Certificate
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer
File: 43FB377824B048048B8756B6C65C599B82AEB5B9.cer (raw, json)
Hash identifier: FFRwhTenBTWmXElPe02kHDCmOh7NTxK2NGEGW3cNW20=
Subject key identifier: 43:FB:37:78:24:B0:48:04:8B:87:56:B6:C6:5C:59:9B:82:AE:B5:B9
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 02A7BBFED575901D449C8E98A5335E806F1C5277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Manifest: rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.mft
caRepository: rsync://repo.rpki.space/repo/Pfcloud/0/
Notify URL: https://repo.rpki.space/rrdp/notification.xml
Certificate not before: Wed 30 Apr 2025 20:44:32 +0000
Certificate not after: Wed 29 Apr 2026 20:49:32 +0000
Subordinate resources: IP: 2a14:7c0:7000::/36
IP: 2a14:7c2::/31
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 16:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:a7:bb:fe:d5:75:90:1d:44:9c:8e:98:a5:33:5e:80:6f:1c:52:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Apr 30 20:44:32 2025 GMT
Not After : Apr 29 20:49:32 2026 GMT
Subject: CN=43FB377824B048048B8756B6C65C599B82AEB5B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ea:d4:53:1b:eb:c6:f7:17:a2:0f:f9:9f:cc:
36:53:9f:4e:47:5b:12:7d:4f:a9:df:4e:b2:2e:96:
1e:0b:3c:92:35:35:7e:61:38:b3:3c:a3:86:96:03:
f4:9e:e6:24:99:6f:88:72:51:2c:47:37:e4:fb:aa:
3a:b4:16:bc:c3:22:08:b5:5c:0a:75:42:7c:98:25:
b2:14:76:0e:fe:bf:80:a5:06:d9:f8:81:62:e6:9c:
2f:35:d3:89:2f:c5:b0:5d:87:cc:7e:bf:66:be:b9:
97:7c:51:6b:b5:f8:89:75:3d:e0:ff:41:dc:b5:fc:
f5:d9:bc:00:76:27:b2:be:4b:c5:7f:36:12:d7:6b:
11:8d:81:a4:1e:d9:e3:52:d1:b8:c6:74:50:51:bb:
ad:bd:41:64:73:1c:cc:b4:dc:5e:60:c0:8d:2f:4a:
c4:e6:88:91:0d:32:68:c8:20:75:d1:f7:6f:c8:bf:
2d:2f:3d:c7:2d:63:b8:d8:2f:04:9d:9d:b7:9b:ac:
ae:75:ec:09:cd:c0:41:e5:3a:de:47:78:93:35:32:
99:53:67:88:1b:61:b5:7f:7c:18:0e:31:c0:79:03:
86:6d:d9:d5:6a:b4:8e:32:b2:68:5b:e7:16:65:3f:
3c:55:e5:ed:41:ef:7e:0f:c5:14:91:0f:08:78:fd:
96:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
43:FB:37:78:24:B0:48:04:8B:87:56:B6:C6:5C:59:9B:82:AE:B5:B9
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
CA Repository - URI:rsync://repo.rpki.space/repo/Pfcloud/0/
RPKI Manifest - URI:rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.mft
RPKI Notify - URI:https://repo.rpki.space/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:7000::/36
2a14:7c2::/31
Signature Algorithm: sha256WithRSAEncryption
9a:ea:1e:c2:5e:eb:13:14:9b:6a:cb:b1:a6:05:e6:3d:a0:1d:
e9:8b:7f:2c:5c:b1:08:1f:1c:ca:88:32:91:f1:13:a8:84:45:
ac:35:d4:a2:06:20:6f:61:61:41:63:2f:04:2a:84:08:f8:65:
cf:a3:b9:8d:73:c5:f6:78:8e:3f:34:cc:d8:d2:fc:1d:01:83:
2a:7a:9e:f7:a4:c0:54:7c:42:65:d3:44:75:24:d1:ca:bf:26:
e8:61:a1:fa:61:bc:11:f9:b4:93:3d:f8:de:71:41:d1:df:32:
ed:aa:87:12:42:85:b7:e9:33:8f:b8:b6:59:e8:7d:4b:1e:63:
5d:53:54:51:3d:9e:5b:98:7d:93:1a:2b:49:1f:c6:72:e2:96:
ef:e9:a1:04:90:d1:d4:f1:af:76:7b:26:6a:f3:f3:3f:bb:af:
71:63:ba:9a:63:8d:96:94:f5:e1:8e:13:d5:6d:11:b4:32:3f:
40:51:82:3b:b6:88:07:3f:af:3c:d2:65:fa:cd:dc:05:94:de:
a2:7b:4a:d8:fa:12:b1:f5:c8:68:69:af:18:16:f9:77:51:67:
77:a5:c7:58:9e:18:64:7f:0a:4c:bc:d6:d2:fa:36:e9:74:62:
bb:a0:6c:23:50:4a:bb:f3:e8:2c:c3:6f:f4:9b:20:4f:16:88:
7e:96:9b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 02:18:44 2025 by rpki-client