Certificate

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/6B275D9A123F3D56012C5A067E2BA2B5FE34FAA1.cer
File:                     6B275D9A123F3D56012C5A067E2BA2B5FE34FAA1.cer (raw, json)
Hash identifier:          nv8B+uQlP5WLzc2VjxCZ9YKqp9+tGolG5j+b1Z0NcEY=
Subject key identifier:   6B:27:5D:9A:12:3F:3D:56:01:2C:5A:06:7E:2B:A2:B5:FE:34:FA:A1
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Certificate issuer:       /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial:       37A113CFCA72D56A3520F6E1835E1D218821B15B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Manifest:                 rsync://repo.rpki.space/repo/infiniroute-ratatoskr/0/6B275D9A123F3D56012C5A067E2BA2B5FE34FAA1.mft
caRepository:             rsync://repo.rpki.space/repo/infiniroute-ratatoskr/0/
Notify URL:               https://repo.rpki.space/rrdp/notification.xml
Certificate not before:   Mon 24 Jun 2024 17:43:53 +0000
Certificate not after:    Mon 23 Jun 2025 17:48:53 +0000
Subordinate resources:    IP: 2a14:7c0:5300::/40

Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a1:13:cf:ca:72:d5:6a:35:20:f6:e1:83:5e:1d:21:88:21:b1:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
        Validity
            Not Before: Jun 24 17:43:53 2024 GMT
            Not After : Jun 23 17:48:53 2025 GMT
        Subject: CN=6B275D9A123F3D56012C5A067E2BA2B5FE34FAA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:83:c4:03:74:80:e0:41:1f:b5:44:fb:84:1a:
                    21:d4:00:ed:a3:e3:95:9b:71:b8:f6:6c:fa:7e:71:
                    22:66:8d:5c:8d:70:d3:1a:8c:cb:11:fc:c9:51:5d:
                    57:f7:07:cf:68:4b:f6:92:96:bf:94:68:8b:1f:b7:
                    4d:bb:9d:e7:89:8f:f3:d4:75:18:db:3c:c8:4b:16:
                    f6:4d:a5:fa:17:89:a1:31:78:2a:4b:8c:1d:0b:a7:
                    64:50:c3:0b:ce:8d:75:f4:68:97:93:79:6a:b2:0c:
                    30:02:9f:71:d2:d7:78:9f:27:c7:4c:bf:e6:52:6b:
                    da:21:f7:91:a2:3f:4e:27:0d:ec:34:18:06:37:b2:
                    ca:bc:1d:a9:74:6f:48:21:0d:05:c8:46:3d:15:76:
                    29:12:b2:51:a8:86:07:f7:f5:e1:1a:0e:91:8f:33:
                    75:44:be:72:a1:e7:19:e2:05:30:ac:a1:2f:72:93:
                    6e:ab:db:ee:43:d1:76:af:29:65:b0:f2:03:b8:43:
                    82:2f:1d:29:5e:27:ab:d7:86:a8:f5:64:27:d7:8a:
                    68:0a:bb:57:13:82:2f:bf:2c:c2:cf:91:4f:28:70:
                    36:d0:97:6b:dd:20:05:9d:82:bc:7b:b6:8f:41:10:
                    da:cb:3d:9e:5e:f4:64:e5:1f:11:6f:4d:67:26:0b:
                    82:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6B:27:5D:9A:12:3F:3D:56:01:2C:5A:06:7E:2B:A2:B5:FE:34:FA:A1
            X509v3 Authority Key Identifier:
                keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo.rpki.space/repo/infiniroute-ratatoskr/0/
                RPKI Manifest - URI:rsync://repo.rpki.space/repo/infiniroute-ratatoskr/0/6B275D9A123F3D56012C5A067E2BA2B5FE34FAA1.mft
                RPKI Notify - URI:https://repo.rpki.space/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:5300::/40

    Signature Algorithm: sha256WithRSAEncryption
         22:66:30:c4:42:38:28:b7:64:2b:06:b7:d7:2a:e1:a6:9f:dc:
         bb:8a:80:e9:b8:e0:6e:da:e3:36:8b:93:43:ab:73:49:dd:d9:
         7f:6d:30:55:f5:d7:9e:62:7d:a4:cd:a5:f6:26:a0:5e:a0:74:
         93:5f:33:2d:c6:a4:d2:bf:84:0c:bd:11:11:a9:9d:46:ce:e0:
         b2:bd:50:d4:14:93:15:b8:a3:18:b6:2e:8f:ca:eb:cb:34:98:
         bf:44:ef:a7:bb:da:c5:a6:0b:73:ca:6b:39:6d:8b:57:15:9d:
         dd:37:68:b4:18:73:97:ed:3c:4d:45:e7:48:b8:4f:ce:f0:a9:
         08:6e:23:c2:98:e5:05:1e:dd:97:61:ae:97:64:49:9c:c7:19:
         d5:be:51:a3:c7:59:4b:3f:71:56:f4:57:74:dd:59:c3:6d:84:
         b0:f0:da:92:c7:56:b6:a7:57:26:92:f2:1a:bc:2a:be:93:60:
         fc:15:17:06:ad:19:f4:27:60:72:e9:96:31:b8:94:32:e3:49:
         4c:6f:b8:6a:28:b6:2b:e5:d8:1e:ea:f0:bb:af:67:ce:5a:88:
         4b:43:ee:59:42:22:0a:32:af:16:e1:c2:f0:57:d7:e0:7d:6b:
         2d:6f:ab:01:57:22:66:4c:e3:2a:3b:fb:56:24:99:3a:9b:20:
         29:a6:2b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:25 2024 by rpki-client on console-ams.rpki-client.org