Certificate

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/67D62A55D09A0E54797A7BAD5C400454D5529546.cer
File:                     67D62A55D09A0E54797A7BAD5C400454D5529546.cer (raw, json)
Hash identifier:          VJ6vw5YfzsrL64Ty5hzSpXOcmGzkwtcD1HD0IsIdQJ0=
Subject key identifier:   67:D6:2A:55:D0:9A:0E:54:79:7A:7B:AD:5C:40:04:54:D5:52:95:46
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Certificate issuer:       /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial:       220474037019D7C64E6589891928D2D60C0E82A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Manifest:                 rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.mft
caRepository:             rsync://repo.rpki.space/repo/Netiface/2/
Notify URL:               https://repo.rpki.space/rrdp/notification.xml
Certificate not before:   Wed 29 May 2024 13:54:37 +0000
Certificate not after:    Wed 28 May 2025 13:59:37 +0000
Subordinate resources:    IP: 2a14:7c0:3800::/38

Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 21:43:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:04:74:03:70:19:d7:c6:4e:65:89:89:19:28:d2:d6:0c:0e:82:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
        Validity
            Not Before: May 29 13:54:37 2024 GMT
            Not After : May 28 13:59:37 2025 GMT
        Subject: CN=67D62A55D09A0E54797A7BAD5C400454D5529546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c8:8e:c2:5e:8d:c7:31:fa:4b:c5:b0:cc:7c:
                    83:84:15:f4:3b:2c:af:77:6d:b6:cd:5b:6b:23:8b:
                    03:d5:f6:1a:5c:cb:6f:6d:16:2e:33:61:bc:9f:9a:
                    92:28:e1:71:fe:e5:d8:0b:6e:e9:b2:63:ea:a8:da:
                    7d:89:64:88:89:6b:a8:3e:e3:53:71:45:81:3f:56:
                    a6:0e:26:18:5d:2c:d8:c4:84:db:55:33:52:a2:c7:
                    eb:4a:0b:6d:5e:9d:ed:6a:d5:1e:f1:83:29:6f:6d:
                    a4:86:a2:eb:93:d7:9c:38:65:f9:34:f4:7c:44:00:
                    02:bf:d3:78:29:1c:41:9d:57:c6:a7:a6:de:08:29:
                    c2:a0:a3:c1:49:f6:47:b5:60:da:de:06:91:c4:3e:
                    52:42:23:6b:1a:06:03:b1:ca:cb:65:40:b1:e9:c4:
                    68:48:f5:a8:bf:29:d2:76:29:fe:15:65:1a:25:c9:
                    ce:d9:42:9f:4f:f2:7f:19:14:b9:9b:7b:35:4f:6e:
                    e1:3d:7f:db:e7:a6:8c:aa:d1:3f:32:18:f3:b5:39:
                    b4:c3:f7:68:77:72:46:75:62:6d:63:91:fa:b2:8a:
                    c6:90:aa:a6:9f:98:c1:ea:a7:60:a9:8a:30:1c:c7:
                    1a:f7:d1:b2:cc:e1:92:44:39:9d:23:cd:d5:a3:15:
                    46:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                67:D6:2A:55:D0:9A:0E:54:79:7A:7B:AD:5C:40:04:54:D5:52:95:46
            X509v3 Authority Key Identifier:
                keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo.rpki.space/repo/Netiface/2/
                RPKI Manifest - URI:rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.mft
                RPKI Notify - URI:https://repo.rpki.space/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:3800::/38

    Signature Algorithm: sha256WithRSAEncryption
         57:6e:28:63:97:f7:28:e7:34:de:73:8e:ce:d7:c1:dd:32:2b:
         64:1d:a4:f9:9a:67:fa:fd:5d:bd:c9:c3:da:25:41:d7:b1:85:
         21:cd:78:35:02:87:9b:d0:e8:3c:5e:11:6e:ef:c8:b5:47:37:
         91:7c:3b:39:2e:cc:b2:10:37:3e:f5:2a:39:b0:8d:90:54:d8:
         ee:f4:3a:93:f2:e2:48:14:06:94:54:0f:e2:50:e8:c0:22:0d:
         6e:43:86:75:ab:d4:67:6c:bc:29:f9:c2:b6:44:ad:fe:fb:bb:
         f3:d9:b6:4d:2a:7b:0b:19:0d:6e:02:58:35:3c:b3:4b:1a:10:
         1c:22:53:d8:85:e8:f4:cd:d8:5b:e5:2a:f9:cc:3b:e3:bd:1e:
         0e:c3:e0:a7:f0:ba:43:18:64:bd:be:85:6c:15:8a:3c:3b:09:
         7a:7b:4c:cc:3d:dd:b6:fe:d6:c6:4f:e5:e0:1e:35:71:16:72:
         1b:e3:65:c6:f7:0f:7f:76:03:b1:1a:f1:ea:8b:75:08:55:6a:
         9a:86:e3:7d:2e:e6:21:3c:1c:15:77:43:9d:22:ec:f2:3b:fb:
         71:ed:b6:fc:9a:46:ce:27:73:08:7a:e4:80:95:a2:9e:16:eb:
         81:d9:ce:5e:93:3e:58:fe:0a:c5:40:0c:ac:a8:9c:a7:44:8f:
         42:60:7f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 23:08:22 2024 by rpki-client on console-ams.rpki-client.org