$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3F0AC25D352C83DA8307594B98ED061BE8489682.cer File: 3F0AC25D352C83DA8307594B98ED061BE8489682.cer (raw, json) Hash identifier: MlA65+j12jGnweE02/Jtx0bS4My9hlNUvCnnLkttg3Q= Subject key identifier: 3F:0A:C2:5D:35:2C:83:DA:83:07:59:4B:98:ED:06:1B:E8:48:96:82 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 1BB2BC73282BDF373663CE96AE7264DD286DEA4E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Manifest: rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/3F0AC25D352C83DA8307594B98ED061BE8489682.mft caRepository: rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2 Notify URL: https://rpki-publication.haruue.net/rrdp/notification.xml Certificate not before: Wed 06 Dec 2023 08:05:51 +0000 Certificate not after: Wed 04 Dec 2024 08:10:51 +0000 Subordinate resources: IP: 2a0a:6040:2d00::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 07:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:b2:bc:73:28:2b:df:37:36:63:ce:96:ae:72:64:dd:28:6d:ea:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Dec 6 08:05:51 2023 GMT Not After : Dec 4 08:10:51 2024 GMT Subject: CN=3F0AC25D352C83DA8307594B98ED061BE8489682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:33:8f:2f:84:29:71:85:28:0a:54:1f:b1:69: 9a:cc:6b:c5:b8:ac:84:2c:9d:dc:56:f6:67:13:29: 1e:3d:dc:a7:da:f0:df:d1:7f:00:e4:18:29:65:08: 26:c2:2c:fd:8e:51:c4:24:2b:51:ec:60:d1:a8:ae: a4:9d:d2:a2:82:ee:2f:1c:24:8e:76:8e:41:78:b4: d3:c8:de:a9:9e:90:34:ce:9b:65:84:37:51:34:38: 99:51:89:7a:f2:e0:9a:13:a3:10:24:0b:9d:7c:83: 86:8c:fe:c9:da:93:e7:da:d5:11:d0:65:49:b1:e2: 32:59:c4:f2:15:13:b2:30:29:29:5b:f8:48:80:3c: cf:65:20:24:a5:20:ac:6c:69:76:c7:85:f5:65:9e: d4:8c:ee:0a:ec:a0:5a:5f:24:16:7b:6b:49:e5:98: 31:9e:58:94:52:93:5b:6a:63:1a:44:15:f9:ed:48: 26:d5:75:d0:52:2e:c6:eb:d8:ca:5b:6e:91:73:e9: d7:22:25:c1:e9:ee:8a:91:9e:1d:57:94:af:53:c2: 5c:31:24:62:5b:8d:d1:b1:40:f6:d2:b6:b6:85:95: b3:28:1c:f8:e5:96:a6:a6:95:e6:82:e0:8a:d8:84: 53:39:53:bc:a0:b5:42:5e:ca:65:3f:ad:49:f0:55: 13:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3F:0A:C2:5D:35:2C:83:DA:83:07:59:4B:98:ED:06:1B:E8:48:96:82 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: CA Repository - URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2 RPKI Manifest - URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/3F0AC25D352C83DA8307594B98ED061BE8489682.mft RPKI Notify - URI:https://rpki-publication.haruue.