$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.cer File: 10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.cer (raw, json) Hash identifier: 9JrWKaGgncR7gsPGD78ik9YV3cKAbsebtsccF+LZhoM= Subject key identifier: 10:85:8A:E8:15:A7:DD:CA:83:BE:CC:17:C1:F7:AC:0E:B7:C1:CE:B1 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 716CA45A53CBD7AFE8BD8FD14C341CB3FC90BDB2 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Manifest: rsync://rpki.cc/repo/BerryByte/1/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.mft caRepository: rsync://rpki.cc/repo/BerryByte/1/ Notify URL: https://rpki.cc/rrdp/notification.xml Certificate not before: Sun 06 Oct 2024 11:49:21 +0000 Certificate not after: Sun 05 Oct 2025 11:54:21 +0000 Subordinate resources: IP: 2a0a:6040:b000::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 Nov 2024 15:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:6c:a4:5a:53:cb:d7:af:e8:bd:8f:d1:4c:34:1c:b3:fc:90:bd:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 11:49:21 2024 GMT Not After : Oct 5 11:54:21 2025 GMT Subject: CN=10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8b:3f:d2:15:93:c0:34:d0:a0:7a:cb:33:50: 4a:90:35:7a:48:81:3a:14:b4:7e:cc:72:42:2c:b5: 10:e0:5d:03:93:12:33:ec:c6:40:72:2c:57:40:de: 63:60:fd:58:17:8f:f5:92:7e:78:b1:df:dd:2e:81: 8e:6a:1e:82:f8:ac:c4:a2:7d:7f:32:80:26:c1:76: a4:70:46:93:2a:67:91:ba:c9:69:f7:fc:fe:cf:0c: 01:2f:d3:10:d0:50:05:c4:df:b6:52:cc:5e:cf:ed: b6:46:40:e8:eb:73:01:df:29:6b:ce:f5:d9:fb:db: 12:8d:26:6a:ff:55:a0:b1:bd:85:c2:73:90:36:4c: 4c:b0:34:5a:35:4a:56:16:c8:78:e5:a0:93:49:61: 46:59:f7:7b:36:e1:fb:c5:ca:8c:f5:ff:00:5c:0f: 59:d4:0f:c8:50:7b:b1:78:6a:78:30:af:24:62:ed: 3f:62:7c:23:f8:94:88:7f:e2:ca:bc:f0:e4:46:58: 5d:86:05:be:55:dd:c9:74:b0:e2:fe:0d:f6:08:c6: a3:c9:63:01:e6:c5:a8:39:bd:ac:5e:db:ec:99:c9: b0:62:72:0c:ef:ed:8e:d2:d8:d3:49:a7:f0:37:c5: 89:af:01:74:85:96:2d:a7:3f:6b:83:86:2a:68:88: 88:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 10:85:8A:E8:15:A7:DD:CA:83:BE:CC:17:C1:F7:AC:0E:B7:C1:CE:B1 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: CA Repository - URI:rsync://rpki.cc/repo/BerryByte/1/ RPKI Manifest - URI:rsync://rpki.cc/repo/BerryByte/1/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.mft RPKI Notify - URI:https://rpki.cc/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:b000::/40 Signature Algorithm: sha256WithRSAEncryption 20:a5:7c:8f:5c:95:f5:a0:1b:02:9f:21:d8:7f:ab:81:c4:0a: