$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3F0AC25D352C83DA8307594B98ED061BE8489682.cer File: 3F0AC25D352C83DA8307594B98ED061BE8489682.cer (raw, json) Hash identifier: NILXWsRB0+6UX4tTLzt5OpPSB39zXavXEBOThCwEnUs= Subject key identifier: 3F:0A:C2:5D:35:2C:83:DA:83:07:59:4B:98:ED:06:1B:E8:48:96:82 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 783BA629A626A21AA8E361C8DCF4D8B242411EA2 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Manifest: rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/3F0AC25D352C83DA8307594B98ED061BE8489682.mft caRepository: rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/ Notify URL: https://rpki-publication.haruue.net/rrdp/notification.xml Certificate not before: Wed 06 Nov 2024 08:47:49 +0000 Certificate not after: Wed 05 Nov 2025 08:52:49 +0000 Subordinate resources: IP: 2a0a:6040:2d00::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:3b:a6:29:a6:26:a2:1a:a8:e3:61:c8:dc:f4:d8:b2:42:41:1e:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 6 08:47:49 2024 GMT Not After : Nov 5 08:52:49 2025 GMT Subject: CN=3F0AC25D352C83DA8307594B98ED061BE8489682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:33:8f:2f:84:29:71:85:28:0a:54:1f:b1:69: 9a:cc:6b:c5:b8:ac:84:2c:9d:dc:56:f6:67:13:29: 1e:3d:dc:a7:da:f0:df:d1:7f:00:e4:18:29:65:08: 26:c2:2c:fd:8e:51:c4:24:2b:51:ec:60:d1:a8:ae: a4:9d:d2:a2:82:ee:2f:1c:24:8e:76:8e:41:78:b4: d3:c8:de:a9:9e:90:34:ce:9b:65:84:37:51:34:38: 99:51:89:7a:f2:e0:9a:13:a3:10:24:0b:9d:7c:83: 86:8c:fe:c9:da:93:e7:da:d5:11:d0:65:49:b1:e2: 32:59:c4:f2:15:13:b2:30:29:29:5b:f8:48:80:3c: cf:65:20:24:a5:20:ac:6c:69:76:c7:85:f5:65:9e: d4:8c:ee:0a:ec:a0:5a:5f:24:16:7b:6b:49:e5:98: 31:9e:58:94:52:93:5b:6a:63:1a:44:15:f9:ed:48: 26:d5:75:d0:52:2e:c6:eb:d8:ca:5b:6e:91:73:e9: d7:22:25:c1:e9:ee:8a:91:9e:1d:57:94:af:53:c2: 5c:31:24:62:5b:8d:d1:b1:40:f6:d2:b6:b6:85:95: b3:28:1c:f8:e5:96:a6:a6:95:e6:82:e0:8a:d8:84: 53:39:53:bc:a0:b5:42:5e:ca:65:3f:ad:49:f0:55: 13:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3F:0A:C2:5D:35:2C:83:DA:83:07:59:4B:98:ED:06:1B:E8:48:96:82 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: CA Repository - URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2 RPKI Manifest - URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/3F0AC25D352C83DA8307594B98ED061BE8489682.mft RPKI Notify - URI:https://rpki-publication.haruue.