Certificate
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/2DC6464BC863F4B338647A68C390021651EE36B3.cer
File: 2DC6464BC863F4B338647A68C390021651EE36B3.cer (raw, json)
Hash identifier: 01hUA1aj79FkpSWzRYqqPJBPHaGmgMluP6gV5SKandk=
Subject key identifier: 2D:C6:46:4B:C8:63:F4:B3:38:64:7A:68:C3:90:02:16:51:EE:36:B3
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 7B6E3D724F875D8E31A9480C1023B3D3353C0EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Manifest: rsync://repo.rpki.space/repo/infiniroute-nerdscave/0/2DC6464BC863F4B338647A68C390021651EE36B3.mft
caRepository: rsync://repo.rpki.space/repo/infiniroute-nerdscave/0/
Notify URL: https://repo.rpki.space/rrdp/notification.xml
Certificate not before: Wed 30 Apr 2025 14:40:24 +0000
Certificate not after: Wed 29 Apr 2026 14:45:24 +0000
Subordinate resources: IP: 2a14:7c4::/32
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 03:53:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:6e:3d:72:4f:87:5d:8e:31:a9:48:0c:10:23:b3:d3:35:3c:0e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Apr 30 14:40:24 2025 GMT
Not After : Apr 29 14:45:24 2026 GMT
Subject: CN=2DC6464BC863F4B338647A68C390021651EE36B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:6f:ac:80:b2:ec:5c:38:e2:d0:41:b0:b2:
bb:af:46:67:ed:fc:f4:65:9a:e0:a7:dd:9c:fa:4a:
bf:36:1e:9c:97:65:5c:d7:09:24:fd:e3:e3:59:d9:
f4:ff:41:2f:80:d3:9d:57:0c:1a:24:8a:4f:f6:c1:
58:bd:b9:27:ab:71:1b:b1:5c:46:34:bf:f4:07:54:
93:ec:8b:0b:8a:d1:d1:fb:e6:ed:ac:cc:28:fe:55:
7c:63:9e:83:6c:74:11:01:d1:d5:49:51:87:40:23:
0f:34:c0:2c:a0:a8:f4:14:65:af:f2:73:21:85:d9:
bc:fd:1b:c2:50:7a:7f:07:72:99:2a:f6:22:21:dc:
a8:0e:fb:10:d9:b6:09:aa:3d:3b:fb:25:a5:50:a2:
24:7a:25:90:71:8c:f2:87:30:ee:dd:9d:e9:d2:20:
7c:3e:64:3f:4d:e4:ea:93:eb:ac:6d:73:06:ff:ab:
b6:7c:af:f4:6b:31:34:d0:a8:43:d2:9a:7e:74:4b:
c1:a0:02:ac:ad:9d:09:55:cc:f4:67:3c:7f:32:c7:
25:08:45:a4:dc:6c:a6:c5:5e:bb:c8:15:c5:de:6f:
6c:1b:30:64:3e:fc:14:7b:c0:7d:40:d4:d2:57:b0:
f2:d5:35:0c:b3:a1:15:19:42:cb:e2:24:28:62:27:
50:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2D:C6:46:4B:C8:63:F4:B3:38:64:7A:68:C3:90:02:16:51:EE:36:B3
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
CA Repository - URI:rsync://repo.rpki.space/repo/infiniroute-nerdscave/0/
RPKI Manifest - URI:rsync://repo.rpki.space/repo/infiniroute-nerdscave/0/2DC6464BC863F4B338647A68C390021651EE36B3.mft
RPKI Notify - URI:https://repo.rpki.space/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c4::/32
Signature Algorithm: sha256WithRSAEncryption
4a:16:18:9c:ef:76:b0:64:c6:ef:b1:a4:9f:ab:6c:42:9a:01:
4e:f1:61:02:b0:5a:07:e5:fc:72:53:7a:db:c2:a8:2b:93:9e:
