Certificate

$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/0/6F08383FF15292BFB6A427602811D5E225F0853C.cer
File:                     6F08383FF15292BFB6A427602811D5E225F0853C.cer (raw, json)
Hash identifier:          6hPc/+Ayu1Ah5gvUspmA+K5eNMfZDXWJcAFFnqzjxc4=
Subject key identifier:   6F:08:38:3F:F1:52:92:BF:B6:A4:27:60:28:11:D5:E2:25:F0:85:3C
Authority key identifier: 43:FB:37:78:24:B0:48:04:8B:87:56:B6:C6:5C:59:9B:82:AE:B5:B9
Certificate issuer:       /CN=43FB377824B048048B8756B6C65C599B82AEB5B9
Certificate serial:       7B3BE2EE68B7A2AF5003B7754F4050D81EE6C098
Authority info access:    rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer
Manifest:                 rsync://repo.rpki.space/repo/pfcloud-hostarray/0/6F08383FF15292BFB6A427602811D5E225F0853C.mft
caRepository:             rsync://repo.rpki.space/repo/pfcloud-hostarray/0/
Notify URL:               https://repo.rpki.space/rrdp/notification.xml
Certificate not before:   Wed 29 May 2024 17:30:39 +0000
Certificate not after:    Wed 28 May 2025 17:35:39 +0000
Subordinate resources:    IP: 2a14:7c0:7000::/36

Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.crl
                          rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.mft
                          rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jul 2024 13:53:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:3b:e2:ee:68:b7:a2:af:50:03:b7:75:4f:40:50:d8:1e:e6:c0:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FB377824B048048B8756B6C65C599B82AEB5B9
        Validity
            Not Before: May 29 17:30:39 2024 GMT
            Not After : May 28 17:35:39 2025 GMT
        Subject: CN=6F08383FF15292BFB6A427602811D5E225F0853C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:21:d2:66:90:26:d1:8d:d8:62:68:39:6e:22:
                    06:b8:35:92:7d:1a:8e:e8:ef:b2:7a:9b:81:05:21:
                    f0:a6:4f:ef:57:c5:c9:fa:74:f9:07:ea:63:e6:82:
                    7c:fc:cf:89:d2:d2:d6:a6:f9:b8:db:54:43:f9:59:
                    9f:a4:b4:b8:a0:49:e9:7e:9d:0d:a8:55:ed:93:9c:
                    f9:11:30:b7:2d:0d:f2:92:fa:93:94:1d:09:a2:71:
                    b7:69:20:4c:54:dc:b4:3c:44:4c:15:76:a5:c8:28:
                    9c:cb:c7:69:07:7c:c1:60:63:32:0e:c5:19:ff:c7:
                    94:80:af:d5:da:c2:f2:b1:12:a2:b7:7d:cb:e1:f4:
                    ac:df:15:df:46:fb:a6:88:0a:d1:f1:45:6b:de:c7:
                    29:40:41:c3:63:a8:ed:8b:4c:d8:67:ad:88:ca:80:
                    da:8d:cb:47:73:ee:4f:f3:44:6a:ea:06:93:f5:89:
                    8c:1a:d4:0d:57:05:90:52:63:7d:46:f5:9f:9e:ce:
                    52:5a:cf:b5:4e:7e:5b:a2:94:ef:3f:0f:34:db:fc:
                    5a:f7:79:de:ac:80:28:70:9a:87:d7:0b:ef:df:cf:
                    f1:69:da:fe:d5:fe:3f:36:5b:a9:2c:ff:de:3e:80:
                    2d:7f:d7:b7:c6:1d:f0:9d:55:52:50:b8:fd:26:eb:
                    4a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6F:08:38:3F:F1:52:92:BF:B6:A4:27:60:28:11:D5:E2:25:F0:85:3C
            X509v3 Authority Key Identifier:
                keyid:43:FB:37:78:24:B0:48:04:8B:87:56:B6:C6:5C:59:9B:82:AE:B5:B9

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo.rpki.space/repo/pfcloud-hostarray/0/
                RPKI Manifest - URI:rsync://repo.rpki.space/repo/pfcloud-hostarray/0/6F08383FF15292BFB6A427602811D5E225F0853C.mft
                RPKI Notify - URI:https://repo.rpki.space/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         74:31:5d:61:68:2f:b9:46:f2:1e:65:41:0c:4d:51:46:79:1c:
         04:ea:a0:40:9e:ca:4a:aa:54:d8:b9:e1:39:75:14:6c:61:ca:
         c7:33:41:99:05:51:d4:b0:9b:49:99:89:13:a6:e6:8d:d7:4a:
         0a:58:46:c0:d3:fc:84:55:36:dd:99:72:ee:30:64:69:85:37:
         a7:00:7d:21:8a:01:b9:77:cc:25:e7:6b:14:c4:e3:57:3c:3c:
         22:f4:3c:2b:06:dd:94:4d:a3:37:2a:e7:14:f8:28:75:21:b4:
         7a:00:09:2e:40:3b:12:87:0c:79:27:2c:02:59:9e:f9:ed:da:
         06:ac:35:da:14:4b:d8:58:ea:3d:d2:fd:8b:56:34:b3:64:63:
         0c:d8:0a:32:e6:d6:a0:8b:5a:4d:e9:0f:c1:54:b7:f0:a7:94:
         4f:a7:2b:03:52:77:96:cc:e1:72:99:3a:72:3c:49:52:8a:a1:
         5d:65:07:06:27:41:3f:44:a2:75:be:4d:53:45:70:b5:3c:5b:
         fe:3c:c3:fa:39:db:50:18:1f:b1:d3:66:e8:7c:9c:c6:ac:78:
         ac:60:1b:64:c1:f2:af:5e:08:cb:87:0e:7d:70:c8:01:19:2b:
         8d:5f:ec:95:72:0e:e2:3d:8d:a6:84:8a:37:f3:72:18:07:d5:
         29:21:2e:e5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 6 19:46:40 2024 by rpki-client on console-ams.rpki-client.org