Certificate

$ rpki-client -vvf rpki.co/repo/AS945/2/6DD138EBB7A6BAB2C1F4E3D7167011D86AC1FCF0.cer
File:                     6DD138EBB7A6BAB2C1F4E3D7167011D86AC1FCF0.cer (raw, json)
Hash identifier:          5Kgh9GcWJ4NyyfJ8vHNIMb8hE0xClh4hxrgTg/XdzB8=
Subject key identifier:   6D:D1:38:EB:B7:A6:BA:B2:C1:F4:E3:D7:16:70:11:D8:6A:C1:FC:F0
Authority key identifier: E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91
Certificate issuer:       /CN=E06465DE1AB39B909A36BC5B67FA379790286C91
Certificate serial:       3EE101093747882E5D08D1B17DDA2EF136F6F5DD
Authority info access:    rsync://dev.tw/rpki/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
Manifest:                 rsync://rpki.co/repo/Cube/2/6DD138EBB7A6BAB2C1F4E3D7167011D86AC1FCF0.mft
caRepository:             rsync://rpki.co/repo/Cube/2/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Tue 23 Apr 2024 20:42:20 +0000
Certificate not after:    Tue 22 Apr 2025 20:47:20 +0000
Subordinate resources:    IP: 2602:fc23:160::/44

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.crl
                          rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.mft
                          rsync://dev.tw/rpki/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
                          rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.crl
                          rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 18:17:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e1:01:09:37:47:88:2e:5d:08:d1:b1:7d:da:2e:f1:36:f6:f5:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E06465DE1AB39B909A36BC5B67FA379790286C91
        Validity
            Not Before: Apr 23 20:42:20 2024 GMT
            Not After : Apr 22 20:47:20 2025 GMT
        Subject: CN=6DD138EBB7A6BAB2C1F4E3D7167011D86AC1FCF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3c:ce:69:7f:b1:f8:64:b4:41:78:ff:da:82:
                    f5:e0:23:e8:f5:09:7e:70:e0:3b:0b:e1:7e:15:9c:
                    fc:78:77:0b:5c:78:cd:aa:e3:11:b2:80:da:93:8c:
                    02:92:68:c6:3e:d4:c6:33:03:2a:77:0a:6f:e6:45:
                    02:25:e7:ed:4c:50:be:61:0b:c0:98:2f:ff:dc:e1:
                    02:3f:49:41:a3:37:8e:9a:78:48:62:fa:c8:ea:94:
                    f5:e6:4d:c7:30:b5:a2:96:47:58:ce:d9:3d:d0:a1:
                    71:44:d7:62:90:05:34:32:ab:d6:ee:95:b8:10:9b:
                    e0:52:39:8e:6e:bc:03:14:5b:c2:ce:98:f4:a9:6c:
                    f7:58:3f:56:13:25:96:89:28:c6:f3:04:1f:4b:c8:
                    63:c8:ac:60:87:cd:00:c0:99:31:e5:77:b8:be:fb:
                    75:67:c1:39:4c:f4:96:ae:57:9d:2f:70:70:6d:ed:
                    89:70:ac:3f:54:fb:59:b9:f2:03:44:19:c8:e5:bb:
                    45:1f:6f:23:bd:f7:3a:a1:71:15:5b:d9:4e:3b:d7:
                    c9:bb:4f:42:e0:db:5a:b9:00:e1:1c:40:33:ef:5e:
                    51:bc:2f:3b:6d:56:d7:aa:3c:fe:fd:7c:37:a9:ff:
                    a4:3d:1d:2c:d7:9f:fe:64:46:6f:33:9d:14:f8:84:
                    8d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6D:D1:38:EB:B7:A6:BA:B2:C1:F4:E3:D7:16:70:11:D8:6A:C1:FC:F0
            X509v3 Authority Key Identifier:
                keyid:E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/Cube/2/
                RPKI Manifest - URI:rsync://rpki.co/repo/Cube/2/6DD138EBB7A6BAB2C1F4E3D7167011D86AC1FCF0.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:160::/44

