Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF.cer
File:                     38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF.cer (raw, json)
Hash identifier:          nmXgRwSvA+j6m0D7KjI+L8460GHqKOYvE+LdlYYxc1c=
Subject key identifier:   38:EC:8E:47:63:66:BF:5E:AF:F8:39:AF:E7:8D:AF:0B:3A:6C:D6:EF
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       459D57AA71FBEE2BF9D3252E7C73B923101D1EC0
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Manifest:                 rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/4/38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF.mft
caRepository:             rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/4/
Notify URL:               https://krill.accuristechnologies.ca/rrdp/notification.xml
Certificate not before:   Mon 07 Oct 2024 05:10:20 +0000
Certificate not after:    Mon 06 Oct 2025 05:15:20 +0000
Subordinate resources:    IP: 2a0a:6040:1500::/40
                          IP: 2a0a:6040:6d00::/40
                          IP: 2a0a:6040:c500::/40

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:9d:57:aa:71:fb:ee:2b:f9:d3:25:2e:7c:73:b9:23:10:1d:1e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Oct  7 05:10:20 2024 GMT
            Not After : Oct  6 05:15:20 2025 GMT
        Subject: CN=38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:34:53:01:88:e0:e6:a4:85:fc:32:df:69:3a:
                    62:0a:f8:ef:2e:8a:e7:53:b2:ff:7b:24:48:d3:cd:
                    86:ad:56:cc:7a:c8:c8:15:32:e2:ab:9a:22:cb:81:
                    3b:83:54:18:4a:b5:08:7f:61:05:7d:cf:e5:46:8f:
                    17:26:ac:fd:39:58:4d:f5:b8:c4:62:e1:03:e8:27:
                    c5:a5:0c:c8:de:c0:24:23:c1:3f:da:65:4e:9e:fe:
                    3d:44:df:81:25:69:37:92:39:2c:58:8b:3c:e0:66:
                    01:78:6e:f0:15:1d:1b:81:22:f1:a9:37:fb:27:61:
                    60:79:b0:28:0c:51:db:f2:5c:85:7f:2f:d1:87:22:
                    e3:97:42:17:4b:33:1d:43:27:a8:f5:c4:33:43:fa:
                    17:85:af:c0:7c:6a:cb:39:3a:ec:61:65:78:25:31:
                    03:f4:21:a4:d0:f9:75:14:d9:5e:6c:80:ce:05:67:
                    49:37:40:ac:97:cc:12:ff:2b:3d:5f:cd:a8:0d:a4:
                    13:23:f3:a5:2d:e7:c6:fa:1f:c9:31:c5:92:03:9d:
                    1b:fe:8f:09:02:24:07:e1:25:69:ac:c2:44:af:6d:
                    55:a7:df:3d:68:ec:d3:6f:cc:0b:51:66:06:65:5f:
                    cf:fb:4a:ee:dc:0d:17:d0:c3:d5:2e:2b:93:d2:62:
                    bd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                38:EC:8E:47:63:66:BF:5E:AF:F8:39:AF:E7:8D:AF:0B:3A:6C:D6:EF
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                CA Repository - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/4/
                RPKI Manifest - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/4/38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF.mft
                RPKI Notify - URI:https://krill.accuristechnologies.ca/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1500::/40
                  2a0a:6040:6d00::/40
                  2a0a:6040:c500::/40

    Signature Algorithm: sha256WithRSAEncryption
         5f:42:52:b7:02:29:88:2b:3d:fe:84:80:7a:f5:c5:ec:08:aa:
         cb:3c:6d:f0:61:90:4a:8f:e7:1b:64:00:16:a2:0d:bb:88:6d:
         e8:d8:88:8b:f1:38:20:5d:cc:30:26:6e:e3:18:f8:c2:b4:96:
         9c:47:d6:9f:90:06:94:e8:8f:f6:5b:b2:40:a1:e8:e5:53:aa:
         85:45:01:0d:0d:29:3e:cf:da:9d:c4:45:80:97:58:6e:eb:db:
         13:af:32:f6:33:f4:82:7f:8a:af:03:e4:42:61:14:69:b2:73:
         cd:56:5e:e0:92:14:49:d9:27:37:48:96:b7:f8:eb:cb:14:11:
         f2:bd:58:ce:57:40:94:6e:ab:16:f1:38:49:e5:ff:82:1b:c2:
         2c:34:2a:07:55:44:92:3e:fc:6e:bf:7f:00:d7:05:c9:64:d4:
         77:64:ac:9a:87:bc:a8:87:34:ef:3f:68:b1:74:45:71:cc:52:
         45:d9:4e:c8:bc:79:77:d3:46:de:34:77:d1:14:25:02:91:6c:
         94:0d:f5:da:34:aa:ba:d7:f1:1f:64:a1:48:e9:43:b7:a6:cc:
         ea:a3:2b:ad:56:2e:d9:c2:66:cb:0d:f5:dc:8d:80:6a:96:f5:
         e4:4f:a9:dd:c5:6d:13:2e:87:c1:b5:d9:34:ed:af:65:3e:0d:
         57:c6:75:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:45 2024 by rpki-client on console-fra.rpki-client.org