SdVwYeq4txtfBhpD/2U4QU/jj20EMFgXFbHg3vBgyxAgMB
AAGjggI0MIICMDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSNR5N+X7HBFp7q
0inmgOWBsXVGXzAfBgNVHSMEGDAWgBRmBCicfjngjhrhJVzuc8Bb/Znz5jAOBgNV
HQ8BAf8EBAMCAQYwWgYDVR0fBFMwUTBPoE2gS4ZJcnN5bmM6Ly9ycGtpLmNvL3Jl
cG8vQVM5NDUvMS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlG
M0U2LmNybDBlBggrBgEFBQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2
LnR3L3Jwa2kvQXVndXN0LzUvNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0Mw
NUJGRDk5RjNFNi5jZXIwgcwGCCsGAQUFBwELBIG/MIG8MCoGCCsGAQUFBzAFhh5y
c3luYzovL3Jwa2kuY28vcmVwby9SdWRha2kvMC8wVgYIKwYBBQUHMAqGSnJzeW5j
Oi8vcnBraS5jby9yZXBvL1J1ZGFraS8wLzhENDc5MzdFNUZCMUMxMTY5RUVBRDIy
OUU2ODBFNTgxQjE3NTQ2NUYubWZ0MDYGCCsGAQUFBzANhipodHRwczovL3JyZHAu
cnBraS5jby9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoS3UdTMA0GCSqG
SIb3DQEBCwUAA4IBAQCv9gAQrWjAchCb4+BpSR4xdpfDtFSq4HHe4LMWt8jPUnnm
AD8zJ2FMVllx9X5F+FR5bcX//nyxp78mjMixssHqoktdiKOlLc76A+0Cc644cXqO
RdnvYYhA0gSacHUcUWEqI/USC7vInBt5gvOreLWBDCtg4FDctTvZRR41J2s9nSde
Ys38g3pkchaDN0MA+kYUZIX/Of2a/WZd5uM0a0yhFpgjHEzINwabGbIPhbBfsbpt
GMP0IqHoIijprDc0lNYlB0eT3n5qHtRZGixEc/U8a2papbBvH0ZXENngFVDTiABJ
dqndrQg3EBDvYeUuZAwBME3ReWAYvotcAvxT2diQ
-----END CERTIFICATE-----
Generated at Sat May 4 20:40:11 2024 by rpki-client on console-fra.rpki-client.org