$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.cer File: 3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.cer (raw, json) Hash identifier: 4TTOIP60KtItva9C7kvuiCFqaSwU6NhKQGHlLz3+hXY= Subject key identifier: 3D:0D:05:11:0F:2F:8F:23:22:DC:87:EE:C8:66:71:D6:F3:BA:86:84 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 2BE4245BBFCE48C9683B676B83321A37DFAE3E87 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Manifest: rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.mft caRepository: rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/ Notify URL: https://cloudie.rpki.app/rrdp/notification.xml Certificate not before: Sun 05 Nov 2023 13:06:38 +0000 Certificate not after: Sun 03 Nov 2024 13:11:38 +0000 Subordinate resources: IP: 2a0a:6040:b100::/40 IP: 2a0a:6040:ed00::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 09 May 2024 17:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:e4:24:5b:bf:ce:48:c9:68:3b:67:6b:83:32:1a:37:df:ae:3e:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 13:06:38 2023 GMT Not After : Nov 3 13:11:38 2024 GMT Subject: CN=3D0D05110F2F8F2322DC87EEC86671D6F3BA8684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cc:db:18:d4:59:bb:68:8c:90:76:8e:a1:d9: 9f:d6:e0:56:ea:15:45:6b:f0:da:9b:da:43:f3:08: 00:e2:21:3d:75:32:95:ca:a4:75:80:74:d5:c7:e6: ac:cf:70:8b:87:02:d5:2a:47:30:1b:54:c1:be:3f: 82:77:b4:0a:d8:a5:60:39:86:c7:b2:92:99:2b:17: ca:fd:76:7d:65:55:96:91:40:cf:93:7d:ff:4c:16: b7:6e:f1:a2:9f:60:c6:45:d2:89:13:2f:a9:ca:74: e0:18:18:fb:5c:14:18:1c:7e:29:59:62:c7:33:6f: e8:1a:12:c5:6f:31:93:73:18:a3:6c:42:19:8d:1a: 0a:d8:ae:51:03:17:fa:e2:b6:77:30:34:41:b4:16: 98:4e:4d:d3:62:c9:60:69:83:88:8c:71:5d:d5:c0: ff:7b:72:80:8e:d4:36:3c:55:69:fe:1a:ea:17:f9: cd:f2:0c:ef:91:ec:37:8a:2a:c5:72:ac:79:39:f6: 41:93:1c:78:e2:80:0a:a4:42:a1:15:97:51:b1:8a: 59:90:4c:19:2d:3a:58:fe:43:59:c1:de:48:d1:43: 74:4c:19:21:2c:5c:f3:db:70:89:f2:19:df:08:32: dc:57:80:6a:4d:8f:01:8b:f2:82:5e:8e:79:dd:54: ce:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3D:0D:05:11:0F:2F:8F:23:22:DC:87:EE:C8:66:71:D6:F3:BA:86:84 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: CA Repository - URI:rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/ RPKI Manifest - URI:rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.mft RPKI Notify - URI:https://cloudie.rpki.app/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:b100::/40 2a0a:6040:ed00::/40 Signature Algorithm: sha256WithRSAEncryption 83:ad:56:22:ea:7f:39:27:d5:ea:55:19:54:fe:a3:35:72:3d: