Certificate

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
File:                     CABF373EADCD9376E524CE313AB868C03EEB1088.cer (raw, json)
Hash identifier:          o8J6ziclQWCHFG6jxisH2JrcpIov64Kv5HQvsiZo+P8=
Subject key identifier:   CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Certificate issuer:       /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial:       1678BDF14DF8953EFB4406A5787EA2BF1B4774AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Manifest:                 rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
caRepository:             rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/
Notify URL:               https://repo.rpki.space/rrdp/notification.xml
Certificate not before:   Sat 13 Jul 2024 19:04:27 +0000
Certificate not after:    Sat 12 Jul 2025 19:09:27 +0000
Subordinate resources:    IP: 2a14:7c0:1000::/38

Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 06:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:78:bd:f1:4d:f8:95:3e:fb:44:06:a5:78:7e:a2:bf:1b:47:74:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
        Validity
            Not Before: Jul 13 19:04:27 2024 GMT
            Not After : Jul 12 19:09:27 2025 GMT
        Subject: CN=CABF373EADCD9376E524CE313AB868C03EEB1088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4f:fe:3c:cb:fb:94:7f:40:65:b9:84:48:e4:
                    10:f9:e6:f6:d5:86:3c:c1:80:db:d0:07:f1:12:e5:
                    e7:a5:34:9e:11:1b:6e:40:0d:c8:b6:0d:b0:fd:85:
                    8c:4f:6c:41:64:e2:45:a9:79:12:83:d6:ec:38:d8:
                    77:1f:5c:5b:0f:a6:1c:2c:20:21:e2:a5:00:b0:5b:
                    5e:66:12:08:34:d8:d0:22:ff:7a:2d:8a:a1:a2:f9:
                    f3:ca:54:a0:44:3b:d5:70:9c:e2:40:a4:85:1d:86:
                    64:b6:52:2a:72:05:36:fc:05:9a:84:ca:19:fc:5d:
                    dd:7a:62:22:29:9e:de:61:d8:c9:c3:ad:43:e6:30:
                    4b:7f:05:67:b2:fd:1c:01:15:b4:8e:b9:0f:c2:a1:
                    81:bc:10:01:ec:26:3c:61:7a:10:ff:50:10:af:db:
                    63:00:8d:04:f6:f4:46:af:bb:f2:be:86:f8:53:4a:
                    5e:66:a9:44:b8:b5:7a:09:6c:cb:bb:60:54:29:9d:
                    f8:97:e4:8f:97:51:2f:1b:43:7d:e5:5c:fb:12:3a:
                    b4:4d:b0:a8:64:67:2a:e8:2c:fa:e4:56:fe:3b:88:
                    a1:20:31:d3:b8:4f:26:80:48:f3:b3:1a:b5:4f:6c:
                    33:89:3e:df:29:e9:a9:72:7b:63:9f:06:08:81:ee:
                    38:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88
            X509v3 Authority Key Identifier:
                keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/
                RPKI Manifest - URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
                RPKI Notify - URI:https://repo.rpki.space/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:1000::/38

    Signature Algorithm: sha256WithRSAEncryption
         6b:7a:30:4b:87:14:c2:f4:1a:1c:17:a9:24:7a:37:5d:c4:c1:
         8a:b4:fa:8b:2a:78:78:68:54:82:42:ec:8c:dd:da:e7:d7:29:
         74:76:74:7f:d2:29:e6:bb:93:11:ac:8d:ce:10:3d:83:c6:90:
         5d:73:ed:5c:26:60:f8:7a:3d:20:1c:58:9c:17:c4:4d:58:50:
         dc:cb:6b:76:8a:98:c3:44:32:cf:e7:c8:31:bb:5a:27:78:1f:
         76:52:21:2c:da:8a:10:fa:93:0e:06:e1:0e:df:a7:69:a3:ae:
         d4:fa:a3:fb:ca:be:db:93:61:aa:6f:4b:e8:f1:21:e2:80:ce:
         ab:ad:ed:a0:4a:cb:e5:52:de:73:d8:34:42:10:10:f6:74:39:
         65:8e:46:30:3e:6e:61:47:5d:35:91:cf:d3:ab:61:25:cb:91:
         b7:05:6a:14:67:0e:14:b3:3d:c8:f9:38:e2:5a:eb:05:4b:2a:
         8d:e2:22:a8:4a:c7:ce:a8:88:08:0b:91:91:39:69:d0:d5:21:
         8e:92:ea:32:78:ec:0e:cf:cf:61:74:e2:87:65:3a:ad:2e:53:
         dc:62:13:45:3e:7f:8f:78:52:6e:7f:6d:1b:9b:8b:76:14:a9:
         60:5e:c0:0d:6e:e9:ba:b7:8f:a1:91:f9:63:4a:ec:69:c2:b8:
         18:48:71:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:23 2024 by rpki-client on console-ams.rpki-client.org