Certificate
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
File: CABF373EADCD9376E524CE313AB868C03EEB1088.cer (raw, json)
Hash identifier: 2fHBIDhKZiMHvmogp9JZoMgl2SsnyvzrzSTqkLCsjXE=
Subject key identifier: CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 06DDF24E9276E7EA779DF0BB2A90DFF70E72FC63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Manifest: rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
caRepository: rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/
Notify URL: https://repo.rpki.space/rrdp/notification.xml
Certificate not before: Sun 17 May 2026 20:15:24 +0000
Certificate not after: Sun 16 May 2027 20:20:24 +0000
Subordinate resources: IP: 2a14:7c0:1000::/38
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:38:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:dd:f2:4e:92:76:e7:ea:77:9d:f0:bb:2a:90:df:f7:0e:72:fc:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: May 17 20:15:24 2026 GMT
Not After : May 16 20:20:24 2027 GMT
Subject: CN=CABF373EADCD9376E524CE313AB868C03EEB1088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4f:fe:3c:cb:fb:94:7f:40:65:b9:84:48:e4:
10:f9:e6:f6:d5:86:3c:c1:80:db:d0:07:f1:12:e5:
e7:a5:34:9e:11:1b:6e:40:0d:c8:b6:0d:b0:fd:85:
8c:4f:6c:41:64:e2:45:a9:79:12:83:d6:ec:38:d8:
77:1f:5c:5b:0f:a6:1c:2c:20:21:e2:a5:00:b0:5b:
5e:66:12:08:34:d8:d0:22:ff:7a:2d:8a:a1:a2:f9:
f3:ca:54:a0:44:3b:d5:70:9c:e2:40:a4:85:1d:86:
64:b6:52:2a:72:05:36:fc:05:9a:84:ca:19:fc:5d:
dd:7a:62:22:29:9e:de:61:d8:c9:c3:ad:43:e6:30:
4b:7f:05:67:b2:fd:1c:01:15:b4:8e:b9:0f:c2:a1:
81:bc:10:01:ec:26:3c:61:7a:10:ff:50:10:af:db:
63:00:8d:04:f6:f4:46:af:bb:f2:be:86:f8:53:4a:
5e:66:a9:44:b8:b5:7a:09:6c:cb:bb:60:54:29:9d:
f8:97:e4:8f:97:51:2f:1b:43:7d:e5:5c:fb:12:3a:
b4:4d:b0:a8:64:67:2a:e8:2c:fa:e4:56:fe:3b:88:
a1:20:31:d3:b8:4f:26:80:48:f3:b3:1a:b5:4f:6c:
33:89:3e:df:29:e9:a9:72:7b:63:9f:06:08:81:ee:
38:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
CA Repository - URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/
RPKI Manifest - URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
RPKI Notify - URI:https://repo.rpki.space/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:1000::/38
Signature Algorithm: sha256WithRSAEncryption
07:ea:59:5b:cd:35:90:b9:0b:95:16:f3:9c:19:a8:9e:bd:15:
69:a8:9a:d9:96:9b:4a:9d:ce:98:f0:64:c0:5b:78:ab:db:f3:
99:69:36:2e:12:71:c7:88:28:86:fb:86:a8:b7:13:81:29:b8:
96:39:97:0b:58:b2:4e:32:ac:82:96:b8:3d:0f:58:27:55:c4:
9f:26:a1:9e:83:2e:1f:8a:48:ff:7d:b7:76:b2:04:da:fe:af:
6c:6f:1b:7d:4c:1b:d1:92:69:5a:be:68:5f:fa:95:7e:b9:03:
2d:12:84:00:70:df:da:a7:22:0b:22:1d:56:5c:d1:8f:74:17:
63:98:31:b8:19:f0:51:63:28:25:f9:00:2d:4b:7e:d5:26:56:
40:3f:05:0f:63:98:76:2b:d3:66:02:58:ed:7c:00:9e:5c:dd:
43:bd:e4:9d:ba:82:1c:48:7b:10:93:55:66:8e:7f:b2:c4:14:
0f:92:98:eb:bd:df:cb:68:a9:d1:54:cc:48:3a:d2:37:e0:80:
c8:0b:cd:a7:5a:3d:15:d0:12:bc:d2:5f:ba:3a:eb:70:16:c3:
e5:2b:1e:d3:55:e2:8e:b8:1c:05:d5:20:e8:36:ad:a8:a2:a5:
2f:5e:04:a9:85:9c:5e:a0:b0:80:d4:8a:7c:07:9a:97:44:b9:
18:7d:37:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:04:47 2026 by rpki-client