$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/23D444E7DED3712847CAE2B46DDD886FC2914D54.cer File: 23D444E7DED3712847CAE2B46DDD886FC2914D54.cer (raw, json) Hash identifier: 2GxXBtKiu/F9SVOsXhzbNzPVz+UmVcXryQuVdoo2UOg= Subject key identifier: 23:D4:44:E7:DE:D3:71:28:47:CA:E2:B4:6D:DD:88:6F:C2:91:4D:54 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 5712DE1B9270DA073BB66A68BCDE8D30496CDEFA Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Mon 07 Oct 2024 08:30:08 +0000 Certificate not after: Mon 06 Oct 2025 08:35:08 +0000 Subordinate resources: IP: 2a0a:6040:db00::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:12:de:1b:92:70:da:07:3b:b6:6a:68:bc:de:8d:30:49:6c:de:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 7 08:30:08 2024 GMT Not After : Oct 6 08:35:08 2025 GMT Subject: CN=23D444E7DED3712847CAE2B46DDD886FC2914D54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:77:fd:70:75:8b:e3:72:0e:c6:96:23:95:93: 5e:22:16:c6:fe:bd:56:53:d6:e0:94:bb:39:ec:02: 13:74:5d:3b:4b:00:e5:c8:17:b6:5a:c2:37:4e:11: a2:21:21:6e:d8:b9:56:d2:0e:7b:fb:01:66:4f:60: f1:ba:ac:c4:eb:db:18:ba:78:f6:6d:90:67:1c:d2: c0:82:24:ae:24:f4:3f:a9:fd:da:cb:cb:aa:45:88: 34:0a:96:db:c2:2d:5e:80:52:8c:3f:4a:b2:d5:43: d5:a4:3d:15:59:1b:7d:15:71:94:a1:d1:0b:ae:7c: cb:5f:3a:23:8f:88:c0:4c:67:45:bf:f6:5b:d5:67: f5:ea:0d:81:b0:85:f1:77:98:b2:09:87:67:63:77: 8e:71:e4:85:2a:80:5c:6e:14:45:2e:69:28:8e:12: 72:aa:30:76:e8:4c:ab:cb:f4:b8:56:5d:b2:2e:d0: 8f:36:95:58:47:6a:29:93:7a:37:3a:44:68:32:19: fa:da:cf:09:0d:5e:b8:52:58:11:89:7d:84:69:ae: 22:2c:14:f9:50:24:9d:ca:9b:d3:65:fa:65:5c:b8: 7a:a3:58:ae:66:19:44:e2:5c:db:a7:a4:b0:fb:d8: f2:be:7e:7c:a7:59:7b:4b:23:88:82:0f:78:4f:1d: 79:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 23:D4:44:E7:DE:D3:71:28:47:CA:E2:B4:6D:DD:88:6F:C2:91:4D:54 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:db00::/40 Signature Algorithm: sha256WithRSAEncryption 42:2c:a2:6b:02:f0:2c:63:44:b9:99:f2:10:b4:70:51:01:93: c7:42:d3:dd:a3:9d:d7:ac:8b:88:20:eb:62:a4:d8:7b:e8:5e: 81:c6:9e:1d:e1:97:f5:fe:b1:5f:c4:8d:ce:fd:ed:a2:8d:c9: 1d:53:59:6c:6a:4b:0d:c9:e2:a4:15:48:68:2e:2d:19:89:95: 29:2c:53:0b:2d:f5:19:f6:88:69:e0:61:2e:25:0d:6e:9b:03: 07:52:17:0b:64:4f:25:c6:7e:fc:de:cc:83:38:3c:53:a9:3f: b2:e6:e8:37:c1:8f:b7:a9:9b:16:fb:54:d1:3d:fa:16:98:07: 0f:8a:96:67:0d:84:e3:1e:21:7f:2e:65:c8:48:af:ce:c5:09: b5:25:a6:c3:26:34:a9:ea:32:cf:5c:0b:49:ef:67:61:4a:2a: af:d8:ac:2f:30:18:c2:f4:58:84:c1:8d:d6:cb:ce:7b:89:e5: 57:b8:2c:63:db:3a:f8:52:0e:b4:8a:4b:2b:1f:f8:b2:65:ff: 1c:04:99:c6:53:53:1e:ad:dc:b7:19:4d:a5:6f:0f:de:72:31: 74:15:22:a9:d9:20:c4:2b:40:24:bb:53:3b:a9:d1:c4:04:11: 6e:c9:74:52:3e:c9:a7:3e:14:48:39:9c:0d:90:25:48:09:39: a5:ff:f9:8f -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIUVxLeG5Jw2gc7tmpovN6NMEls3vowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDcwODMwMDhaFw0yNTEwMDYwODM1MDhaMDMxMTAvBgNV BAMTKDIzRDQ0NEU3REVEMzcxMjg0N0NBRTJCNDZEREQ4ODZGQzI5MTRENTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEd/1wdYvjcg7GliOVk14iFsb+ vVZT1uCUuznsAhN0XTtLAOXIF7ZawjdOEaIhIW7YuVbSDnv7AWZPYPG6rMTr2xi6 ePZtkGcc0sCCJK4k9D+p/drLy6pFiDQKltvCLV6AUow/SrLVQ9WkPRVZG30VcZSh 0QuufMtfOiOPiMBMZ0W/9lvVZ/XqDYGwhfF3mLIJh2djd45x5IUqgFxuFEUuaSiO EnKqMHboTKvL9LhWXbIu0I82lVhHaimTejc6RGgyGfrazwkNXrhSWBGJfYRpriIs FPlQJJ3Km9Nl+mVcuHqjWK5mGUTiXNunpLD72PK+fnynWXtLI4iCD3hPHXmbAgMB AAGjggLsMIIC6DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQj1ETn3tNxKEfK 4rRt3YhvwpFNVDAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2 MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0 QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRm MTdmODVjLzMvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9jMTI4MjcxZS1jMjY5LTQ5NTQtODdkYi1kMTg0 ZGYxN2Y4NWMvMy8yM0Q0NDRFN0RFRDM3MTI4NDdDQUUyQjQ2REREODg2RkMyOTE0 RDU0Lm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqCmBA2zANBgkqhkiG9w0BAQsF AAOCAQEAQiyiawLwLGNEuZnyELRwUQGTx0LT3aOd16yLiCDrYqTYe+hegcaeHeGX 9f6xX8SNzv3too3JHVNZbGpLDcnipBVIaC4tGYmVKSxTCy31GfaIaeBhLiUNbpsD B1IXC2RPJcZ+/N7Mgzg8U6k/suboN8GPt6mbFvtU0T36FpgHD4qWZw2E4x4hfy5l yEivzsUJtSWmwyY0qeoyz1wLSe9nYUoqr9isLzAYwvRYhMGN1svOe4nlV7gsY9s6 +FIOtIpLKx/4smX/HASZxlNTHq3ctxlNpW8P3nIxdBUiqdkgxCtAJLtTO6nRxAQR bsl0Uj7Jpz4USDmcDZAlSAk5pf/5jw== -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:45 2024 by rpki-client on console-fra.rpki-client.org