$ rpki-client -vvf rpki.co/repo/AS945/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer File: 8D57D440906265349F6DEF98557AC28D0381C47E.cer (raw, json) Hash identifier: nwvI4dvVBfoRGZA4LnEZTHf8t8ULt08q+iAwYcbjchs= Subject key identifier: 8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6 Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6 Certificate serial: 045C8A80D3CD5C1DDC2D76BCDDDDD489474D12EC Authority info access: rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 13 Oct 2023 19:49:33 +0000 Certificate not after: Fri 11 Oct 2024 19:54:33 +0000 Subordinate resources: IP: 2a12:dd47:8240::/43 IP: 2a12:dd47:a000::/36 Validation: OK Signature path: rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 05 May 2024 13:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:5c:8a:80:d3:cd:5c:1d:dc:2d:76:bc:dd:dd:d4:89:47:4d:12:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6 Validity Not Before: Oct 13 19:49:33 2023 GMT Not After : Oct 11 19:54:33 2024 GMT Subject: CN=8D57D440906265349F6DEF98557AC28D0381C47E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:12:47:80:48:b0:2c:ae:72:2e:a0:e5:ea:c7: d5:f6:45:d9:c7:1a:bd:fc:5e:b0:f0:89:b2:9b:43: 3f:38:78:7d:73:87:cf:e4:ea:d2:13:19:81:54:1d: d6:f4:e8:bc:9b:2b:38:7a:96:f5:d7:f2:3e:6b:ac: 95:2f:6b:7c:51:97:75:53:0e:6e:8a:60:b1:4a:d1: 96:12:c2:78:0b:87:99:49:f4:9a:ce:56:98:e6:36: 94:6a:24:33:d3:fc:2d:15:c0:91:5a:7c:40:ee:ab: 63:18:82:08:b8:0c:94:29:2d:57:8a:aa:95:9f:e3: f6:14:9b:9d:cc:ef:63:70:a7:97:d4:ac:34:53:da: 71:ed:b5:18:f9:c1:19:32:f2:8c:18:b0:a4:b9:93: bc:b3:11:b0:9a:e6:68:de:45:8f:7b:f2:38:07:64: 1d:b5:7f:9a:54:4a:b1:eb:90:e4:6c:18:23:75:89: 6d:51:07:e0:95:3a:a5:d8:1a:c6:93:bd:9a:d6:7d: a0:24:a4:ed:dd:57:53:f1:90:29:f0:d8:98:f0:df: ed:37:bd:b4:52:4f:de:a1:93:db:5b:8b:e8:07:91: 44:0f:f7:7b:ce:c3:27:b8:1e:da:91:f6:7b:8d:2e: 82:63:01:54:3f:34:db:91:86:3b:f4:b4:90:0f:c8: 5a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E X509v3 Authority Key Identifier: keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:dd47:8240::/43 2a12:dd47:a000::/36 Signature Algorithm: sha256WithRSAEncryption 63:a5:29:7e:30:5e:1c:ac:ee:6e:15:1c:92:a4:3c:4c:64:05: c1:fe:7c:74:92:ed:a3:65:f4:57:ac:25:e8:c4:97:e0:11:07: 3d:34:eb:99:46:5a:11:b2:ac:5e:18:d0:6b:bd:d7:c6:e4:6b: 53:a2:23:ca:09:1d:2e:58:a1:81:85:5c:74:30:66:26:00:ab: 06:d3:7f:6f:e6:f1:ab:33:0f:ff:45:c7:27:88:c1:86:97:10: a2:4b:fd:3a:4f:a2:0f:9e:58:34:8a:94:b3:60:cb:05:bf:09: 52:62:e4:6d:fb:90:2d:bb:56:e8:af:e9:34:5d:43:86:05:b1: 