Certificate

$ rpki-client -vvf rpki.co/repo/AS945/1/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.cer
File:                     CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.cer (raw, json)
Hash identifier:          Q5WAczPmU75S7Y7NEXfF5zRCVJJNo1sKu6t2s9WK9po=
Subject key identifier:   CD:67:25:68:ED:AF:D0:43:AC:C9:C2:B6:93:C6:F2:BF:9D:F6:42:FE
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       7FFF78300CDC6CF46A03529D6A1F01A9D16F4F83
Authority info access:    rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Manifest:                 rsync://rpki.co/repo/AS203843/0/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.mft
caRepository:             rsync://rpki.co/repo/AS203843/0/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Tue 23 Apr 2024 17:47:18 +0000
Certificate not after:    Tue 22 Apr 2025 17:52:18 +0000
Subordinate resources:    IP: 2a12:dd47:8047::/48
                          IP: 2a12:dd47:80e4::/48

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
                          rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 11:55:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ff:78:30:0c:dc:6c:f4:6a:03:52:9d:6a:1f:01:a9:d1:6f:4f:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 23 17:47:18 2024 GMT
            Not After : Apr 22 17:52:18 2025 GMT
        Subject: CN=CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:19:b6:6f:b8:fb:f4:a3:d5:b9:5c:75:83:de:
                    78:b5:e1:2c:a6:88:ea:e1:b7:de:55:d5:96:bf:d2:
                    a3:ed:a9:98:33:ea:96:5d:9d:12:f8:13:cf:eb:43:
                    36:38:1c:c7:4a:90:e0:10:38:01:14:23:8c:76:1b:
                    83:00:20:e2:f7:1e:8a:03:20:1d:37:9a:15:66:4c:
                    52:2f:30:43:ff:ce:ad:82:85:03:37:68:ab:4a:fc:
                    43:5e:6b:7d:2a:b9:33:cd:cc:ee:24:e8:41:a7:53:
                    d8:91:29:94:78:4c:6b:45:70:78:3e:b3:b6:9a:ed:
                    d4:3e:e8:eb:83:f9:38:8e:1d:93:07:13:4c:88:3b:
                    ff:64:44:fb:26:66:71:3a:fa:be:c1:07:2a:61:98:
                    70:25:a1:f8:34:52:a7:b0:73:fe:f7:0f:9a:f1:05:
                    64:dd:f3:33:ab:87:10:d9:cc:9c:5f:80:2f:d5:0e:
                    b0:b7:be:ab:77:2a:01:5b:89:4b:45:2f:f1:19:7b:
                    38:d7:89:6f:0a:bd:1f:a8:75:11:37:6a:af:41:d2:
                    bc:e5:f8:47:da:61:cf:a2:23:31:ea:6c:05:6c:43:
                    06:9a:d7:01:41:bd:59:8c:f9:48:64:e3:15:4c:82:
                    c9:00:c6:4c:d1:64:5b:b0:df:cf:b1:b1:64:c3:cf:
                    1d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CD:67:25:68:ED:AF:D0:43:AC:C9:C2:B6:93:C6:F2:BF:9D:F6:42:FE
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS203843/0/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS203843/0/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8047::/48
                  2a12:dd47:80e4::/48

    Signature Algorithm: sha256WithRSAEncryption
         d5:29:9a:6a:0e:64:0c:51:79:ee:90:29:14:67:de:ec:35:4f:
         ea:30:fc:a3:dd:85:5c:8d:1f:86:0a:dd:e7:35:64:ed:c9:b0:
         e1:c1:37:4b:5b:67:2c:89:51:45:d5:93:70:3e:64:23:32:15:
         47:6f:40:dd:c4:f9:87:04:1d:8e:48:55:a2:8b:47:b4:91:1f:
         60:a8:b0:2d:7f:b5:6f:ea:c7:3b:f2:48:b1:9a:90:01:4f:9d:
         c5:21:c2:e8:1e:6e:08:d7:fc:7a:6b:8c:cb:f8:b9:bd:8b:2f:
         8d:31:d7:7a:26:99:c3:77:5a:fb:ce:8f:c4:01:f9:79:da:3a:
         9c:dc:18:8e:bb:48:1f:a0:07:ec:79:1a:d7:fb:2b:16:55:2d:
         8f:1b:e3:fd:8a:90:32:1a:e2:a5:1c:4e:b5:8c:e2:5f:07:31:
         a9:0b:47:37:2a:d9:56:4c:13:53:61:a1:38:41:b1:0d:2a:a0:
         89:36:91:47:66:db:0a:5e:f7:2d:a8:98:6e:56:4f:c7:a9:7c:
         56:4b:ac:d5:63:02:2e:44:c1:12:05:bf:f7:02:4f:0b:aa:6d:
         55:b8:b8:4f:d3:d7:d4:1a:1f:1f:c8:b4:8c:00:92:0d:9e:97:
         9d:62:94:85:27:1a:b4:0c:00:da:55:66:85:71:09:bf:6c:92:
         82:ad:5e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:28:07 2024 by rpki-client on console-ams.rpki-client.org