Certificate

$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/0/6F08383FF15292BFB6A427602811D5E225F0853C.cer
File:                     6F08383FF15292BFB6A427602811D5E225F0853C.cer (raw, json)
Hash identifier:          DwPyhoPAg32N+V7bitfMVwCIUjikjYCTsp7qjFCQVio=
Subject key identifier:   6F:08:38:3F:F1:52:92:BF:B6:A4:27:60:28:11:D5:E2:25:F0:85:3C
Authority key identifier: 43:FB:37:78:24:B0:48:04:8B:87:56:B6:C6:5C:59:9B:82:AE:B5:B9
Certificate issuer:       /CN=43FB377824B048048B8756B6C65C599B82AEB5B9
Certificate serial:       4BDF62917E37366420F9E01E70A60F3905F7F31A
Authority info access:    rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer
Manifest:                 rsync://repo.rpki.space/repo/pfcloud-hostarray/0/6F08383FF15292BFB6A427602811D5E225F0853C.mft
caRepository:             rsync://repo.rpki.space/repo/pfcloud-hostarray/0/
Notify URL:               https://repo.rpki.space/rrdp/notification.xml
Certificate not before:   Wed 30 Apr 2025 19:27:45 +0000
Certificate not after:    Wed 29 Apr 2026 19:32:45 +0000
Subordinate resources:    IP: 2a14:7c0:7000::/36
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.crl
                          rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.mft
                          rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 19:08:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:df:62:91:7e:37:36:64:20:f9:e0:1e:70:a6:0f:39:05:f7:f3:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FB377824B048048B8756B6C65C599B82AEB5B9
        Validity
            Not Before: Apr 30 19:27:45 2025 GMT
            Not After : Apr 29 19:32:45 2026 GMT
        Subject: CN=6F08383FF15292BFB6A427602811D5E225F0853C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:21:d2:66:90:26:d1:8d:d8:62:68:39:6e:22:
                    06:b8:35:92:7d:1a:8e:e8:ef:b2:7a:9b:81:05:21:
                    f0:a6:4f:ef:57:c5:c9:fa:74:f9:07:ea:63:e6:82:
                    7c:fc:cf:89:d2:d2:d6:a6:f9:b8:db:54:43:f9:59:
                    9f:a4:b4:b8:a0:49:e9:7e:9d:0d:a8:55:ed:93:9c:
                    f9:11:30:b7:2d:0d:f2:92:fa:93:94:1d:09:a2:71:
                    b7:69:20:4c:54:dc:b4:3c:44:4c:15:76:a5:c8:28:
                    9c:cb:c7:69:07:7c:c1:60:63:32:0e:c5:19:ff:c7:
                    94:80:af:d5:da:c2:f2:b1:12:a2:b7:7d:cb:e1:f4:
                    ac:df:15:df:46:fb:a6:88:0a:d1:f1:45:6b:de:c7:
                    29:40:41:c3:63:a8:ed:8b:4c:d8:67:ad:88:ca:80:
                    da:8d:cb:47:73:ee:4f:f3:44:6a:ea:06:93:f5:89:
                    8c:1a:d4:0d:57:05:90:52:63:7d:46:f5:9f:9e:ce:
                    52:5a:cf:b5:4e:7e:5b:a2:94:ef:3f:0f:34:db:fc:
                    5a:f7:79:de:ac:80:28:70:9a:87:d7:0b:ef:df:cf:
                    f1:69:da:fe:d5:fe:3f:36:5b:a9:2c:ff:de:3e:80:
                    2d:7f:d7:b7:c6:1d:f0:9d:55:52:50:b8:fd:26:eb:
                    4a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6F:08:38:3F:F1:52:92:BF:B6:A4:27:60:28:11:D5:E2:25:F0:85:3C
            X509v3 Authority Key Identifier:
                keyid:43:FB:37:78:24:B0:48:04:8B:87:56:B6:C6:5C:59:9B:82:AE:B5:B9

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo.rpki.space/repo/pfcloud-hostarray/0/