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:2d00::/40 Signature Algorithm: sha256WithRSAEncryption 02:f8:b2:23:37:16:72:33:79:39:ec:20:b5:0f:d7:7c:04:6b: 79:08:6e:92:ba:73:34:7e:e9:f8:32:49:65:f6:52:e1:fb:f7: b5:10:27:36:65:f7:e9:4c:dc:88:f4:f4:ae:b8:1c:b7:52:d1: af:09:af:a7:2c:3d:6a:1d:3a:6e:4b:61:e1:76:ae:ff:3f:06: 3c:7c:4a:6f:7a:0b:3f:83:8b:0c:d3:cd:0c:15:74:ee:92:e7: d7:ef:72:57:f3:6d:82:e8:cd:8b:dc:2d:12:90:60:e3:77:1c: 81:3d:19:30:d5:51:33:a5:02:71:6a:d3:a9:4b:af:de:68:67: cb:54:04:45:0e:22:a3:3e:71:f6:e9:db:93:c3:a2:5b:25:7c: 0b:a1:54:4e:0f:07:74:9f:c0:ff:fd:0e:5e:0e:10:de:02:f6: af:11:8d:03:3e:38:25:66:65:12:83:15:ce:2f:66:c7:50:92: f3:c9:67:b4:a1:b6:ea:bf:c7:6e:37:75:0d:44:ae:3f:60:de: f1:4e:f2:13:11:ac:af:16:f6:cc:56:5f:16:7d:eb:64:63:ad: 03:5f:35:a8:9d:1b:c9:47:d4:b1:30:34:1b:e6:76:4c:c7:62: a1:6d:97:40:1e:8e:92:35:69:1b:bf:3c:64:71:04:90:8c:dd: 01:66:7f:26 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUeDumKaYmohqo42HI3PTYskJBHqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDExMDYwODQ3NDlaFw0yNTExMDUwODUyNDlaMDMxMTAvBgNV BAMTKDNGMEFDMjVEMzUyQzgzREE4MzA3NTk0Qjk4RUQwNjFCRTg0ODk2ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7M48vhClxhSgKVB+xaZrMa8W4 rIQsndxW9mcTKR493Kfa8N/RfwDkGCllCCbCLP2OUcQkK1HsYNGorqSd0qKC7i8c JI52jkF4tNPI3qmekDTOm2WEN1E0OJlRiXry4JoToxAkC518g4aM/snak+fa1RHQ ZUmx4jJZxPIVE7IwKSlb+EiAPM9lICSlIKxsaXbHhfVlntSM7grsoFpfJBZ7a0nl mDGeWJRSk1tqYxpEFfntSCbVddBSLsbr2MpbbpFz6dciJcHp7oqRnh1XlK9Twlwx JGJbjdGxQPbStraFlbMoHPjllqamleaC4IrYhFM5U7ygtUJeymU/rUnwVRMPAgMB AAGjggK3MIICszAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ/CsJdNSyD2oMH WUuY7QYb6EiWgjAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2 MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0 QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCCAQoGCCsGAQUFBwEL BIH9MIH6MEEGCCsGAQUFBzAFhjVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5oYXJ1 dWUubmV0L3JlcG8vWUMzMjU0LVJQS0kvMjBuBggrBgEFBQcwCoZicnN5bmM6Ly9y cGtpLXJlcG9zaXRvcnkuaGFydXVlLm5ldC9yZXBvL1lDMzI1NC1SUEtJLzIvM0Yw QUMyNUQzNTJDODNEQTgzMDc1OTRCOThFRDA2MUJFODQ4OTY4Mi5tZnQwRQYIKwYB BQUHMA2GOWh0dHBzOi8vcnBraS1wdWJsaWNhdGlvbi5oYXJ1dWUubmV0L3JyZHAv bm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQC0wDQYJKoZIhvcNAQELBQADggEB AAL4siM3FnIzeTnsILUP13wEa3kIbpK6czR+6fgySWX2UuH797UQJzZl9+lM3Ij0 9K64HLdS0a8Jr6csPWodOm5LYeF2rv8/Bjx8Sm96Cz+DiwzTzQwVdO6S59fvclfz bYLozYvcLRKQYON3HIE9GTDVUTOlAnFq06lLr95oZ8tUBEUOIqM+cfbp25PDolsl fAuhVE4PB3SfwP/9Dl4OEN4C9q8RjQM+OCVmZRKDFc4vZsdQkvPJZ7Shtuq/x243 dQ1Erj9g3vFO8hMRrK8W9sxWXxZ962RjrQNfNaidG8lH1LEwNBvmdkzHYqFtl0Ae jpI1aRu/PGRxBJCM3QFmfyY= -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:54 2024 by rpki-client on console-ams.rpki-client.org