Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/23D444E7DED3712847CAE2B46DDD886FC2914D54.cer
File:                     23D444E7DED3712847CAE2B46DDD886FC2914D54.cer (raw, json)
Hash identifier:          YKhDL7F3DhIqN1g8FOjIQMoPbLIA3Dq6cQ8DJpPMTk4=
Subject key identifier:   23:D4:44:E7:DE:D3:71:28:47:CA:E2:B4:6D:DD:88:6F:C2:91:4D:54
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       4ED553AE75D1A63D65BB5EF1DB197F3DAC3D1B79
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 05 Nov 2023 16:23:24 +0000
Certificate not after:    Sun 03 Nov 2024 16:28:24 +0000
Subordinate resources:    IP: 2a0a:6040:db00::/40

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 07:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d5:53:ae:75:d1:a6:3d:65:bb:5e:f1:db:19:7f:3d:ac:3d:1b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Nov  5 16:23:24 2023 GMT
            Not After : Nov  3 16:28:24 2024 GMT
        Subject: CN=23D444E7DED3712847CAE2B46DDD886FC2914D54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:77:fd:70:75:8b:e3:72:0e:c6:96:23:95:93:
                    5e:22:16:c6:fe:bd:56:53:d6:e0:94:bb:39:ec:02:
                    13:74:5d:3b:4b:00:e5:c8:17:b6:5a:c2:37:4e:11:
                    a2:21:21:6e:d8:b9:56:d2:0e:7b:fb:01:66:4f:60:
                    f1:ba:ac:c4:eb:db:18:ba:78:f6:6d:90:67:1c:d2:
                    c0:82:24:ae:24:f4:3f:a9:fd:da:cb:cb:aa:45:88:
                    34:0a:96:db:c2:2d:5e:80:52:8c:3f:4a:b2:d5:43:
                    d5:a4:3d:15:59:1b:7d:15:71:94:a1:d1:0b:ae:7c:
                    cb:5f:3a:23:8f:88:c0:4c:67:45:bf:f6:5b:d5:67:
                    f5:ea:0d:81:b0:85:f1:77:98:b2:09:87:67:63:77:
                    8e:71:e4:85:2a:80:5c:6e:14:45:2e:69:28:8e:12:
                    72:aa:30:76:e8:4c:ab:cb:f4:b8:56:5d:b2:2e:d0:
                    8f:36:95:58:47:6a:29:93:7a:37:3a:44:68:32:19:
                    fa:da:cf:09:0d:5e:b8:52:58:11:89:7d:84:69:ae:
                    22:2c:14:f9:50:24:9d:ca:9b:d3:65:fa:65:5c:b8:
                    7a:a3:58:ae:66:19:44:e2:5c:db:a7:a4:b0:fb:d8:
                    f2:be:7e:7c:a7:59:7b:4b:23:88:82:0f:78:4f:1d:
                    79:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                23:D4:44:E7:DE:D3:71:28:47:CA:E2:B4:6D:DD:88:6F:C2:91:4D:54
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:db00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7d:c6:59:59:0a:31:8e:fe:a3:24:9a:79:d5:27:cb:f2:17:02:
         da:e9:db:8c:da:0f:a8:1d:32:c0:8d:3a:5e:e3:3c:4e:70:bd:
         1e:9b:5a:85:f1:f8:90:2e:ef:dc:cd:24:1a:28:2f:14:90:8c:
         b2:3b:1b:7e:72:cf:dc:af:12:c5:6b:ce:ef:51:1a:7a:35:7b:
         5d:a5:de:ee:4f:a1:fb:92:3b:1b:f1:16:f2:78:f3:28:03:d2:
         bf:f4:90:4f:d0:16:a9:7c:97:3e:f0:1d:f3:84:4d:57:16:db:
         f0:18:e1:c7:1a:ae:10:f9:43:83:73:5b:5c:4f:94:41:ff:27:
         04:20:5f:18:b5:a1:ac:bd:98:eb:df:6f:24:b4:6c:b6:81:21:
         fd:f9:c0:c6:30:3b:5d:f8:c9:11:8e:3a:38:ee:3d:67:11:b4:
         0d:6e:e8:72:87:e9:b8:dd:cd:e5:b0:e6:6f:2a:91:b6:6f:ef:
         1a:52:23:8a:b0:f6:6f:68:54:83:79:65:c5:ba:44:af:83:39:
         31:ae:00:41:ff:9c:bb:f5:80:01:93:8c:5c:73:1c:08:69:56:
         88:19:2d:00:31:1d:89:52:bb:b0:8e:d6:d6:50:06:04:66:af:
         86:4e:54:e3:a6:b7:8d:51:55:9c:bd:92:f2:f5:64:e0:1d:dd:
         cc:64:35:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 12:06:23 2024 by rpki-client on console-ams.rpki-client.org