da:2c:f8:47:3d:2d:2e:40:6e:69:dc:e5:d6:a2:21:55:8a:e6: dd:ad:3a:1c:61:49:df:fc:15:b2:d8:46:ab:c2:93:62:d1:44: 59:0a:0c:b1:0e:7f:68:46:e9:35:af:38:e0:6f:7c:eb:36:da: 4b:be:4f:77:a8:62:ce:e5:1f:1f:2e:90:09:0f:d4:63:a3:9b: a8:ad:b1:bc:0c:45:ab:6e:ea:dc:0b:1c:c4:e3:73:56:8e:b4: 53:14:e1:7f:57:b7:68:18:c6:64:e8:fc:38:7e:ba:23:72:d9: 3f:6f:20:55:93:ae:6b:44:8d:44:68:99:97:ac:43:ff:84:77: a9:f9:f5:29:d6:64:74:3d:9a:4f:2e:b2:15:b9:bf:6b:e3:1d: df:95:18:55:dd:2f:60:ff:af:45:23:7f:a4:44:32:08:e4:9e: cb:7e:d5:55:42:5a:bc:29:8d:58:42:16:9b:8f:c8:69:ca:52: 2c:f6:8c:b4:ef:36:48:69:62:c1:07:86:fb:9b:5b:32:13:e0: 7a:58:40:67:06:00:e6:34:7a:23:6a:47:96:34:bb:e7:1c:4b: 3f:2a:d5:60:4a:f6:b7:50:97:16:dc:47:2b:8c:fe:d8:c4:2f: ea:3f:5a:42 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUK+QkW7/OSMloO2drgzIaN9+uPocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUxMzA2MzhaFw0yNDExMDMxMzExMzhaMDMxMTAvBgNV BAMTKDNEMEQwNTExMEYyRjhGMjMyMkRDODdFRUM4NjY3MUQ2RjNCQTg2ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTzNsY1Fm7aIyQdo6h2Z/W4Fbq FUVr8Nqb2kPzCADiIT11MpXKpHWAdNXH5qzPcIuHAtUqRzAbVMG+P4J3tArYpWA5 hseykpkrF8r9dn1lVZaRQM+Tff9MFrdu8aKfYMZF0okTL6nKdOAYGPtcFBgcfilZ Ysczb+gaEsVvMZNzGKNsQhmNGgrYrlEDF/ritncwNEG0FphOTdNiyWBpg4iMcV3V wP97coCO1DY8VWn+GuoX+c3yDO+R7DeKKsVyrHk59kGTHHjigAqkQqEVl1GxilmQ TBktOlj+Q1nB3kjRQ3RMGSEsXPPbcInyGd8IMtxXgGpNjwGL8oJejnndVM59AgMB AAGjggKoMIICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ9DQURDy+PIyLc h+7IZnHW87qGhDAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2 MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0 QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCB9AYIKwYBBQUHAQsE gecwgeQwPAYIKwYBBQUHMAWGMHJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBw L3JlcG8vU1ZFTlMtUlBLSS8wLzBoBggrBgEFBQcwCoZccnN5bmM6Ly9jbG91ZGll LXJlcG8ucnBraS5hcHAvcmVwby9TVkVOUy1SUEtJLzAvM0QwRDA1MTEwRjJGOEYy MzIyREM4N0VFQzg2NjcxRDZGM0JBODY4NC5tZnQwOgYIKwYBBQUHMA2GLmh0dHBz Oi8vY2xvdWRpZS5ycGtpLmFwcC9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjApBggrBgEFBQcBBwEB/wQaMBgwFgQCAAIwEAMG ACoKYECxAwYAKgpgQO0wDQYJKoZIhvcNAQELBQADggEBAIOtViLqfzkn1epVGVT+ ozVyPdos+Ec9LS5Abmnc5daiIVWK5t2tOhxhSd/8FbLYRqvCk2LRRFkKDLEOf2hG 6TWvOOBvfOs22ku+T3eoYs7lHx8ukAkP1GOjm6itsbwMRatu6twLHMTjc1aOtFMU 4X9Xt2gYxmTo/Dh+uiNy2T9vIFWTrmtEjURomZesQ/+Ed6n59SnWZHQ9mk8ushW5 v2vjHd+VGFXdL2D/r0Ujf6REMgjknst+1VVCWrwpjVhCFpuPyGnKUiz2jLTvNkhp YsEHhvubWzIT4HpYQGcGAOY0eiNqR5Y0u+ccSz8q1WBK9rdQlxbcRyuM/tjEL+o/ WkI= -----END CERTIFICATE-----Generated at Thu May 9 10:21:31 2024 by rpki-client on console-fra.rpki-client.org