Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF.cer
File:                     38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF.cer (raw, json)
Hash identifier:          QoJKTbkhLkTc7FdUTBFlVTJufLWDSD9ciQJG4DVZBsw=
Subject key identifier:   38:EC:8E:47:63:66:BF:5E:AF:F8:39:AF:E7:8D:AF:0B:3A:6C:D6:EF
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       5511A195A7A94D163A86CB3C8F24D52F8CEB85D3
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Manifest:                 rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/4/38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF.mft
caRepository:             rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/4/
Notify URL:               https://krill.accuristechnologies.ca/rrdp/notification.xml
Certificate not before:   Sun 05 Nov 2023 04:04:57 +0000
Certificate not after:    Sun 03 Nov 2024 04:09:57 +0000
Subordinate resources:    IP: 2a0a:6040:1500::/40
                          IP: 2a0a:6040:6d00::/40
                          IP: 2a0a:6040:c500::/40

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:11:a1:95:a7:a9:4d:16:3a:86:cb:3c:8f:24:d5:2f:8c:eb:85:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Nov  5 04:04:57 2023 GMT
            Not After : Nov  3 04:09:57 2024 GMT
        Subject: CN=38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:34:53:01:88:e0:e6:a4:85:fc:32:df:69:3a:
                    62:0a:f8:ef:2e:8a:e7:53:b2:ff:7b:24:48:d3:cd:
                    86:ad:56:cc:7a:c8:c8:15:32:e2:ab:9a:22:cb:81:
                    3b:83:54:18:4a:b5:08:7f:61:05:7d:cf:e5:46:8f:
                    17:26:ac:fd:39:58:4d:f5:b8:c4:62:e1:03:e8:27:
                    c5:a5:0c:c8:de:c0:24:23:c1:3f:da:65:4e:9e:fe:
                    3d:44:df:81:25:69:37:92:39:2c:58:8b:3c:e0:66:
                    01:78:6e:f0:15:1d:1b:81:22:f1:a9:37:fb:27:61:
                    60:79:b0:28:0c:51:db:f2:5c:85:7f:2f:d1:87:22:
                    e3:97:42:17:4b:33:1d:43:27:a8:f5:c4:33:43:fa:
                    17:85:af:c0:7c:6a:cb:39:3a:ec:61:65:78:25:31:
                    03:f4:21:a4:d0:f9:75:14:d9:5e:6c:80:ce:05:67:
                    49:37:40:ac:97:cc:12:ff:2b:3d:5f:cd:a8:0d:a4:
                    13:23:f3:a5:2d:e7:c6:fa:1f:c9:31:c5:92:03:9d:
                    1b:fe:8f:09:02:24:07:e1:25:69:ac:c2:44:af:6d:
                    55:a7:df:3d:68:ec:d3:6f:cc:0b:51:66:06:65:5f:
                    cf:fb:4a:ee:dc:0d:17:d0:c3:d5:2e:2b:93:d2:62:
                    bd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                38:EC:8E:47:63:66:BF:5E:AF:F8:39:AF:E7:8D:AF:0B:3A:6C:D6:EF
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                CA Repository - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/4/
                RPKI Manifest - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/4/38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF.mft
                RPKI Notify - URI:https://krill.accuristechnologies.ca/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1500::/40
                  2a0a:6040:6d00::/40
