Certificate
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
File: CABF373EADCD9376E524CE313AB868C03EEB1088.cer (raw, json)
Hash identifier: YFtcDOTknVIKqDWZYc67UPV/cDkVzrwmzarbh/F5ybU=
Subject key identifier: CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 16F0D3540EFF7DD021EC9CCE01B1B3D501CAEF5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Manifest: rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
caRepository: rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/
Notify URL: https://repo.rpki.space/rrdp/notification.xml
Certificate not before: Sun 15 Jun 2025 03:00:42 +0000
Certificate not after: Sun 14 Jun 2026 03:05:42 +0000
Subordinate resources: IP: 2a14:7c0:1000::/38
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:f0:d3:54:0e:ff:7d:d0:21:ec:9c:ce:01:b1:b3:d5:01:ca:ef:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Jun 15 03:00:42 2025 GMT
Not After : Jun 14 03:05:42 2026 GMT
Subject: CN=CABF373EADCD9376E524CE313AB868C03EEB1088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4f:fe:3c:cb:fb:94:7f:40:65:b9:84:48:e4:
10:f9:e6:f6:d5:86:3c:c1:80:db:d0:07:f1:12:e5:
e7:a5:34:9e:11:1b:6e:40:0d:c8:b6:0d:b0:fd:85:
8c:4f:6c:41:64:e2:45:a9:79:12:83:d6:ec:38:d8:
77:1f:5c:5b:0f:a6:1c:2c:20:21:e2:a5:00:b0:5b:
5e:66:12:08:34:d8:d0:22:ff:7a:2d:8a:a1:a2:f9:
f3:ca:54:a0:44:3b:d5:70:9c:e2:40:a4:85:1d:86:
64:b6:52:2a:72:05:36:fc:05:9a:84:ca:19:fc:5d:
dd:7a:62:22:29:9e:de:61:d8:c9:c3:ad:43:e6:30:
4b:7f:05:67:b2:fd:1c:01:15:b4:8e:b9:0f:c2:a1:
81:bc:10:01:ec:26:3c:61:7a:10:ff:50:10:af:db:
63:00:8d:04:f6:f4:46:af:bb:f2:be:86:f8:53:4a:
5e:66:a9:44:b8:b5:7a:09:6c:cb:bb:60:54:29:9d:
f8:97:e4:8f:97:51:2f:1b:43:7d:e5:5c:fb:12:3a:
b4:4d:b0:a8:64:67:2a:e8:2c:fa:e4:56:fe:3b:88:
a1:20:31:d3:b8:4f:26:80:48:f3:b3:1a:b5:4f:6c:
33:89:3e:df:29:e9:a9:72:7b:63:9f:06:08:81:ee:
38:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
CA Repository - URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/
RPKI Manifest - URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
RPKI Notify - URI:https://repo.rpki.space/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:1000::/38
Signature Algorithm: sha256WithRSAEncryption
04:49:f7:22:bb:ed:26:6c:1e:a0:f5:93:45:5d:3f:df:9e:63:
98:76:20:81:f0:e8:5a:bd:54:17:3b:8d:ab:7c:95:10:b8:70:
66:d1:26:8f:ea:86:4b:20:33:4d:e0:2c:0f:ed:21:a6:d2:5f:
a0:6b:95:89:63:7e:f9:cd:64:b3:a8:09:b4:79:b0:4f:a0:fa:
ed:7d:d5:15:7c:86:ac:ac:2b:f3:c7:d1:06:3a:fd:54:a3:09:
f0:c0:61:44:4c:a4:7d:f4:ca:ea:dd:09:a4:1b:25:fd:27:03:
c1:4a:43:bc:73:4a:9d:f9:17:c5:98:b9:87:1b:08:e6:3f:e3:
00:f3:c4:8c:7d:e2:27:fc:94:ab:39:33:ee:ce:40:0d:ac:0d:
45:86:02:16:7b:5a:ea:de:3e:01:27:6d:c4:e3:0a:f1:2e:dc:
1a:01:dd:05:d1:75:93:43:0c:23:07:df:0d:f6:f3:f6:5e:25:
2b:d8:a7:61:60:43:9a:3c:66:86:86:af:23:d8:9c:a6:04:54:
b4:02:e3:a1:0d:cd:3c:f2:96:f5:d3:22:6a:4c:21:1d:14:a3:
37:dd:10:f5:66:94:54:f5:2c:1d:fd:f6:67:88:61:27:92:47:
bf:9c:5d:44:9d:a3:9c:a1:8d:54:5c:f1:74:51:fe:27:2f:e3:
74:46:a5:48
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUFvDTVA7/fdAh7JzOAbGz1QHK710wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWI4ZTIxYzY4OTBiZDc5YWI3NjRkOTFiNjBjMzljM2I3
ZTQ5ODVlMTAeFw0yNTA2MTUwMzAwNDJaFw0yNjA2MTQwMzA1NDJaMDMxMTAvBgNV
BAMTKENBQkYzNzNFQURDRDkzNzZFNTI0Q0UzMTNBQjg2OEMwM0VFQjEwODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkT/48y/uUf0BluYRI5BD55vbV
hjzBgNvQB/ES5eelNJ4RG25ADci2DbD9hYxPbEFk4kWpeRKD1uw42HcfXFsPphws
ICHipQCwW15mEgg02NAi/3otiqGi+fPKVKBEO9VwnOJApIUdhmS2UipyBTb8BZqE
yhn8Xd16YiIpnt5h2MnDrUPmMEt/BWey/RwBFbSOuQ/CoYG8EAHsJjxhehD/UBCv
22MAjQT29Eavu/K+hvhTSl5mqUS4tXoJbMu7YFQpnfiX5I+XUS8bQ33lXPsSOrRN
sKhkZyroLPrkVv47iKEgMdO4TyaASPOzGrVPbDOJPt8p6alye2OfBgiB7jg7AgMB
AAGjggJoMIICZDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTKvzc+rc2TduUk
zjE6uGjAPusQiDAfBgNVHSMEGDAWgBRbjiHGiQvXmrdk2Rtgw5w7fkmF4TAOBgNV
HQ8BAf8EBAMCAQYwaAYDVR0fBGEwXzBdoFugWYZXcnN5bmM6Ly9yZXBvLnJwa2ku
c3BhY2UvcmVwby9JbmZpbmlyb3V0ZS8xLzVCOEUyMUM2ODkwQkQ3OUFCNzY0RDkx
QjYwQzM5QzNCN0U0OTg1RTEuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcw
AoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9XNDRo
eG9rTDE1cTNaTmtiWU1PY08zNUpoZUUuY2VyMIHzBggrBgEFBQcBCwSB5jCB4zA8
BggrBgEFBQcwBYYwcnN5bmM6Ly9yZXBvLnJwa2kuc3BhY2UvcmVwby9wZmNsb3Vk
LXRnZXdpZXNlLzAvMGgGCCsGAQUFBzAKhlxyc3luYzovL3JlcG8ucnBraS5zcGFj
ZS9yZXBvL3BmY2xvdWQtdGdld2llc2UvMC9DQUJGMzczRUFEQ0Q5Mzc2RTUyNENF
MzEzQUI4NjhDMDNFRUIxMDg4Lm1mdDA5BggrBgEFBQcwDYYtaHR0cHM6Ly9yZXBv
LnJwa2kuc3BhY2UvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgIqFAfAEDAN
BgkqhkiG9w0BAQsFAAOCAQEABEn3IrvtJmweoPWTRV0/355jmHYggfDoWr1UFzuN
q3yVELhwZtEmj+qGSyAzTeAsD+0hptJfoGuViWN++c1ks6gJtHmwT6D67X3VFXyG
rKwr88fRBjr9VKMJ8MBhREykffTK6t0JpBsl/ScDwUpDvHNKnfkXxZi5hxsI5j/j
APPEjH3iJ/yUqzkz7s5ADawNRYYCFnta6t4+ASdtxOMK8S7cGgHdBdF1k0MMIwff
Dfbz9l4lK9inYWBDmjxmhoavI9icpgRUtALjoQ3NPPKW9dMiakwhHRSjN90Q9WaU
VPUsHf32Z4hhJ5JHv5xdRJ2jnKGNVFzxdFH+Jy/jdEalSA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:40:36 2025 by rpki-client