    Signature Algorithm: sha256WithRSAEncryption
         8c:ed:54:06:54:f0:6b:7a:d9:05:77:e5:c3:42:79:52:dc:98:
         aa:d2:c2:41:10:43:6b:5d:94:3b:cd:86:12:d6:c2:ab:59:d0:
         e5:76:e5:4a:1a:a0:e1:17:5d:18:51:5c:7a:96:fa:66:b4:5d:
         a2:2f:aa:87:fc:4a:6d:6d:95:0f:5d:03:5b:6c:dd:a7:d2:7d:
         1a:68:0f:31:70:d4:83:05:84:78:10:50:50:ac:59:e6:30:be:
         99:1a:34:17:17:65:8e:a3:43:d1:56:36:30:13:93:f1:f8:e0:
         d8:8d:e2:4c:48:d0:36:f2:0c:18:e9:d2:d7:d4:c8:1c:d9:49:
         92:1a:dc:7e:45:0d:df:04:40:db:54:5c:ab:b6:54:a2:70:9a:
         03:64:59:d3:13:e9:5d:e1:78:8f:bb:d2:ea:de:9b:60:7d:13:
         ce:05:f5:52:73:c5:9d:4b:c4:30:6c:da:35:05:e2:9d:1a:f9:
         cb:68:83:64:9c:a7:6f:c9:c2:f0:6e:9c:60:b1:1d:0c:be:8a:
         09:d2:25:aa:6b:ec:4d:84:2c:d7:67:0a:b6:99:6e:92:31:ca:
         3e:e5:86:90:2c:fa:45:fe:d6:a8:f9:8c:0e:bb:67:f9:a0:73:
         f4:05:5b:c1:30:2b:a1:2d:9a:e3:00:01:44:80:f8:0d:79:17:
         8a:d9:8d:75
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUPuEBCTdHiC5dCNGxfdou8Tb29d0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA2NDY1REUxQUIzOUI5MDlBMzZCQzVCNjdGQTM3OTc5
MDI4NkM5MTAeFw0yNDA0MjMyMDQyMjBaFw0yNTA0MjIyMDQ3MjBaMDMxMTAvBgNV
BAMTKDZERDEzOEVCQjdBNkJBQjJDMUY0RTNENzE2NzAxMUQ4NkFDMUZDRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8PM5pf7H4ZLRBeP/agvXgI+j1
CX5w4DsL4X4VnPx4dwtceM2q4xGygNqTjAKSaMY+1MYzAyp3Cm/mRQIl5+1MUL5h
C8CYL//c4QI/SUGjN46aeEhi+sjqlPXmTccwtaKWR1jO2T3QoXFE12KQBTQyq9bu
lbgQm+BSOY5uvAMUW8LOmPSpbPdYP1YTJZaJKMbzBB9LyGPIrGCHzQDAmTHld7i+
+3VnwTlM9JauV50vcHBt7YlwrD9U+1m58gNEGcjlu0UfbyO99zqhcRVb2U4718m7
T0Lg21q5AOEcQDPvXlG8LzttVteqPP79fDep/6Q9HSzXn/5kRm8znRT4hI1pAgMB
AAGjggIxMIICLTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRt0Tjrt6a6ssH0
49cWcBHYasH88DAfBgNVHSMEGDAWgBTgZGXeGrObkJo2vFtn+jeXkChskTAOBgNV
HQ8BAf8EBAMCAQYwWgYDVR0fBFMwUTBPoE2gS4ZJcnN5bmM6Ly9ycGtpLmNvL3Jl
cG8vQVM5NDUvMi9FMDY0NjVERTFBQjM5QjkwOUEzNkJDNUI2N0ZBMzc5NzkwMjg2
QzkxLmNybDBlBggrBgEFBQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2
LnR3L3Jwa2kvQXVndXN0LzcvRTA2NDY1REUxQUIzOUI5MDlBMzZCQzVCNjdGQTM3
OTc5MDI4NkM5MS5jZXIwgcgGCCsGAQUFBwELBIG7MIG4MCgGCCsGAQUFBzAFhhxy
c3luYzovL3Jwa2kuY28vcmVwby9DdWJlLzIvMFQGCCsGAQUFBzAKhkhyc3luYzov
L3Jwa2kuY28vcmVwby9DdWJlLzIvNkREMTM4RUJCN0E2QkFCMkMxRjRFM0Q3MTY3
MDExRDg2QUMxRkNGMC5tZnQwNgYIKwYBBQUHMA2GKmh0dHBzOi8vcnJkcC5ycGtp
LmNvL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL8IwFgMA0GCSqGSIb3
DQEBCwUAA4IBAQCM7VQGVPBretkFd+XDQnlS3Jiq0sJBEENrXZQ7zYYS1sKrWdDl
duVKGqDhF10YUVx6lvpmtF2iL6qH/EptbZUPXQNbbN2n0n0aaA8xcNSDBYR4EFBQ
rFnmML6ZGjQXF2WOo0PRVjYwE5Px+ODYjeJMSNA28gwY6dLX1Mgc2UmSGtx+RQ3f
BEDbVFyrtlSicJoDZFnTE+ld4XiPu9Lq3ptgfRPOBfVSc8WdS8QwbNo1BeKdGvnL
aINknKdvycLwbpxgsR0MvooJ0iWqa+xNhCzXZwq2mW6SMco+5YaQLPpF/tao+YwO
u2f5oHP0BVvBMCuhLZrjAAFEgPgNeReK2Y11
-----END CERTIFICATE-----
Generated at Wed May 1 19:32:00 2024 by rpki-client on console-fra.rpki-client.org