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:2d00::/40 Signature Algorithm: sha256WithRSAEncryption 37:60:8e:c3:b3:63:d5:e8:09:55:db:75:8d:f9:1d:2a:1a:e4: 41:1c:73:90:21:48:65:08:a4:7b:29:e0:69:8d:99:31:3b:43: 92:f9:d5:77:65:6f:8c:47:f5:c8:c5:de:fa:b6:58:96:99:2c: 18:fc:a5:af:fb:1e:49:7e:c6:ac:79:41:a0:3e:0e:2e:d2:df: dd:a3:2d:4b:44:ca:27:66:52:82:64:e7:22:f2:cc:9b:9e:b3: 0b:8b:e7:5b:a3:8d:5d:00:a3:b7:51:53:1e:00:9b:73:32:08: c3:e3:03:91:df:25:f5:bb:6b:ee:53:47:5b:e4:92:15:51:73: 60:50:79:14:27:c0:47:1a:4f:23:11:4a:1a:c8:76:cf:6a:72: 00:87:03:f8:99:1c:3b:1a:dd:de:19:68:0c:6b:71:21:3a:ed: 3b:3f:ae:b9:3a:a8:c5:f5:b4:48:9c:42:b0:57:51:8c:ef:f3: f4:32:c2:df:95:7f:d8:8c:1d:05:45:97:69:6c:7d:d9:5c:72: 28:84:9e:3f:af:37:6a:b0:d1:39:ae:6d:88:c4:c0:11:88:52: 22:e0:fc:5b:4c:cc:0b:1a:5c:56:b7:47:7a:92:4a:83:00:84: 74:1d:86:63:84:71:02:ea:a8:95:16:38:43:b0:9f:69:ae:db: 33:82:91:13 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUG7K8cygr3zc2Y86WrnJk3Sht6k4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzEyMDYwODA1NTFaFw0yNDEyMDQwODEwNTFaMDMxMTAvBgNV BAMTKDNGMEFDMjVEMzUyQzgzREE4MzA3NTk0Qjk4RUQwNjFCRTg0ODk2ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7M48vhClxhSgKVB+xaZrMa8W4 rIQsndxW9mcTKR493Kfa8N/RfwDkGCllCCbCLP2OUcQkK1HsYNGorqSd0qKC7i8c JI52jkF4tNPI3qmekDTOm2WEN1E0OJlRiXry4JoToxAkC518g4aM/snak+fa1RHQ ZUmx4jJZxPIVE7IwKSlb+EiAPM9lICSlIKxsaXbHhfVlntSM7grsoFpfJBZ7a0nl mDGeWJRSk1tqYxpEFfntSCbVddBSLsbr2MpbbpFz6dciJcHp7oqRnh1XlK9Twlwx JGJbjdGxQPbStraFlbMoHPjllqamleaC4IrYhFM5U7ygtUJeymU/rUnwVRMPAgMB AAGjggK3MIICszAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ/CsJdNSyD2oMH WUuY7QYb6EiWgjAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2 MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0 QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCCAQoGCCsGAQUFBwEL BIH9MIH6MEEGCCsGAQUFBzAFhjVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5oYXJ1 dWUubmV0L3JlcG8vWUMzMjU0LVJQS0kvMjBuBggrBgEFBQcwCoZicnN5bmM6Ly9y cGtpLXJlcG9zaXRvcnkuaGFydXVlLm5ldC9yZXBvL1lDMzI1NC1SUEtJLzIvM0Yw QUMyNUQzNTJDODNEQTgzMDc1OTRCOThFRDA2MUJFODQ4OTY4Mi5tZnQwRQYIKwYB BQUHMA2GOWh0dHBzOi8vcnBraS1wdWJsaWNhdGlvbi5oYXJ1dWUubmV0L3JyZHAv bm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQC0wDQYJKoZIhvcNAQELBQADggEB ADdgjsOzY9XoCVXbdY35HSoa5EEcc5AhSGUIpHsp4GmNmTE7Q5L51Xdlb4xH9cjF 3vq2WJaZLBj8pa/7Hkl+xqx5QaA+Di7S392jLUtEyidmUoJk5yLyzJueswuL51uj jV0Ao7dRUx4Am3MyCMPjA5HfJfW7a+5TR1vkkhVRc2BQeRQnwEcaTyMRShrIds9q cgCHA/iZHDsa3d4ZaAxrcSE67Ts/rrk6qMX1tEicQrBXUYzv8/Qywt+Vf9iMHQVF l2lsfdlcciiEnj+vN2qw0TmubYjEwBGIUiLg/FtMzAsaXFa3R3qSSoMAhHQdhmOE cQLqqJUWOEOwn2mu2zOCkRM= -----END CERTIFICATE-----Generated at Mon May 20 12:06:23 2024 by rpki-client on console-ams.rpki-client.org