9d:78:3a:0a:78:03:ae:83:6f:c7:49:73:c4:ca:bd:48:4d:12: 5a:b5:61:20:e7:44:d3:27:aa:db:22:c6:fe:56:f7:c4:ec:13: e0:bc:c0:e4:6b:9f:65:12:cc:f8:4f:f3:1b:d3:f9:cb:27:d0: a9:c0:bc:d7:c6:2c:94:4b:a1:56:60:61:d3:3a:e7:86:0c:e6: 0e:66:2a:e6:5a:19:8d:c7:3f:49:3a:0b:fb:12:cb:0f:92:6e: 04:36:5c:46:b0:1b:86:b8:e0:00:25:36:68:16:ad:4b:3a:19: c8:fe:4e:05:5f:70:7f:ae:e2:6b:b3:2d:6c:10:7a:f1:5f:dd: d5:ec:84:86 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgIUBFyKgNPNXB3cLXa83d3UiUdNEuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG RDk5RjNFNjAeFw0yMzEwMTMxOTQ5MzNaFw0yNDEwMTExOTU0MzNaMDMxMTAvBgNV BAMTKDhENTdENDQwOTA2MjY1MzQ5RjZERUY5ODU1N0FDMjhEMDM4MUM0N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5EkeASLAsrnIuoOXqx9X2RdnH Gr38XrDwibKbQz84eH1zh8/k6tITGYFUHdb06LybKzh6lvXX8j5rrJUva3xRl3VT Dm6KYLFK0ZYSwngLh5lJ9JrOVpjmNpRqJDPT/C0VwJFafEDuq2MYggi4DJQpLVeK qpWf4/YUm53M72Nwp5fUrDRT2nHttRj5wRky8owYsKS5k7yzEbCa5mjeRY978jgH ZB21f5pUSrHrkORsGCN1iW1RB+CVOqXYGsaTvZrWfaAkpO3dV1PxkCnw2Jjw3+03 vbRST96hk9tbi+gHkUQP93vOwye4HtqR9nuNLoJjAVQ/NNuRhjv0tJAPyFrnAgMB AAGjggKyMIICrjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSNV9RAkGJlNJ9t 75hVesKNA4HEfjAfBgNVHSMEGDAWgBRmBCicfjngjhrhJVzuc8Bb/Znz5jAOBgNV HQ8BAf8EBAMCAQYwWgYDVR0fBFMwUTBPoE2gS4ZJcnN5bmM6Ly9ycGtpLmNvL3Jl cG8vQVM5NDUvMS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlG M0U2LmNybDBmBggrBgEFBQcBAQRaMFgwVgYIKwYBBQUHMAKGSnJzeW5jOi8vcnBr aS5jby9yZXBvL0F1Z3VzdC81LzY2MDQyODlDN0UzOUUwOEUxQUUxMjU1Q0VFNzND MDVCRkQ5OUYzRTYuY2VyMIIBPwYIKwYBBQUHAQsEggExMIIBLTBfBggrBgEFBQcw BYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9k Njk3MTYwYy1hY2M1LTRiNTEtYmY1NS0xMGM3YTZlNjY5ODAvNC8wgYsGCCsGAQUF BzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q2OTcxNjBjLWFjYzUtNGI1MS1iZjU1LTEwYzdhNmU2Njk4MC80LzhENTdENDQw OTA2MjY1MzQ5RjZERUY5ODU1N0FDMjhEMDM4MUM0N0UubWZ0MDwGCCsGAQUFBzAN hjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlmaWNhdGlvbi54 bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAqBggrBgEFBQcBBwEB/wQbMBkw FwQCAAIwEQMHBSoS3UeCQAMGBCoS3UegMA0GCSqGSIb3DQEBCwUAA4IBAQBjpSl+ MF4crO5uFRySpDxMZAXB/nx0ku2jZfRXrCXoxJfgEQc9NOuZRloRsqxeGNBrvdfG 5GtToiPKCR0uWKGBhVx0MGYmAKsG039v5vGrMw//RccniMGGlxCiS/06T6IPnlg0 ipSzYMsFvwlSYuRt+5Atu1bor+k0XUOGBbGdeDoKeAOug2/HSXPEyr1ITRJatWEg 50TTJ6rbIsb+VvfE7BPgvMDka59lEsz4T/Mb0/nLJ9CpwLzXxiyUS6FWYGHTOueG DOYOZirmWhmNxz9JOgv7EssPkm4ENlxGsBuGuOAAJTZoFq1LOhnI/k4FX3B/ruJr sy1sEHrxX93V7ISG -----END CERTIFICATE-----Generated at Sat May 4 20:01:24 2024 by rpki-client on console-ams.rpki-client.org