$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.cer File: 04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.cer (raw, json) Hash identifier: cdFysxGb9HXmbAJevNANaUbc74mVn9FnAi+KJfzkRso= Subject key identifier: 04:F7:D8:E6:71:AC:7D:0A:0F:EE:B7:4E:4B:E9:C9:C1:3E:B2:95:4C Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 5D69CCFA2FB81E318880B13A536F64AFE7DC7B77 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 13 Aug 2024 02:05:40 +0000 Certificate not after: Tue 12 Aug 2025 02:10:40 +0000 Subordinate resources: IP: 2a05:dfc1:8200::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:69:cc:fa:2f:b8:1e:31:88:80:b1:3a:53:6f:64:af:e7:dc:7b:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Aug 13 02:05:40 2024 GMT Not After : Aug 12 02:10:40 2025 GMT Subject: CN=04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2e:3d:fb:3c:04:0b:3a:25:e7:c3:8c:14:64: 8f:24:db:c2:b4:1c:a7:51:6e:4b:6d:5d:f0:31:8f: 50:56:c8:02:1d:3d:e8:5c:7c:10:da:29:85:f9:b8: 31:d1:47:e6:41:06:0f:b7:30:53:78:0d:68:b9:52: b4:6f:9a:16:15:d1:f2:a0:18:2d:04:3a:79:12:c8: 66:5b:0e:d0:03:e3:cc:6c:9c:8b:1b:a8:e8:40:55: 9a:b8:77:45:30:86:4f:82:0f:41:67:27:71:4b:7e: 68:94:f8:a4:9a:ff:b0:25:46:30:99:54:83:59:fb: 56:04:d5:87:31:8a:97:85:02:71:6f:93:4c:27:ea: 6d:bb:c3:7d:09:90:57:f2:e0:fd:46:98:7f:f1:84: 4c:68:42:7c:a6:9a:4e:52:75:ae:b9:b0:79:10:fd: 6b:90:f5:06:f6:99:6c:99:56:75:e4:c7:eb:68:c2: 09:05:45:dd:1b:c0:e6:a2:8e:e2:ac:6b:7c:d5:4a: 30:70:1b:5b:53:78:68:71:27:68:e4:85:a5:03:d6: aa:0c:52:61:da:f8:e3:0c:f2:7a:c9:18:ff:53:17: c7:23:a5:88:c4:5d:7a:cf:18:6b:55:d2:da:c9:4b: 55:dc:91:7f:89:f4:34:79:e7:cb:45:3e:9f:d4:f9: 14:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 04:F7:D8:E6:71:AC:7D:0A:0F:EE:B7:4E:4B:E9:C9:C1:3E:B2:95:4C X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8200::/40 Signature Algorithm: sha256WithRSAEncryption 11:72:ba:13:97:b7:4b:a5:33:84:36:b1:7e:8b:4f:0e:82:aa: 8a:b8:0b:a2:07:68:57:e8:8e:ec:b0:08:e3:5a:09:12:5b:03: 64:31:56:d5:e7:b2:1e:6c:49:7f:18:e9:21:7e:e3:35:4b:29: a3:6a:22:0a:2c:56:aa:cd:0f:d7:cd:72:a2:81:34:5c:bc:11: ab:dc:e5:53:f4:9b:da:48:e1:b8:22:cb:5b:bc:e8:f0:10:28: ce:6c:b1:5f:23:41:30:ba:64:03:63:1f:ac:27:b9:a4:f9:8e: ff:26:85:51:64:98:04:c7:e0:2f:41:2c:96:bf:59:e5:c1:e9: 38:ea:95:2d:6e:d7:da:93:8a:71:a5:81:9e:f3:97:a6:ac:f1: 19:6d:ee:70:e4:5f:57:8a:ee:c5:90:8a:4c:48:76:fb:66:a9: da:0d:ef:22:17:63:8a:7f:b3:32:af:54:6e:e1:44:93:d2:fb: b6:6b:3a:76:fe:4e:da:4a:5e:69:c0:a9:f7:83:9a:1a:63:10: 80:71:e4:7c:4b:0f:3d:2d:f1:3d:6b:06:49:61:2f:74:03:b6: b7:4e:22:4a:50:e7:55:ac:5f:93:a4:42:67:95:86:2c:ad:c4: 19:80:a9:f8:9b:35:f4:e0:b6:d2:a9:b6:05:d4:c6:8c:14:3d: 32:84:ef:c3 -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIUXWnM+i+4HjGIgLE6U29kr+fce3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDA4MTMwMjA1NDBaFw0yNTA4MTIwMjEwNDBaMDMxMTAvBgNV BAMTKDA0RjdEOEU2NzFBQzdEMEEwRkVFQjc0RTRCRTlDOUMxM0VCMjk1NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzLj37PAQLOiXnw4wUZI8k28K0 HKdRbkttXfAxj1BWyAIdPehcfBDaKYX5uDHRR+ZBBg+3MFN4DWi5UrRvmhYV0fKg GC0EOnkSyGZbDtAD48xsnIsbqOhAVZq4d0Uwhk+CD0FnJ3FLfmiU+KSa/7AlRjCZ VINZ+1YE1YcxipeFAnFvk0wn6m27w30JkFfy4P1GmH/xhExoQnymmk5Sda65sHkQ /WuQ9Qb2mWyZVnXkx+towgkFRd0bwOaijuKsa3zVSjBwG1tTeGhxJ2jkhaUD1qoM UmHa+OMM8nrJGP9TF8cjpYjEXXrPGGtV0trJS1XckX+J9DR558tFPp/U+RSnAgMB AAGjggLsMIIC6DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQE99jmcax9Cg/u t05L6cnBPrKVTDAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2 MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0 QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVk MTNkOGVmLzIvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS83MmM0MDVmMS1jMzJkLTQ3Y2UtODk0My0wNzUy ZWQxM2Q4ZWYvMi8wNEY3RDhFNjcxQUM3RDBBMEZFRUI3NEU0QkU5QzlDMTNFQjI5 NTRDLm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BgjANBgkqhkiG9w0BAQsF AAOCAQEAEXK6E5e3S6UzhDaxfotPDoKqirgLogdoV+iO7LAI41oJElsDZDFW1eey HmxJfxjpIX7jNUspo2oiCixWqs0P181yooE0XLwRq9zlU/Sb2kjhuCLLW7zo8BAo zmyxXyNBMLpkA2MfrCe5pPmO/yaFUWSYBMfgL0Eslr9Z5cHpOOqVLW7X2pOKcaWB nvOXpqzxGW3ucORfV4ruxZCKTEh2+2ap2g3vIhdjin+zMq9UbuFEk9L7tms6dv5O 2kpeacCp94OaGmMQgHHkfEsPPS3xPWsGSWEvdAO2t04iSlDnVaxfk6RCZ5WGLK3E GYCp+Js19OC20qm2BdTGjBQ9MoTvww== -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:54 2024 by rpki-client on console-ams.rpki-client.org