                RPKI Manifest - URI:rsync://repo.rpki.space/repo/pfcloud-hostarray/0/6F08383FF15292BFB6A427602811D5E225F0853C.mft
                RPKI Notify - URI:https://repo.rpki.space/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         03:b9:af:e2:87:c1:09:6e:be:cf:58:be:dd:cf:b1:53:62:f4:
         a5:9b:ef:df:d9:d7:ba:0a:f3:69:b3:89:a4:83:dd:03:4a:b6:
         2e:50:3d:9d:2a:28:bd:6f:a6:9e:c9:d9:92:1b:9e:bc:64:53:
         89:ee:85:59:77:d2:0a:0c:22:bf:e3:6f:52:56:a2:0f:02:97:
         8d:fa:fc:39:80:76:c2:55:01:2b:c6:b3:3c:45:f9:37:76:c4:
         86:1f:ed:36:68:cb:73:07:5d:5f:ac:41:a1:3d:ef:80:a1:27:
         7c:7c:6a:03:34:6d:a3:fe:c4:f7:15:54:b6:ae:ae:f8:de:fc:
         61:d8:6a:f5:84:92:85:55:1b:50:7b:9c:6f:bc:be:ba:2d:bf:
         d7:30:72:ff:e9:34:76:d7:f5:b2:fc:df:55:ea:1a:f1:aa:63:
         7c:a6:79:97:c0:e5:07:36:c0:8c:5c:40:94:e8:91:fd:2a:e9:
         ea:06:22:ae:ce:51:b9:d0:f4:12:45:3a:e7:72:55:61:27:ac:
         14:f1:10:bc:51:e5:85:ec:27:30:d6:e4:23:f2:9e:d2:c5:bf:
         3d:d2:e4:95:d9:91:56:7a:39:d5:01:07:38:1f:ce:66:eb:25:
         bb:38:56:85:19:1c:02:2e:55:f3:1b:f0:7c:75:02:da:32:90:
         28:b5:61:47
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIUS99ikX43NmQg+eAecKYPOQX38xowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNGQjM3NzgyNEIwNDgwNDhCODc1NkI2QzY1QzU5OUI4
MkFFQjVCOTAeFw0yNTA0MzAxOTI3NDVaFw0yNjA0MjkxOTMyNDVaMDMxMTAvBgNV
BAMTKDZGMDgzODNGRjE1MjkyQkZCNkE0Mjc2MDI4MTFENUUyMjVGMDg1M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWIdJmkCbRjdhiaDluIga4NZJ9
Go7o77J6m4EFIfCmT+9Xxcn6dPkH6mPmgnz8z4nS0tam+bjbVEP5WZ+ktLigSel+
nQ2oVe2TnPkRMLctDfKS+pOUHQmicbdpIExU3LQ8REwVdqXIKJzLx2kHfMFgYzIO
xRn/x5SAr9XawvKxEqK3fcvh9KzfFd9G+6aICtHxRWvexylAQcNjqO2LTNhnrYjK
gNqNy0dz7k/zRGrqBpP1iYwa1A1XBZBSY31G9Z+ezlJaz7VOfluilO8/DzTb/Fr3
ed6sgChwmofXC+/fz/Fp2v7V/j82W6ks/94+gC1/17fGHfCdVVJQuP0m60p5AgMB
AAGjggJ1MIICcTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRvCDg/8VKSv7ak
J2AoEdXiJfCFPDAfBgNVHSMEGDAWgBRD+zd4JLBIBIuHVrbGXFmbgq61uTAOBgNV
HQ8BAf8EBAMCAQYwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9yZXBvLnJwa2ku
c3BhY2UvcmVwby9QZmNsb3VkLzAvNDNGQjM3NzgyNEIwNDgwNDhCODc1NkI2QzY1
QzU5OUI4MkFFQjVCOS5jcmwwcwYIKwYBBQUHAQEEZzBlMGMGCCsGAQUFBzAChldy
c3luYzovL3JlcG8ucnBraS5zcGFjZS9yZXBvL0luZmluaXJvdXRlLzEvNDNGQjM3
NzgyNEIwNDgwNDhCODc1NkI2QzY1QzU5OUI4MkFFQjVCOS5jZXIwgfUGCCsGAQUF
BwELBIHoMIHlMD0GCCsGAQUFBzAFhjFyc3luYzovL3JlcG8ucnBraS5zcGFjZS9y
ZXBvL3BmY2xvdWQtaG9zdGFycmF5LzAvMGkGCCsGAQUFBzAKhl1yc3luYzovL3Jl
cG8ucnBraS5zcGFjZS9yZXBvL3BmY2xvdWQtaG9zdGFycmF5LzAvNkYwODM4M0ZG
MTUyOTJCRkI2QTQyNzYwMjgxMUQ1RTIyNUYwODUzQy5tZnQwOQYIKwYBBQUHMA2G
LWh0dHBzOi8vcmVwby5ycGtpLnNwYWNlL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIA
AjAIAwYEKhQHwHAwDQYJKoZIhvcNAQELBQADggEBAAO5r+KHwQluvs9Yvt3PsVNi
9KWb79/Z17oK82mziaSD3QNKti5QPZ0qKL1vpp7J2ZIbnrxkU4nuhVl30goMIr/j
b1JWog8Cl436/DmAdsJVASvGszxF+Td2xIYf7TZoy3MHXV+sQaE974ChJ3x8agM0
baP+xPcVVLaurvje/GHYavWEkoVVG1B7nG+8vrotv9cwcv/pNHbX9bL831XqGvGq
Y3ymeZfA5Qc2wIxcQJTokf0q6eoGIq7OUbnQ9BJFOudyVWEnrBTxELxR5YXsJzDW
5CPyntLFvz3S5JXZkVZ6OdUBBzgfzmbrJbs4VoUZHAIuVfMb8Hx1AtoykCi1YUc=
-----END CERTIFICATE-----
Generated at Fri May 9 11:11:01 2025 by rpki-client