Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.cer
File:                     10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.cer (raw, json)
Hash identifier:          Hzp2CMwBUhd+DIJkTNb+YsGi0c6kfl77wbC3Vz/Rsks=
Subject key identifier:   10:85:8A:E8:15:A7:DD:CA:83:BE:CC:17:C1:F7:AC:0E:B7:C1:CE:B1
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       7E3A9129C5650D78FDEB3D506EE184E398B839AE
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Manifest:                 rsync://rpki.cc/repo/BerryByte/1/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.mft
caRepository:             rsync://rpki.cc/repo/BerryByte/1/
Notify URL:               https://rpki.cc/rrdp/notification.xml
Certificate not before:   Sun 05 Nov 2023 07:30:38 +0000
Certificate not after:    Sun 03 Nov 2024 07:35:38 +0000
Subordinate resources:    IP: 2a0a:6040:b000::/40

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 07:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:3a:91:29:c5:65:0d:78:fd:eb:3d:50:6e:e1:84:e3:98:b8:39:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Nov  5 07:30:38 2023 GMT
            Not After : Nov  3 07:35:38 2024 GMT
        Subject: CN=10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8b:3f:d2:15:93:c0:34:d0:a0:7a:cb:33:50:
                    4a:90:35:7a:48:81:3a:14:b4:7e:cc:72:42:2c:b5:
                    10:e0:5d:03:93:12:33:ec:c6:40:72:2c:57:40:de:
                    63:60:fd:58:17:8f:f5:92:7e:78:b1:df:dd:2e:81:
                    8e:6a:1e:82:f8:ac:c4:a2:7d:7f:32:80:26:c1:76:
                    a4:70:46:93:2a:67:91:ba:c9:69:f7:fc:fe:cf:0c:
                    01:2f:d3:10:d0:50:05:c4:df:b6:52:cc:5e:cf:ed:
                    b6:46:40:e8:eb:73:01:df:29:6b:ce:f5:d9:fb:db:
                    12:8d:26:6a:ff:55:a0:b1:bd:85:c2:73:90:36:4c:
                    4c:b0:34:5a:35:4a:56:16:c8:78:e5:a0:93:49:61:
                    46:59:f7:7b:36:e1:fb:c5:ca:8c:f5:ff:00:5c:0f:
                    59:d4:0f:c8:50:7b:b1:78:6a:78:30:af:24:62:ed:
                    3f:62:7c:23:f8:94:88:7f:e2:ca:bc:f0:e4:46:58:
                    5d:86:05:be:55:dd:c9:74:b0:e2:fe:0d:f6:08:c6:
                    a3:c9:63:01:e6:c5:a8:39:bd:ac:5e:db:ec:99:c9:
                    b0:62:72:0c:ef:ed:8e:d2:d8:d3:49:a7:f0:37:c5:
                    89:af:01:74:85:96:2d:a7:3f:6b:83:86:2a:68:88:
                    88:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:85:8A:E8:15:A7:DD:CA:83:BE:CC:17:C1:F7:AC:0E:B7:C1:CE:B1
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.cc/repo/BerryByte/1/
                RPKI Manifest - URI:rsync://rpki.cc/repo/BerryByte/1/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.mft
                RPKI Notify - URI:https://rpki.cc/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1a:c9:42:43:a3:d8:d5:4e:70:5d:26:c5:46:b1:8a:c8:69:6f:
         96:86:1f:90:69:44:a5:97:60:f1:e0:c9:02:9b:28:5b:10:32:
         37:f0:a1:26:c0:ba:da:be:d5:bb:b1:c7:6d:37:8b:24:3b:fe:
         38:a4:f7:1e:1a:39:d5:df:fd:c1:89:cf:a9:28:29:18:4c:a0:
         60:b6:e6:4c:be:d2:3e:c9:d4:6d:18:ca:27:1c:a5:57:1f:93:
         3b:3e:d8:f0:b2:2f:14:7d:0f:35:fa:8f:a6:15:bc:a9:1c:d5:
         bb:2a:68:89:a3:4e:10:25:e7:bb:f0:ce:27:da:51:07:58:fe:
         57:c9:74:c5:1f:6a:6f:ed:d1:bc:0d:ed:18:c6:d8:28:de:a8:
         84:33:7d:e4:56:57:b3:a0:c9:63:bc:15:3d:c0:2f:6b:6d:e4:
         76:f1:3e:06:9f:d6:e9:5d:5b:f4:75:bf:92:5a:ce:10:8f:7e:
         2c:c4:fb:41:52:1e:aa:ab:c4:bc:d5:4c:c9:15:b0:a2:a7:76:
         d6:70:94:fe:c1:05:4d:98:05:9b:77:7e:bd:c4:a3:ed:e9:83:
         d5:d4:d2:a8:74:0e:06:c6:17:49:77:1d:d8:0d:15:69:93:96:
         cd:bb:0a:d1:d1:b9:d9:18:d7:e3:35:c3:f5:55:50:4c:4d:eb:
         05:f6:f4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 12:06:23 2024 by rpki-client on console-ams.rpki-client.org