f8:23:c5:78:2e:f8:df:0d:fb:5a:43:8e:e8:89:d1:ad:f3:eb: 26:06:52:a4:74:f2:8f:97:12:b9:db:6c:d7:35:e1:bc:13:b0: 9f:bb:7c:a7:b5:5f:4d:9b:25:d4:3b:c0:ad:4a:1b:57:40:6c: 6d:22:fb:12:bd:fe:00:0f:07:e7:62:a6:70:ec:04:65:96:6c: af:87:4c:b8:ab:ec:11:86:37:22:fd:9b:24:6e:d2:f6:a2:60: d5:31:f5:20:02:9b:d1:47:0d:dd:2f:03:0d:ac:ba:6e:f5:f4: f5:0f:fd:d4:39:c0:1d:9e:68:a0:6f:34:f4:a6:90:f2:fb:07: 9c:06:b4:34:d1:31:95:0a:16:80:80:da:d7:e0:c6:bf:08:7c: 14:3b:0c:cb:7f:d9:b8:40:3f:99:ae:91:5e:6f:cc:51:93:93: a8:31:ed:70:1b:0c:66:2c:a4:58:62:0b:d8:e9:bd:98:56:10: 71:c2:30:00:da:11:25:3f:52:71:90:0c:ce:05:4a:62:fc:56: 19:28:88:b9:90:16:47:b4:5a:1b:9f:dc:d0:1b:92:6b:75:be: 3b:e2:8d:4c:6a:9d:fc:ba:01:fc:f0:b8:ff:97:01:b1:6b:ad: 82:6f:a0:ba -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUcWykWlPL16/ovY/RTDQcs/yQvbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYxMTQ5MjFaFw0yNTEwMDUxMTU0MjFaMDMxMTAvBgNV BAMTKDEwODU4QUU4MTVBN0REQ0E4M0JFQ0MxN0MxRjdBQzBFQjdDMUNFQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLiz/SFZPANNCgesszUEqQNXpI gToUtH7MckIstRDgXQOTEjPsxkByLFdA3mNg/VgXj/WSfnix390ugY5qHoL4rMSi fX8ygCbBdqRwRpMqZ5G6yWn3/P7PDAEv0xDQUAXE37ZSzF7P7bZGQOjrcwHfKWvO 9dn72xKNJmr/VaCxvYXCc5A2TEywNFo1SlYWyHjloJNJYUZZ93s24fvFyoz1/wBc D1nUD8hQe7F4angwryRi7T9ifCP4lIh/4sq88ORGWF2GBb5V3cl0sOL+DfYIxqPJ YwHmxag5vaxe2+yZybBicgzv7Y7S2NNJp/A3xYmvAXSFli2nP2uDhipoiIiRAgMB AAGjggJ5MIICdTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQQhYroFafdyoO+ zBfB96wOt8HOsTAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2 MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0 QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCBzQYIKwYBBQUHAQsE gcAwgb0wLQYIKwYBBQUHMAWGIXJzeW5jOi8vcnBraS5jYy9yZXBvL0JlcnJ5Qnl0 ZS8xLzBZBggrBgEFBQcwCoZNcnN5bmM6Ly9ycGtpLmNjL3JlcG8vQmVycnlCeXRl LzEvMTA4NThBRTgxNUE3RERDQTgzQkVDQzE3QzFGN0FDMEVCN0MxQ0VCMS5tZnQw MQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jYy9ycmRwL25vdGlmaWNhdGlvbi54 bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoKYECwMA0GCSqGSIb3DQEBCwUAA4IBAQAgpXyPXJX1oBsCnyHY f6uBxAr4I8V4LvjfDftaQ47oidGt8+smBlKkdPKPlxK522zXNeG8E7Cfu3yntV9N myXUO8CtShtXQGxtIvsSvf4ADwfnYqZw7ARllmyvh0y4q+wRhjci/ZskbtL2omDV MfUgApvRRw3dLwMNrLpu9fT1D/3UOcAdnmigbzT0ppDy+wecBrQ00TGVChaAgNrX 4Ma/CHwUOwzLf9m4QD+ZrpFeb8xRk5OoMe1wGwxmLKRYYgvY6b2YVhBxwjAA2hEl P1JxkAzOBUpi/FYZKIi5kBZHtFobn9zQG5Jrdb474o1Map38ugH88Lj/lwGxa62C b6C6 -----END CERTIFICATE-----Generated at Wed Nov 20 23:51:59 2024 by rpki-client on console-ams.rpki-client.org