                  2a0a:6040:c500::/40

    Signature Algorithm: sha256WithRSAEncryption
         89:0f:08:48:db:78:90:38:2b:11:cb:4a:8f:2f:08:52:00:10:
         4c:af:d4:82:fd:5b:b3:94:be:ef:78:c8:88:22:f4:c5:ba:3d:
         7a:14:43:7e:d5:b7:b8:5d:94:9f:78:fe:a4:8c:7c:f4:8d:f1:
         45:68:f3:c8:cc:c5:78:ea:cd:53:60:db:53:56:84:17:9c:7d:
         17:7f:54:63:04:83:29:ba:8b:c0:ea:c2:74:cc:59:79:fe:e4:
         f9:ce:fb:60:2e:56:ad:72:19:da:85:a0:5b:cb:18:f5:19:62:
         43:13:9f:ab:6b:41:74:f6:af:55:dd:71:2f:d5:0b:84:fa:07:
         f1:87:db:84:80:a8:a4:0c:de:ec:19:98:a2:b3:23:f4:c6:34:
         fc:1f:6b:fa:98:01:95:9e:d4:6b:29:26:05:b4:8a:4a:f4:c9:
         74:07:c4:2d:e9:45:0c:5b:94:c2:00:d7:e2:17:26:de:3c:ff:
         f1:cb:b9:5b:68:b3:be:fa:88:ae:2a:d8:67:6b:08:ef:43:6f:
         5a:f9:9b:e1:9d:91:71:22:9e:6e:84:53:5b:0e:95:c6:f6:73:
         cc:8d:18:4c:b8:fb:ec:2e:f7:76:2e:fc:16:92:87:4b:50:e7:
         36:e7:4f:4d:7b:de:0b:b5:a7:7f:3e:df:d9:38:bb:3a:2f:28:
         82:26:96:95
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIUVRGhlaepTRY6hss8jyTVL4zrhdMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMzExMDUwNDA0NTdaFw0yNDExMDMwNDA5NTdaMDMxMTAvBgNV
BAMTKDM4RUM4RTQ3NjM2NkJGNUVBRkY4MzlBRkU3OERBRjBCM0E2Q0Q2RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjNFMBiODmpIX8Mt9pOmIK+O8u
iudTsv97JEjTzYatVsx6yMgVMuKrmiLLgTuDVBhKtQh/YQV9z+VGjxcmrP05WE31
uMRi4QPoJ8WlDMjewCQjwT/aZU6e/j1E34ElaTeSOSxYizzgZgF4bvAVHRuBIvGp
N/snYWB5sCgMUdvyXIV/L9GHIuOXQhdLMx1DJ6j1xDND+heFr8B8ass5OuxhZXgl
MQP0IaTQ+XUU2V5sgM4FZ0k3QKyXzBL/Kz1fzagNpBMj86Ut58b6H8kxxZIDnRv+
jwkCJAfhJWmswkSvbVWn3z1o7NNvzAtRZgZlX8/7Su7cDRfQw9UuK5PSYr05AgMB
AAGjggLhMIIC3TAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ47I5HY2a/Xq/4
Oa/nja8LOmzW7zAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV
HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl
cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2
MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw
gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0
QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCCASQGCCsGAQUFBwEL
BIIBFjCCARIwTQYIKwYBBQUHMAWGQXJzeW5jOi8va3JpbGwuYWNjdXJpc3RlY2hu
b2xvZ2llcy5jYS9yZXBvL0FjY3VyaXMtVGVjaG5vbG9naWVzLzQvMHkGCCsGAQUF
BzAKhm1yc3luYzovL2tyaWxsLmFjY3VyaXN0ZWNobm9sb2dpZXMuY2EvcmVwby9B
Y2N1cmlzLVRlY2hub2xvZ2llcy80LzM4RUM4RTQ3NjM2NkJGNUVBRkY4MzlBRkU3
OERBRjBCM0E2Q0Q2RUYubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL2tyaWxsLmFj
Y3VyaXN0ZWNobm9sb2dpZXMuY2EvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgACMBgD
BgAqCmBAFQMGACoKYEBtAwYAKgpgQMUwDQYJKoZIhvcNAQELBQADggEBAIkPCEjb
eJA4KxHLSo8vCFIAEEyv1IL9W7OUvu94yIgi9MW6PXoUQ37Vt7hdlJ94/qSMfPSN
8UVo88jMxXjqzVNg21NWhBecfRd/VGMEgym6i8DqwnTMWXn+5PnO+2AuVq1yGdqF
oFvLGPUZYkMTn6trQXT2r1XdcS/VC4T6B/GH24SAqKQM3uwZmKKzI/TGNPwfa/qY
AZWe1GspJgW0ikr0yXQHxC3pRQxblMIA1+IXJt48//HLuVtos776iK4q2GdrCO9D
b1r5m+GdkXEinm6EU1sOlcb2c8yNGEy4++wu93Yu/BaSh0tQ5zbnT0173gu1p38+
39k4uzovKIImlpU=
-----END CERTIFICATE-----
Generated at Fri May 17 06:17:21 2024 by rpki-client on console-fra.rpki-client.org