![](/console.gif)
Certificate
$ rpki-client -vvf rpki.co/repo/AS945/1/8D47937E5FB1C1169EEAD229E680E581B175465F.cer
File: 8D47937E5FB1C1169EEAD229E680E581B175465F.cer (raw, json)
Hash identifier: 0zoaP6pRIouVGR1zrSPO9nydXHP70kLkEqu+8yffPWc=
Subject key identifier: 8D:47:93:7E:5F:B1:C1:16:9E:EA:D2:29:E6:80:E5:81:B1:75:46:5F
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 79703D5CC56E38F39A4B1FB8206C3D7054551DC0
Authority info access: rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Manifest: rsync://rpki.co/repo/Rudaki/0/8D47937E5FB1C1169EEAD229E680E581B175465F.mft
caRepository: rsync://rpki.co/repo/Rudaki/0/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Wed 24 Apr 2024 01:43:07 +0000
Certificate not after: Wed 23 Apr 2025 01:48:07 +0000
Subordinate resources: IP: 2a12:dd47:5300::/40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:70:3d:5c:c5:6e:38:f3:9a:4b:1f:b8:20:6c:3d:70:54:55:1d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Apr 24 01:43:07 2024 GMT
Not After : Apr 23 01:48:07 2025 GMT
Subject: CN=8D47937E5FB1C1169EEAD229E680E581B175465F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4f:c3:e7:5a:34:7e:10:ad:28:b6:fb:99:25:
4e:21:41:da:b0:14:89:22:0b:79:96:81:38:e0:9c:
8c:59:9c:eb:9d:be:40:85:9b:ff:18:f3:b1:fa:9f:
80:ec:5e:a9:35:b1:fe:4c:4d:e2:5a:1b:08:95:af:
2e:d8:a3:57:ae:7f:fb:68:08:85:33:9c:c3:2d:f8:
b4:2c:3b:fa:ed:94:01:85:27:ab:1d:30:6d:51:e4:
85:20:a6:6d:e2:ce:69:06:a3:70:aa:45:17:e2:07:
6e:9b:7b:90:d6:5f:2e:c0:49:9a:c0:5a:5f:de:25:
4d:2f:62:63:e0:27:21:69:d5:34:b4:de:bd:6a:19:
b8:01:67:09:7f:51:d2:5d:a2:57:70:16:2f:72:2c:
42:7a:cb:a6:58:46:78:06:e7:e6:c9:b3:33:e5:9c:
a0:c2:a2:6a:7d:77:01:0b:c2:93:ae:55:ad:24:92:
a6:ac:18:89:34:da:b8:ba:ff:be:59:72:63:8c:7d:
c5:10:83:ee:26:77:31:c1:9e:72:68:72:2e:aa:df:
c7:4b:6f:ce:f9:fb:28:e2:a0:14:57:50:0b:53:27:
c4:9d:57:06:1e:ab:8b:71:b5:f0:61:a4:3f:f6:53:
84:14:fe:38:f6:d0:43:05:81:71:5b:1e:0d:ef:06:
0c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8D:47:93:7E:5F:B1:C1:16:9E:EA:D2:29:E6:80:E5:81:B1:75:46:5F
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/Rudaki/0/
RPKI Manifest - URI:rsync://rpki.co/repo/Rudaki/0/8D47937E5FB1C1169EEAD229E680E581B175465F.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:5300::/40
Signature Algorithm: sha256WithRSAEncryption
af:f6:00:10:ad:68:c0:72:10:9b:e3:e0:69:49:1e:31:76:97:
c3:b4:54:aa:e0:71:de:e0:b3:16:b7:c8:cf:52:79:e6:00:3f:
33:27:61:4c:56:59:71:f5:7e:45:f8:54:79:6d:c5:ff:fe:7c:
b1:a7:bf:26:8c:c8:b1:b2:c1:ea:a2:4b:5d:88:a3:a5:2d:ce:
fa:03:ed:02:73:ae:38:71:7a:8e:45:d9:ef:61:88:40:d2:04:
9a:70:75:1c:51:61:2a:23:f5:12:0b:bb:c8:9c:1b:79:82:f3:
ab:78:b5:81:0c:2b:60:e0:50:dc:b5:3b:d9:45:1e:35:27:6b:
3d:9d:27:5e:62:cd:fc:83:7a:64:72:16:83:37:43:00:fa:46:
14:64:85:ff:39:fd:9a:fd:66:5d:e6:e3:34:6b:4c:a1:16:98:
23:1c:4c:c8:37:06:9b:19:b2:0f:85:b0:5f:b1:ba:6d:18:c3:
f4:22:a1:e8:22:28:e9:ac:37:34:94:d6:25:07:47:93:de:7e:
6a:1e:d4:59:1a:2c:44:73:f5:3c:6b:6a:5a:a5:b0:6f:1f:46:
57:10:d9:e0:15:50:d3:88:00:49:76:a9:dd:ad:08:37:10:10:
ef:61:e5:2e:64:0c:01:30:4d:d1:79:60:18:be:8b:5c:02:fc:
53:d9:d8:90
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUeXA9XMVuOPOaSx+4IGw9cFRVHcAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yNDA0MjQwMTQzMDdaFw0yNTA0MjMwMTQ4MDdaMDMxMTAvBgNV
BAMTKDhENDc5MzdFNUZCMUMxMTY5RUVBRDIyOUU2ODBFNTgxQjE3NTQ2NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrT8PnWjR+EK0otvuZJU4hQdqw
FIkiC3mWgTjgnIxZnOudvkCFm/8Y87H6n4DsXqk1sf5MTeJaGwiVry7Yo1euf/to
CIUznMMt+LQsO/rtlAGFJ6sdMG1R5IUgpm3izmkGo3CqRRfiB26be5DWXy7ASZrA
Wl/eJU0vYmPgJyFp1TS03r1qGbgBZwl/UdJdoldwFi9yLEJ6y6ZYRngG5+bJszPl
nKDComp9dwELwpOuVa0kkqasGIk02ri6/75ZcmOMfcUQg+4mdzHBnnJoci6q38dL
b875+yjioBRXUAtTJ8SdVwYeq4txtfBhpD/2U4QU/jj20EMFgXFbHg3vBgyxAgMB
AAGjggI0MIICMDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSNR5N+X7HBFp7q
0inmgOWBsXVGXzAfBgNVHSMEGDAWgBRmBCicfjngjhrhJVzuc8Bb/Znz5jAOBgNV
HQ8BAf8EBAMCAQYwWgYDVR0fBFMwUTBPoE2gS4ZJcnN5bmM6Ly9ycGtpLmNvL3Jl
cG8vQVM5NDUvMS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlG
M0U2LmNybDBlBggrBgEFBQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2
LnR3L3Jwa2kvQXVndXN0LzUvNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0Mw
NUJGRDk5RjNFNi5jZXIwgcwGCCsGAQUFBwELBIG/MIG8MCoGCCsGAQUFBzAFhh5y
c3luYzovL3Jwa2kuY28vcmVwby9SdWRha2kvMC8wVgYIKwYBBQUHMAqGSnJzeW5j
Oi8vcnBraS5jby9yZXBvL1J1ZGFraS8wLzhENDc5MzdFNUZCMUMxMTY5RUVBRDIy
OUU2ODBFNTgxQjE3NTQ2NUYubWZ0MDYGCCsGAQUFBzANhipodHRwczovL3JyZHAu
cnBraS5jby9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoS3UdTMA0GCSqG
SIb3DQEBCwUAA4IBAQCv9gAQrWjAchCb4+BpSR4xdpfDtFSq4HHe4LMWt8jPUnnm
AD8zJ2FMVllx9X5F+FR5bcX//nyxp78mjMixssHqoktdiKOlLc76A+0Cc644cXqO
RdnvYYhA0gSacHUcUWEqI/USC7vInBt5gvOreLWBDCtg4FDctTvZRR41J2s9nSde
Ys38g3pkchaDN0MA+kYUZIX/Of2a/WZd5uM0a0yhFpgjHEzINwabGbIPhbBfsbpt
GMP0IqHoIijprDc0lNYlB0eT3n5qHtRZGixEc/U8a2papbBvH0ZXENngFVDTiABJ
dqndrQg3EBDvYeUuZAwBME3ReWAYvotcAvxT2diQ
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:45 2025 by rpki-client