$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer File: 309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer (raw, json) Hash identifier: pDP/w9JGDLK2sd+ijMHfx3StWfrlRx7eINZqXrAADAk= Subject key identifier: 30:9C:25:E7:B1:8F:F2:8A:60:B9:6B:25:57:2F:8A:9E:31:04:FE:76 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 21FB2CEFD0944CE76460C8C75AEF714D6CE6485C Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 10 Sep 2024 19:03:23 +0000 Certificate not after: Tue 09 Sep 2025 19:08:23 +0000 Subordinate resources: IP: 2a0a:6040:b100::/40 IP: 2a0a:6040:ed00::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Oct 2024 08:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:fb:2c:ef:d0:94:4c:e7:64:60:c8:c7:5a:ef:71:4d:6c:e6:48:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Sep 10 19:03:23 2024 GMT Not After : Sep 9 19:08:23 2025 GMT Subject: CN=309C25E7B18FF28A60B96B25572F8A9E3104FE76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:91:95:ad:5f:58:48:7e:6a:d6:bb:27:3d:b0: a1:7b:53:bf:a5:47:08:88:2d:dc:93:28:4f:10:3f: e5:68:31:dc:19:67:72:35:d3:f5:b8:f5:99:13:02: 51:c5:b5:97:10:7e:3f:8b:6a:62:f4:76:63:e5:13: 32:a3:f6:26:4f:90:e8:73:64:db:8e:f5:ca:c3:c8: 70:1f:fc:0c:65:39:e9:07:ef:d8:17:d0:ee:94:99: 97:43:c3:4d:73:06:e8:56:5e:e8:8b:d8:99:f7:c4: e4:a3:03:8b:79:29:2a:be:f0:c6:c8:6e:bf:45:1a: 07:67:0d:03:55:e5:56:f3:7b:6c:dd:0c:ca:f6:c8: 0c:fd:1f:1d:06:15:e0:3e:57:2f:12:d6:57:51:14: 5b:36:aa:bf:0b:a9:6c:a1:24:d6:b7:5a:6b:80:cb: 51:e8:81:43:99:91:ed:1b:67:3c:79:59:8c:72:11: 4d:c2:a2:15:40:18:7f:90:10:c1:1c:ec:72:68:99: af:b3:96:cb:be:95:5f:7f:62:b7:3d:cd:52:24:9b: ab:27:79:22:ba:4c:d1:9e:a5:d3:48:47:0a:cd:86: 97:7a:2b:3a:0b:5d:03:c2:db:f5:01:84:97:7c:73: e4:92:c0:a1:1d:7c:07:66:bd:3b:9f:bd:19:7c:de: ab:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 30:9C:25:E7:B1:8F:F2:8A:60:B9:6B:25:57:2F:8A:9E:31:04:FE:76 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:b100::/40 2a0a:6040:ed00::/40 Signature Algorithm: sha256WithRSAEncryption 26:c0:58:3a:29:0a:5e:eb:e3:d0:7a:c3:4b:5b:3e:a2:b5:0d: 25:1c:07:5e:a3:9b:3c:1f:fe:02:66:5c:62:03:af:3b:ec:94: d9:b9:f5:a1:e2:dd:0c:11:d7:74:3b:de:b2:b1:9c:9e:df:ec: bb:e3:fc:b2:58:2d:23:54:f7:7a:66:d8:5f:0f:09:4d:b2:32: 1f:e6:a1:fb:e5:c4:9b:5f:b2:b9:08:29:45:eb:34:45:20:cf: ad:ca:80:58:18:84:4f:4c:08:22:ce:fe:cd:68:0f:c7:3e:da: b1:96:73:0f:eb:5e:d5:35:3e:3c:f8:51:37:61:9a:5e:98:e2: 21:23:15:93:06:71:5c:ac:56:0b:34:e6:25:d1:09:77:6d:77: 20:9b:3a:ba:48:0f:c3:93:f4:53:cd:87:1c:05:8b:c8:f4:f7: 34:6e:c1:e8:3a:d3:5a:94:8f:d7:4e:dc:d3:6f:a8:69:c4:69: 74:fd:1f:eb:25:2b:68:c4:38:f3:f5:7a:d4:2a:bf:3e:d1:40: 36:43:b1:9e:14:9e:82:e8:4e:8e:45:bc:cc:e2:8c:c9:7f:66: fe:8f:48:24:3b:98:aa:d8:fb:78:6b:b6:c8:6f:26:95:8a:51: 2c:b6:77:b1:3c:40:68:50:38:7a:8e:8c:6e:4d:fc:a2:88:bc: 60:3b:ed:97 -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgIUIfss79CUTOdkYMjHWu9xTWzmSFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDA5MTAxOTAzMjNaFw0yNTA5MDkxOTA4MjNaMDMxMTAvBgNV BAMTKDMwOUMyNUU3QjE4RkYyOEE2MEI5NkIyNTU3MkY4QTlFMzEwNEZFNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdkZWtX1hIfmrWuyc9sKF7U7+l RwiILdyTKE8QP+VoMdwZZ3I10/W49ZkTAlHFtZcQfj+LamL0dmPlEzKj9iZPkOhz ZNuO9crDyHAf/AxlOekH79gX0O6UmZdDw01zBuhWXuiL2Jn3xOSjA4t5KSq+8MbI br9FGgdnDQNV5Vbze2zdDMr2yAz9Hx0GFeA+Vy8S1ldRFFs2qr8LqWyhJNa3WmuA y1HogUOZke0bZzx5WYxyEU3CohVAGH+QEMEc7HJoma+zlsu+lV9/Yrc9zVIkm6sn eSK6TNGepdNIRwrNhpd6KzoLXQPC2/UBhJd8c+SSwKEdfAdmvTufvRl83qurAgMB AAGjggL0MIIC8DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQwnCXnsY/yimC5 ayVXL4qeMQT+djAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2 MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0 QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQw MTk1Y2U3LzAvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS8yYWNhM2NhNi0zNGNjLTQ3NzItYmFjMC1hMzVk ZDAxOTVjZTcvMC8zMDlDMjVFN0IxOEZGMjhBNjBCOTZCMjU1NzJGOEE5RTMxMDRG RTc2Lm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw KQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgAqCmBAsQMGACoKYEDtMA0GCSqG SIb3DQEBCwUAA4IBAQAmwFg6KQpe6+PQesNLWz6itQ0lHAdeo5s8H/4CZlxiA687 7JTZufWh4t0MEdd0O96ysZye3+y74/yyWC0jVPd6ZthfDwlNsjIf5qH75cSbX7K5 CClF6zRFIM+tyoBYGIRPTAgizv7NaA/HPtqxlnMP617VNT48+FE3YZpemOIhIxWT BnFcrFYLNOYl0Ql3bXcgmzq6SA/Dk/RTzYccBYvI9Pc0bsHoOtNalI/XTtzTb6hp xGl0/R/rJStoxDjz9XrUKr8+0UA2Q7GeFJ6C6E6ORbzM4ozJf2b+j0gkO5iq2Pt4 a7bIbyaVilEstnexPEBoUDh6joxuTfyiiLxgO+2X -----END CERTIFICATE-----Generated at Tue Oct 22 12:32:40 2024 by rpki-client on console-ams.rpki-client.org