b9:67:eb:34:71:19:05:fb:94:11:fb:7d:0e:7d:0d:5a:e4:00:
38:42:4a:f0:60:49:d0:8f:4a:fa:16:3b:0e:a8:51:c3:3f:fd:
4f:a1:02:d6:0f:6f:61:ae:a9:4e:47:fb:8f:e2:12:be:e9:d0:
a9:5a:50:4a:e5:c8:07:c9:07:4d:86:c0:d4:2a:78:98:ee:4a:
f5:16:92:bb:44:7f:e7:79:3c:8b:56:27:c3:c1:af:1c:f3:68:
2e:1f:83:f7:2a:0d:c8:5d:b3:f2:94:0d:96:86:cb:3e:98:35:
f3:f1:88:88:c0:ce:c2:30:31:1f:e7:7e:e9:fe:fb:b6:06:ae:
2f:86:23:84:58:45:f2:8f:71:ad:be:c0:ef:da:fb:5a:90:0f:
54:e3:60:0a:36:d0:9a:2a:a1:bf:23:ba:77:e1:bd:d0:de:df:
79:5e:86:9c:31:be:fb:86:c7:40:f3:11:ff:0d:c5:55:3e:c6:
c3:e0:ef:cb:39:d6:6b:35:fc:fb:9f:20:0f:37:99:96:a8:bc:
37:71:db:b9:c8:d5:ef:8a:ed:5f:3c:37:a9:c9:62:b7:f9:c3:
64:4d:f0:f0
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIUe249ck+HXY4xqUgMECOz0zU8DrQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWI4ZTIxYzY4OTBiZDc5YWI3NjRkOTFiNjBjMzljM2I3
ZTQ5ODVlMTAeFw0yNTA0MzAxNDQwMjRaFw0yNjA0MjkxNDQ1MjRaMDMxMTAvBgNV
BAMTKDJEQzY0NjRCQzg2M0Y0QjMzODY0N0E2OEMzOTAwMjE2NTFFRTM2QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyVW+sgLLsXDji0EGwsruvRmft
/PRlmuCn3Zz6Sr82HpyXZVzXCST94+NZ2fT/QS+A051XDBokik/2wVi9uSercRux
XEY0v/QHVJPsiwuK0dH75u2szCj+VXxjnoNsdBEB0dVJUYdAIw80wCygqPQUZa/y
cyGF2bz9G8JQen8Hcpkq9iIh3KgO+xDZtgmqPTv7JaVQoiR6JZBxjPKHMO7dnenS
IHw+ZD9N5OqT66xtcwb/q7Z8r/RrMTTQqEPSmn50S8GgAqytnQlVzPRnPH8yxyUI
RaTcbKbFXrvIFcXeb2wbMGQ+/BR7wH1A1NJXsPLVNQyzoRUZQsviJChiJ1AzAgMB
AAGjggJxMIICbTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQtxkZLyGP0szhk
emjDkAIWUe42szAfBgNVHSMEGDAWgBRbjiHGiQvXmrdk2Rtgw5w7fkmF4TAOBgNV
HQ8BAf8EBAMCAQYwaAYDVR0fBGEwXzBdoFugWYZXcnN5bmM6Ly9yZXBvLnJwa2ku
c3BhY2UvcmVwby9JbmZpbmlyb3V0ZS8xLzVCOEUyMUM2ODkwQkQ3OUFCNzY0RDkx
QjYwQzM5QzNCN0U0OTg1RTEuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcw
AoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9XNDRo
eG9rTDE1cTNaTmtiWU1PY08zNUpoZUUuY2VyMIH9BggrBgEFBQcBCwSB8DCB7TBB
BggrBgEFBQcwBYY1cnN5bmM6Ly9yZXBvLnJwa2kuc3BhY2UvcmVwby9pbmZpbmly
b3V0ZS1uZXJkc2NhdmUvMC8wbQYIKwYBBQUHMAqGYXJzeW5jOi8vcmVwby5ycGtp
LnNwYWNlL3JlcG8vaW5maW5pcm91dGUtbmVyZHNjYXZlLzAvMkRDNjQ2NEJDODYz
RjRCMzM4NjQ3QTY4QzM5MDAyMTY1MUVFMzZCMy5tZnQwOQYIKwYBBQUHMA2GLWh0
dHBzOi8vcmVwby5ycGtpLnNwYWNlL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH
AwUAKhQHxDANBgkqhkiG9w0BAQsFAAOCAQEAShYYnO92sGTG77Gkn6tsQpoBTvFh
ArBaB+X8clN628KoK5OeuWfrNHEZBfuUEft9Dn0NWuQAOEJK8GBJ0I9K+hY7DqhR
wz/9T6EC1g9vYa6pTkf7j+ISvunQqVpQSuXIB8kHTYbA1Cp4mO5K9RaSu0R/53k8
i1Ynw8GvHPNoLh+D9yoNyF2z8pQNlobLPpg18/GIiMDOwjAxH+d+6f77tgauL4Yj
hFhF8o9xrb7A79r7WpAPVONgCjbQmiqhvyO6d+G90N7feV6GnDG++4bHQPMR/w3F
VT7Gw+DvyznWazX8+58gDzeZlqi8N3HbucjV74rtXzw3qclit/nDZE3w8A==
-----END CERTIFICATE-----
Generated at Wed May 7 19:25:48 2025 by rpki-client