Certificate
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
File: 3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer (raw, json)
Hash identifier: 3kjs2QeEi4YDrObc7wx9KfUSgIzTOdGcajniguySsPQ=
Subject key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial: 63AAF22B0A772149ACAE84EB3431F4709BD55698
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Manifest: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
caRepository: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/
Notify URL: https://rpki-01.pdxnet.uk/rrdp/notification.xml
Certificate not before: Tue 11 Mar 2025 23:38:50 +0000
Certificate not after: Tue 10 Mar 2026 23:43:50 +0000
Subordinate resources: IP: 2a05:dfc1:400::/39
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 20:36:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:aa:f2:2b:0a:77:21:49:ac:ae:84:eb:34:31:f4:70:9b:d5:56:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Validity
Not Before: Mar 11 23:38:50 2025 GMT
Not After : Mar 10 23:43:50 2026 GMT
Subject: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d1:4e:37:ef:d5:75:b5:b0:2c:3a:97:15:a3:
30:69:66:34:86:98:c4:46:58:54:3d:2d:94:46:3e:
9c:1d:4b:51:45:15:45:76:ac:72:46:c5:8d:66:a1:
41:71:6f:ff:19:37:36:40:1d:51:9e:f3:56:15:49:
c6:aa:dd:ad:68:dd:61:13:e0:e7:21:ea:50:6d:60:
4b:f5:e6:ad:45:ac:29:14:99:cb:e3:d9:d6:f1:aa:
ff:bf:90:3e:a8:ac:5d:44:1d:d8:75:b9:22:18:47:
9e:8c:00:d8:fe:95:96:65:82:15:fd:21:0f:8d:14:
79:b7:d7:31:3f:10:20:87:ff:64:87:20:e3:5f:f5:
64:e7:a9:f1:7d:7a:58:2b:cf:d0:df:01:82:7b:98:
5d:58:7b:36:37:3b:18:5d:1b:2e:51:81:0b:de:b2:
74:c2:d7:96:04:76:79:72:df:78:fc:47:6d:33:42:
2e:d6:50:f5:e9:f9:cd:b6:ae:fb:d3:f5:b7:4d:8d:
7b:8b:c4:4a:5c:12:28:2e:fc:fd:dc:a0:aa:79:00:
b3:c5:49:ce:e5:e2:e0:79:ba:da:5d:93:38:9c:4f:
8f:ce:c6:66:db:ee:4b:49:38:56:e6:df:69:56:69:
82:b9:43:fa:39:27:07:8b:04:c0:f9:eb:9e:40:a2:
5c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
X509v3 Authority Key Identifier:
keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/
RPKI Manifest - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
RPKI Notify - URI:https://rpki-01.pdxnet.uk/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:400::/39
Signature Algorithm: sha256WithRSAEncryption
bb:e8:e3:6a:f1:d1:58:3b:73:db:b6:50:a7:fd:fc:e8:ab:d9:
b1:35:dc:67:23:21:01:41:f2:95:02:6a:f9:fa:8f:1c:87:87:
61:d0:9f:a5:4d:b8:90:07:0d:dc:0e:78:7c:ed:d3:84:bc:ac:
b2:d7:9e:e1:e1:97:7b:54:61:2c:f8:c4:6e:64:99:7d:88:48:
8b:14:49:56:3b:c4:87:3d:d2:3e:11:4a:63:6e:11:52:fa:c9:
99:f5:93:8b:a9:19:18:f0:6c:2d:a8:a5:04:a3:bc:e4:91:d9:
b3:b4:83:15:80:d4:1e:cc:a5:54:18:b9:0d:4c:a7:a0:ce:72:
dd:de:8d:0d:2f:d5:b9:be:cc:eb:ed:08:9f:64:60:95:00:73:
77:76:6f:fe:c7:15:a4:72:f3:a1:28:8e:c5:4b:4e:d5:eb:5f:
81:35:a9:17:e5:35:47:96:84:de:6d:32:52:c2:be:d5:cb:de:
70:6a:0c:22:b9:f3:50:cd:87:e4:ff:4d:3a:66:50:8e:c1:a3:
ed:40:d0:21:af:26:ce:ff:a1:22:7c:d2:b5:4a:b0:f7:f2:79:
8d:63:a2:cb:f2:75:24:3f:a8:cd:c7:ab:2c:52:ce:c0:8a:38:
1c:42:c6:90:81:5f:3f:62:fc:ff:5a:35:43:3e:a0:36:3a:a1:
e4:08:c8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:28:06 2025 by rpki-client