$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/42CC538CA37931CF39A85418E983E932F716DF8A.cer File: 42CC538CA37931CF39A85418E983E932F716DF8A.cer (raw, json) Hash identifier: uuzJtAgABDXYprcOZZih031wOQSPiabAuCEY9l94G6E= Subject key identifier: 42:CC:53:8C:A3:79:31:CF:39:A8:54:18:E9:83:E9:32:F7:16:DF:8A Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 08778BEFABDD8B281B38105F4492A9738238CE99 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/0/42CC538CA37931CF39A85418E983E932F716DF8A.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 24 Dec 2024 14:13:29 +0000 Certificate not after: Tue 23 Dec 2025 14:18:29 +0000 Subordinate resources: IP: 2a05:dfc1:3500:: -- 2a05:dfc1:36ff:ffff:ffff:ffff:ffff:ffff Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 02:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:77:8b:ef:ab:dd:8b:28:1b:38:10:5f:44:92:a9:73:82:38:ce:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Dec 24 14:13:29 2024 GMT Not After : Dec 23 14:18:29 2025 GMT Subject: CN=42CC538CA37931CF39A85418E983E932F716DF8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:3f:f1:b1:52:9d:58:9b:8a:a9:03:17:7c:c0: f5:5c:0f:74:67:75:2c:db:10:45:75:99:b8:68:db: fd:c6:c3:81:89:d8:81:34:a7:70:f9:3e:96:9a:d5: a1:d0:bc:5a:7d:5e:cd:86:17:a3:0b:bf:04:1d:0b: 95:b8:6a:dd:8b:4c:3b:fd:ce:67:9b:fb:b0:9d:43: 3f:55:cc:24:72:1e:34:ae:0e:46:23:85:69:56:df: 05:70:37:e5:cd:bc:5e:c4:ef:ea:19:9f:25:e6:ad: fc:ee:96:42:aa:b7:e8:83:72:e1:82:7e:ec:72:9c: 0c:62:6f:5a:ec:33:9f:ed:12:86:b9:3d:3f:c0:7f: 99:b1:a5:ad:2a:ce:26:1d:51:2b:92:a9:88:45:4d: b7:1b:d3:ac:2d:56:36:d9:e3:d2:cc:ac:b1:a6:be: cd:a3:5a:1a:48:1f:aa:85:3e:12:94:0a:6e:3d:67: 0e:7b:93:50:39:52:1c:a9:a5:91:9b:36:68:9a:e5: 7c:86:e0:08:5f:05:d2:1b:1b:83:3a:07:0e:8a:64: dc:95:77:ca:59:e8:e4:f5:ac:32:61:18:c9:a8:60: a4:78:5d:28:6f:92:f2:86:d8:83:0b:2a:a5:ff:11: 4c:82:05:00:e2:88:ae:27:84:dd:25:bc:fa:db:d6: 8b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 42:CC:53:8C:A3:79:31:CF:39:A8:54:18:E9:83:E9:32:F7:16:DF:8A X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/0/42CC538CA37931CF39A85418E983E932F716DF8A.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:3500::-2a05:dfc1:36ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 26:a0:7c:22:a7:34:1e:13:c0:48:2a:76:25:27:bc:aa:42:db: 39:70:9d:73:b0:2d:96:30:8f:4d:d8:cc:15:7e:45:50:d9:b0: 9a:be:6e:8e:6f:db:d6:06:3e:ac:73:43:22:02:e1:cd:43:3e: 37:d5:3d:68:6c:b3:f4:ae:ac:45:e0:49:05:1a:41:84:61:87: 82:3f:bc:71:f7:24:da:21:49:8e:90:ec:de:08:0f:04:fc:7c: fd:d9:9a:78:21:3b:af:22:a7:a9:e1:3d:19:bf:46:99:19:68: 63:5f:73:df:d3:4a:a9:3e:8f:3d:b8:36:1f:54:76:c2:52:ce: b1:a6:35:2a:cc:03:64:4c:9b:d4:99:58:95:7c:8e:aa:b8:96: be:5b:aa:e3:7d:f4:1c:e2:94:55:e4:df:aa:cb:6d:c6:c7:2d: 7a:e3:92:f6:8a:2d:5d:b5:97:cf:85:78:c0:b9:33:e6:68:1c: d1:8f:ce:02:67:0a:00:2f:df:65:57:2e:40:4f:81:8a:ac:8b: eb:80:04:54:ab:40:25:17:b2:e8:76:7b:ec:45:7e:81:fc:ec: cd:ee:76:57:fd:21:bb:99:1d:3c:2c:55:1a:a8:b3:5a:c4:c3: 42:69:57:83:82:0c:39:5e:82:6f:9d:33:a2:f3:17:d1:d4:c7: 5b:80:b4:73 -----BEGIN CERTIFICATE----- MIIF7DCCBNSgAwIBAgIUCHeL76vdiygbOBBfRJKpc4I4zpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEyMjQxNDEzMjlaFw0yNTEyMjMxNDE4MjlaMDMxMTAvBgNV BAMTKDQyQ0M1MzhDQTM3OTMxQ0YzOUE4NTQxOEU5ODNFOTMyRjcxNkRGOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnP/GxUp1Ym4qpAxd8wPVcD3Rn dSzbEEV1mbho2/3Gw4GJ2IE0p3D5Ppaa1aHQvFp9Xs2GF6MLvwQdC5W4at2LTDv9 zmeb+7CdQz9VzCRyHjSuDkYjhWlW3wVwN+XNvF7E7+oZnyXmrfzulkKqt+iDcuGC fuxynAxib1rsM5/tEoa5PT/Af5mxpa0qziYdUSuSqYhFTbcb06wtVjbZ49LMrLGm vs2jWhpIH6qFPhKUCm49Zw57k1A5UhyppZGbNmia5XyG4AhfBdIbG4M6Bw6KZNyV d8pZ6OT1rDJhGMmoYKR4XShvkvKG2IMLKqX/EUyCBQDiiK4nhN0lvPrb1osZAgMB AAGjggL2MIIC8jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRCzFOMo3kxzzmo VBjpg+ky9xbfijAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2 MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0 QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvMjJhODA2ODItYzU0Yy00ZDVhLTk0NTYtYjIzOTI1 MzA5NzMyLzAvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS8yMmE4MDY4Mi1jNTRjLTRkNWEtOTQ1Ni1iMjM5 MjUzMDk3MzIvMC80MkNDNTM4Q0EzNzkzMUNGMzlBODU0MThFOTgzRTkzMkY3MTZE RjhBLm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw KwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIwEAMGACoF38E1AwYAKgXfwTYwDQYJ KoZIhvcNAQELBQADggEBACagfCKnNB4TwEgqdiUnvKpC2zlwnXOwLZYwj03YzBV+ RVDZsJq+bo5v29YGPqxzQyIC4c1DPjfVPWhss/SurEXgSQUaQYRhh4I/vHH3JNoh SY6Q7N4IDwT8fP3ZmnghO68ip6nhPRm/RpkZaGNfc9/TSqk+jz24Nh9UdsJSzrGm NSrMA2RMm9SZWJV8jqq4lr5bquN99BzilFXk36rLbcbHLXrjkvaKLV21l8+FeMC5 M+ZoHNGPzgJnCgAv32VXLkBPgYqsi+uABFSrQCUXsuh2e+xFfoH87M3udlf9IbuZ HTwsVRqos1rEw0JpV4OCDDlegm+dM6LzF9HUx1uAtHM= -----END CERTIFICATE-----Generated at Fri Apr 4 17:07:10 2025 by rpki-client