Certificate

$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/CD468DB63484507F4C8FE71A22B015C19EA23A49.cer
File:                     CD468DB63484507F4C8FE71A22B015C19EA23A49.cer (raw, json)
Hash identifier:          lewxJxvix1jRD2z83PkVQjLOplAW/ybaVOlkjTBgPFQ=
Subject key identifier:   CD:46:8D:B6:34:84:50:7F:4C:8F:E7:1A:22:B0:15:C1:9E:A2:3A:49
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer:       /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial:       465E15275D938F23A7447951A9165387CF7A1DCD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Manifest:                 rsync://rpki-rsync.mnihyc.com/repo/mnihyc/1/CD468DB63484507F4C8FE71A22B015C19EA23A49.mft
caRepository:             rsync://rpki-rsync.mnihyc.com/repo/mnihyc/1/
Notify URL:               https://rpki-rrdp.mnihyc.com/rrdp/notification.xml
Certificate not before:   Wed 14 Jun 2023 14:58:38 +0000
Certificate not after:    Wed 12 Jun 2024 15:03:38 +0000
Subordinate resources:    AS: 140938
                          IP: 2406:4440:e000::/40
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:5e:15:27:5d:93:8f:23:a7:44:79:51:a9:16:53:87:cf:7a:1d:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
        Validity
            Not Before: Jun 14 14:58:38 2023 GMT
            Not After : Jun 12 15:03:38 2024 GMT
        Subject: CN=CD468DB63484507F4C8FE71A22B015C19EA23A49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:99:48:5c:e0:a7:a6:54:a6:40:06:00:46:8c:
                    96:9a:0f:78:71:bd:7f:d0:61:74:8a:d3:5a:3a:bb:
                    11:d1:2a:a8:00:ea:cc:95:bf:ea:69:c2:e1:7b:09:
                    b7:09:d9:bc:42:c1:1d:f1:bc:f9:fb:7d:20:1d:5f:
                    51:09:31:29:a9:22:af:9f:cf:6b:28:00:4a:0c:fa:
                    7c:01:d5:05:59:64:80:4e:36:ff:12:b3:28:07:0d:
                    82:d1:ce:af:8e:3d:8e:9b:c8:bc:f9:f6:cf:c5:6c:
                    c6:b0:56:05:91:5c:22:4d:d3:68:d4:89:5c:99:c5:
                    0a:4e:5d:27:18:d0:0c:3e:1a:f0:08:cb:43:43:ea:
                    7f:e7:ef:59:1f:47:f0:8d:15:8b:46:45:83:81:5c:
                    e2:2d:b6:eb:32:38:48:a3:c7:82:79:d1:8e:1c:50:
                    46:25:0f:52:48:ac:a7:2b:97:78:93:95:52:1e:07:
                    45:ff:76:8a:5c:22:27:a1:7d:10:5f:e7:38:7f:8b:
                    9d:bc:52:2d:f2:3d:5a:6f:b0:ee:1f:f1:05:b7:18:
                    86:80:09:bf:c2:9d:cc:c5:56:13:4a:49:25:c3:ef:
                    dc:3a:1a:16:f4:85:5f:78:7b:ac:a1:af:43:5a:da:
                    f0:89:c9:91:a6:61:9d:50:0a:ca:aa:86:7b:a4:28:
                    2e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CD:46:8D:B6:34:84:50:7F:4C:8F:E7:1A:22:B0:15:C1:9E:A2:3A:49
            X509v3 Authority Key Identifier:
                keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc/1/
                RPKI Manifest - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc/1/CD468DB63484507F4C8FE71A22B015C19EA23A49.mft
                RPKI Notify - URI:https://rpki-rrdp.mnihyc.com/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:4440:e000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140938

    Signature Algorithm: sha256WithRSAEncryption
         c3:af:ec:20:50:f7:fb:ed:2a:78:6c:bb:2d:de:21:68:76:87:
         c1:99:1d:63:89:dd:4d:4f:b6:7d:ae:2f:54:41:d4:be:e4:b7:
         bc:30:d4:0d:e0:61:e2:3f:98:60:6e:28:88:67:10:b5:9f:1e:
         34:d6:64:3c:16:aa:e2:57:f2:22:50:e7:f5:d1:a7:c5:7d:17:
         c6:c5:e3:2f:ac:b8:01:8b:ea:55:3a:0f:93:c1:c1:fe:0d:b9:
         4c:8a:af:cc:9d:3c:26:a6:f3:73:00:fc:c0:3b:3d:93:d3:54:
         14:14:7d:2d:09:c4:49:e8:c8:95:00:ed:e9:c8:8f:49:59:47:
         33:81:b0:bd:42:aa:a5:25:91:e4:3d:06:6f:38:7f:64:4a:8a:
         ef:96:48:ed:d0:e2:16:54:24:76:64:0a:5d:db:80:3b:a0:f9:
         f8:60:5e:77:3c:79:52:93:ef:ec:92:40:af:5b:4e:27:24:3b:
         d7:ff:d4:23:92:b1:bd:ab:d2:b1:53:f7:c9:13:e2:94:80:78:
         c6:bf:ef:16:da:ba:ee:da:a2:81:cd:2b:d2:d7:a8:3b:4d:8c:
         1f:fc:81:e7:81:54:34:b1:bb:e9:fe:34:8f:d3:aa:24:28:93:
         c6:7a:ea:e0:fa:b2:37:5c:d7:01:a4:f5:5f:be:df:bf:4f:fe:
         3d:22:e0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:56:35 2025 by rpki-client