Certificate

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.cer
File:                     DCBE045BEA897D29CB12799DC38EF74D039B28EE.cer (raw, json)
Hash identifier:          SYoaXhzPz0xgAibJPxxGO+9vst5kX2rsjkHf0u+ZpHQ=
Subject key identifier:   DC:BE:04:5B:EA:89:7D:29:CB:12:79:9D:C3:8E:F7:4D:03:9B:28:EE
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Certificate issuer:       /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial:       0237D06864E31E5B63CD9288FC6DA84F5A793079
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Manifest:                 rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.mft
caRepository:             rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/
Notify URL:               https://repo.rpki.space/rrdp/notification.xml
Certificate not before:   Thu 30 May 2024 21:05:19 +0000
Certificate not after:    Thu 29 May 2025 21:10:19 +0000
Subordinate resources:    IP: 2a14:7c0:400:: -- 2a14:7c0:fff:ffff:ffff:ffff:ffff:ffff
                          IP: 2a14:7c0:3400::/38
                          IP: 2a14:7c1::/32
                          IP: 2a14:7c6::/32

Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:37:d0:68:64:e3:1e:5b:63:cd:92:88:fc:6d:a8:4f:5a:79:30:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
        Validity
            Not Before: May 30 21:05:19 2024 GMT
            Not After : May 29 21:10:19 2025 GMT
        Subject: CN=DCBE045BEA897D29CB12799DC38EF74D039B28EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c5:4d:fd:20:02:4c:0a:7f:78:cf:e6:24:15:
                    05:49:45:1e:62:58:23:95:a2:a1:01:03:03:00:52:
                    ea:f7:26:20:14:ab:38:99:e8:fd:e8:1e:30:8b:4c:
                    5f:6e:73:8d:9f:93:8b:db:a5:18:dc:b4:c3:93:9e:
                    bc:af:b7:5d:d8:e0:fe:8c:0d:20:d1:de:83:4c:db:
                    4d:61:8b:4e:f4:42:4f:46:21:07:d8:84:d6:a7:88:
                    8b:9b:fa:91:26:29:09:3d:fa:d0:d1:26:f2:36:25:
                    dd:e9:1a:90:41:f4:a8:ee:54:81:3e:2c:ec:29:c8:
                    09:01:87:29:33:14:6b:47:3b:84:ae:1e:d6:ce:b8:
                    18:06:2e:f8:b4:3b:28:3f:fd:65:2c:07:91:45:63:
                    70:fd:a4:b4:b1:49:56:67:47:b5:c8:70:5a:bb:2b:
                    31:5e:73:ed:94:d6:21:d7:ea:0d:d0:4c:4c:44:5b:
                    af:88:1f:75:9d:7a:45:69:44:71:6d:ce:54:98:1e:
                    6d:cf:4b:b3:49:0a:df:e3:37:f2:a3:29:53:0e:d6:
                    5a:1d:fe:bc:c7:99:bc:de:85:1e:1e:d5:f2:69:37:
                    59:a7:fc:c5:76:66:87:fa:ae:6c:ea:68:77:a7:70:
                    33:1f:f0:02:8a:05:7b:79:74:06:51:a8:be:e2:91:
                    d0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:BE:04:5B:EA:89:7D:29:CB:12:79:9D:C3:8E:F7:4D:03:9B:28:EE
            X509v3 Authority Key Identifier:
                keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/
                RPKI Manifest - URI:rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.mft
                RPKI Notify - URI:https://repo.rpki.space/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:400::-2a14:7c0:fff:ffff:ffff:ffff:ffff:ffff
                  2a14:7c0:3400::/38
                  2a14:7c1::/32
                  2a14:7c6::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:6f:8e:2a:aa:10:4d:36:9c:b1:7a:38:61:ad:60:36:05:b0:
         24:51:47:be:ec:db:84:ad:a2:de:35:53:f0:e2:af:b6:e5:e7:
         41:59:aa:df:18:d5:0a:3f:c0:e8:84:9e:12:c7:6e:c1:ed:be:
         f5:cd:7e:a5:45:e4:f2:79:8c:71:a3:77:4f:9d:ec:a2:76:ea:
         79:a7:10:9a:d8:9e:b8:b4:58:19:74:ec:b7:d6:75:11:2c:f9:
         21:41:c8:7f:6c:20:ce:07:78:cd:c0:6a:b6:c1:78:f3:4b:2c:
         94:4b:c7:3a:df:e5:6b:26:50:98:15:e3:2c:a2:04:41:49:97:
         1a:3e:90:ce:0f:2f:02:50:32:db:03:b8:8a:f1:b6:2b:3c:c7:
         b7:b1:73:a5:95:cc:80:63:85:72:aa:47:b2:18:a3:56:c3:03:
         56:90:f2:39:4a:bb:32:27:4a:f7:8d:f5:17:40:0b:2f:a1:31:
         d0:6c:33:59:57:c3:16:e9:aa:1f:75:1f:87:82:ea:29:47:34:
         89:b3:90:25:4a:bc:e2:a1:f2:bc:3e:9e:12:d7:c0:de:8c:2d:
         ef:82:80:d6:66:45:bc:d8:7b:6a:a8:7b:8d:a2:2a:e5:00:33:
         05:e0:f6:67:9e:af:a4:fd:55:32:6d:75:f0:b8:c7:b6:56:3d:
         b5:49:43:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 13:13:46 2024 by rpki-client on console-fra.rpki-client.org