$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer File: 3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer (raw, json) Hash identifier: fzoi1cgni8ByuM9Q4sPChkdOlsdddOamGDFdcbj3WzE= Subject key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 206A8C3B45388BAC023677C8EFF26B9F90BC0859 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Manifest: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft caRepository: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/ Notify URL: https://rpki-01.pdxnet.uk/rrdp/notification.xml Certificate not before: Tue 09 Apr 2024 20:20:24 +0000 Certificate not after: Tue 08 Apr 2025 20:25:24 +0000 Subordinate resources: IP: 2a05:dfc1:400::/39 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 02 May 2024 00:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:6a:8c:3b:45:38:8b:ac:02:36:77:c8:ef:f2:6b:9f:90:bc:08:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Apr 9 20:20:24 2024 GMT Not After : Apr 8 20:25:24 2025 GMT Subject: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d1:4e:37:ef:d5:75:b5:b0:2c:3a:97:15:a3: 30:69:66:34:86:98:c4:46:58:54:3d:2d:94:46:3e: 9c:1d:4b:51:45:15:45:76:ac:72:46:c5:8d:66:a1: 41:71:6f:ff:19:37:36:40:1d:51:9e:f3:56:15:49: c6:aa:dd:ad:68:dd:61:13:e0:e7:21:ea:50:6d:60: 4b:f5:e6:ad:45:ac:29:14:99:cb:e3:d9:d6:f1:aa: ff:bf:90:3e:a8:ac:5d:44:1d:d8:75:b9:22:18:47: 9e:8c:00:d8:fe:95:96:65:82:15:fd:21:0f:8d:14: 79:b7:d7:31:3f:10:20:87:ff:64:87:20:e3:5f:f5: 64:e7:a9:f1:7d:7a:58:2b:cf:d0:df:01:82:7b:98: 5d:58:7b:36:37:3b:18:5d:1b:2e:51:81:0b:de:b2: 74:c2:d7:96:04:76:79:72:df:78:fc:47:6d:33:42: 2e:d6:50:f5:e9:f9:cd:b6:ae:fb:d3:f5:b7:4d:8d: 7b:8b:c4:4a:5c:12:28:2e:fc:fd:dc:a0:aa:79:00: b3:c5:49:ce:e5:e2:e0:79:ba:da:5d:93:38:9c:4f: 8f:ce:c6:66:db:ee:4b:49:38:56:e6:df:69:56:69: 82:b9:43:fa:39:27:07:8b:04:c0:f9:eb:9e:40:a2: 5c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: CA Repository - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/ RPKI Manifest - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft RPKI Notify - URI:https://rpki-01.pdxnet.uk/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:400::/39 Signature Algorithm: sha256WithRSAEncryption 9f:a1:c3:2b:f7:aa:2b:a7:dc:b2:ae:a1:f1:a2:c0:eb:a5:8f: a7:14:41:91:45:f6:db:7b:91:e2:52:28:dd:14:06:d8:9c:a3: b2:c5:d6:57:42:51:e8:2c:bf:0a:00:fe:6d:27:60:5c:e4:a4: b7:bc:10:29:99:ef:cd:7c:46:b9:21:e6:e9:d8:e7:d0:93:33: 5e:11:ae:aa:97:83:bd:ea:bf:7b:d8:3b:94:6c:ab:1a:2f:5c: 10:45:f1:be:b6:68:0d:41:fa:e6:bd:df:9a:75:91:3e:14:21: fd:a6:3a:1e:8b:37:1a:34:ce:cf:0d:8e:3a:d6:df:88:28:31: fb:f3:2a:f3:0d:83:d6:4d:aa:3e:74:62:43:05:9c:c3:b5:a4: c8:1e:8a:f7:f8:e4:4d:29:6a:be:0a:92:68:ee:93:b9:fd:da: d5:e0:2d:bd:85:74:3c:99:24:76:c5:15:cd:44:f4:ab:e9:a9: ad:26:4f:5d:62:b4:07:a1:05:50:dd:93:5f:08:a4:08:04:95: 12:b4:c1:59:61:eb:79:60:0a:7f:6e:9d:8e:06:9c:ad:0f:f5: 0a:f1:6e:2e:4b:9f:a6:41:b5:75:f0:47:7f:f5:cf:ad:de:63: b5:b2:29:3b:d5:5a:60:2d:d0:cc:3e:c3:20:75:1d:8f:96:5f: de:2b:24:7a -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgIUIGqMO0U4i6wCNnfI7/Jrn5C8CFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDA0MDkyMDIwMjRaFw0yNTA0MDgyMDI1MjRaMDMxMTAvBgNV BAMTKDNDNUZFOUQ2QThGREVCQkNEOEVGQkQ0MDI4MEIyODdBMUNEQjJBNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD0U4379V1tbAsOpcVozBpZjSG mMRGWFQ9LZRGPpwdS1FFFUV2rHJGxY1moUFxb/8ZNzZAHVGe81YVScaq3a1o3WET 4Och6lBtYEv15q1FrCkUmcvj2dbxqv+/kD6orF1EHdh1uSIYR56MANj+lZZlghX9 IQ+NFHm31zE/ECCH/2SHIONf9WTnqfF9elgrz9DfAYJ7mF1YezY3OxhdGy5RgQve snTC15YEdnly33j8R20zQi7WUPXp+c22rvvT9bdNjXuLxEpcEigu/P3coKp5ALPF Sc7l4uB5utpdkzicT4/Oxmbb7ktJOFbm32lWaYK5Q/o5JweLBMD5655AolxPAgMB AAGjggKjMIICnzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ8X+nWqP3rvNjv vUAoCyh6HNsqVjAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2 MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0 QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCB9wYIKwYBBQUHAQsE geowgecwPQYIKwYBBQUHMAWGMXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVw by9wYXJhZG94bmV0d29ya3MvMS8waQYIKwYBBQUHMAqGXXJzeW5jOi8vcnBraS0w MS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3MvMS8zQzVGRTlENkE4RkRF QkJDRDhFRkJENDAyODBCMjg3QTFDREIyQTU2Lm1mdDA7BggrBgEFBQcwDYYvaHR0 cHM6Ly9ycGtpLTAxLnBkeG5ldC51ay9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw CAMGASoF38EEMA0GCSqGSIb3DQEBCwUAA4IBAQCfocMr96orp9yyrqHxosDrpY+n FEGRRfbbe5HiUijdFAbYnKOyxdZXQlHoLL8KAP5tJ2Bc5KS3vBApme/NfEa5Iebp 2OfQkzNeEa6ql4O96r972DuUbKsaL1wQRfG+tmgNQfrmvd+adZE+FCH9pjoeizca NM7PDY461t+IKDH78yrzDYPWTao+dGJDBZzDtaTIHor3+ORNKWq+CpJo7pO5/drV 4C29hXQ8mSR2xRXNRPSr6amtJk9dYrQHoQVQ3ZNfCKQIBJUStMFZYet5YAp/bp2O BpytD/UK8W4uS5+mQbV18Ed/9c+t3mO1sik71VpgLdDMPsMgdR2Pll/eKyR6 -----END CERTIFICATE-----Generated at Wed May 1 12:16:01 2024 by rpki-client on console-ams.rpki-client.org