$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/42CC538CA37931CF39A85418E983E932F716DF8A.cer File: 42CC538CA37931CF39A85418E983E932F716DF8A.cer (raw, json) Hash identifier: 35ii633QW95DnEw6hbhr3LpcC5kB9m5EzHa8n1fKKx0= Subject key identifier: 42:CC:53:8C:A3:79:31:CF:39:A8:54:18:E9:83:E9:32:F7:16:DF:8A Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 51D668BB7AC801B4FCE75DA851690F6C2B397410 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/0/42CC538CA37931CF39A85418E983E932F716DF8A.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 23 Jan 2024 01:35:48 +0000 Certificate not after: Tue 21 Jan 2025 01:40:48 +0000 Subordinate resources: IP: 2a05:dfc1:3500:: -- 2a05:dfc1:36ff:ffff:ffff:ffff:ffff:ffff Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 07:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:d6:68:bb:7a:c8:01:b4:fc:e7:5d:a8:51:69:0f:6c:2b:39:74:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Jan 23 01:35:48 2024 GMT Not After : Jan 21 01:40:48 2025 GMT Subject: CN=42CC538CA37931CF39A85418E983E932F716DF8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:3f:f1:b1:52:9d:58:9b:8a:a9:03:17:7c:c0: f5:5c:0f:74:67:75:2c:db:10:45:75:99:b8:68:db: fd:c6:c3:81:89:d8:81:34:a7:70:f9:3e:96:9a:d5: a1:d0:bc:5a:7d:5e:cd:86:17:a3:0b:bf:04:1d:0b: 95:b8:6a:dd:8b:4c:3b:fd:ce:67:9b:fb:b0:9d:43: 3f:55:cc:24:72:1e:34:ae:0e:46:23:85:69:56:df: 05:70:37:e5:cd:bc:5e:c4:ef:ea:19:9f:25:e6:ad: fc:ee:96:42:aa:b7:e8:83:72:e1:82:7e:ec:72:9c: 0c:62:6f:5a:ec:33:9f:ed:12:86:b9:3d:3f:c0:7f: 99:b1:a5:ad:2a:ce:26:1d:51:2b:92:a9:88:45:4d: b7:1b:d3:ac:2d:56:36:d9:e3:d2:cc:ac:b1:a6:be: cd:a3:5a:1a:48:1f:aa:85:3e:12:94:0a:6e:3d:67: 0e:7b:93:50:39:52:1c:a9:a5:91:9b:36:68:9a:e5: 7c:86:e0:08:5f:05:d2:1b:1b:83:3a:07:0e:8a:64: dc:95:77:ca:59:e8:e4:f5:ac:32:61:18:c9:a8:60: a4:78:5d:28:6f:92:f2:86:d8:83:0b:2a:a5:ff:11: 4c:82:05:00:e2:88:ae:27:84:dd:25:bc:fa:db:d6: 8b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 42:CC:53:8C:A3:79:31:CF:39:A8:54:18:E9:83:E9:32:F7:16:DF:8A X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/0/42CC538CA37931CF39A85418E983E932F716DF8A.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:3500::-2a05:dfc1:36ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption b1:29:71:a0:bc:a9:94:fa:50:20:8c:33:37:bc:0d:69:d4:22: 4e:7b:7d:45:d5:78:1e:e4:27:44:8e:54:f0:67:ae:5f:c1:63: 32:23:b9:ed:7d:8a:b8:e9:8f:2a:6b:7d:7f:6f:33:bb:86:f0: 7c:f8:97:1e:fe:39:e7:70:d6:a5:04:91:73:56:30:12:ac:f6: de:63:f9:3e:89:a8:5e:89:b9:15:6e:38:1c:d3:9c:38:5a:7e: 82:ae:bc:8a:ef:20:9a:29:17:c6:7c:91:d7:b1:6d:07:b9:7f: 9f:5c:69:ee:c9:a0:8d:c8:41:dc:00:88:14:e9:20:8b:1a:60: 0f:01:5b:bd:ba:10:d0:45:b1:ff:ab:bf:bf:e7:95:7d:a2:69: a9:fc:be:42:5a:bb:fe:40:f0:12:a9:92:5e:08:03:ea:7c:9d: 31:ea:23:ba:bb:e9:17:61:de:1b:cb:52:3e:d1:00:7d:91:e5: b9:66:21:04:49:88:56:ff:ff:74:33:32:bd:ec:59:f6:ce:51: 62:43:97:50:01:44:71:fc:d8:b3:36:29:fe:14:2e:4e:d5:6a: 00:88:3a:82:84:fe:91:3d:dc:4b:9a:25:5f:58:f8:6c:d9:e4: 07:0c:32:3f:40:1b:61:df:e6:40:34:b6:37:3e:04:35:81:42: 00:03:82:cb -----BEGIN CERTIFICATE----- MIIF7DCCBNSgAwIBAgIUUdZou3rIAbT8512oUWkPbCs5dBAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDAxMjMwMTM1NDhaFw0yNTAxMjEwMTQwNDhaMDMxMTAvBgNV BAMTKDQyQ0M1MzhDQTM3OTMxQ0YzOUE4NTQxOEU5ODNFOTMyRjcxNkRGOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnP/GxUp1Ym4qpAxd8wPVcD3Rn dSzbEEV1mbho2/3Gw4GJ2IE0p3D5Ppaa1aHQvFp9Xs2GF6MLvwQdC5W4at2LTDv9 zmeb+7CdQz9VzCRyHjSuDkYjhWlW3wVwN+XNvF7E7+oZnyXmrfzulkKqt+iDcuGC fuxynAxib1rsM5/tEoa5PT/Af5mxpa0qziYdUSuSqYhFTbcb06wtVjbZ49LMrLGm vs2jWhpIH6qFPhKUCm49Zw57k1A5UhyppZGbNmia5XyG4AhfBdIbG4M6Bw6KZNyV d8pZ6OT1rDJhGMmoYKR4XShvkvKG2IMLKqX/EUyCBQDiiK4nhN0lvPrb1osZAgMB AAGjggL2MIIC8jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRCzFOMo3kxzzmo VBjpg+ky9xbfijAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2 MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0 QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvMjJhODA2ODItYzU0Yy00ZDVhLTk0NTYtYjIzOTI1 MzA5NzMyLzAvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS8yMmE4MDY4Mi1jNTRjLTRkNWEtOTQ1Ni1iMjM5 MjUzMDk3MzIvMC80MkNDNTM4Q0EzNzkzMUNGMzlBODU0MThFOTgzRTkzMkY3MTZE RjhBLm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw KwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIwEAMGACoF38E1AwYAKgXfwTYwDQYJ KoZIhvcNAQELBQADggEBALEpcaC8qZT6UCCMMze8DWnUIk57fUXVeB7kJ0SOVPBn rl/BYzIjue19irjpjyprfX9vM7uG8Hz4lx7+Oedw1qUEkXNWMBKs9t5j+T6JqF6J uRVuOBzTnDhafoKuvIrvIJopF8Z8kdexbQe5f59cae7JoI3IQdwAiBTpIIsaYA8B W726ENBFsf+rv7/nlX2iaan8vkJau/5A8BKpkl4IA+p8nTHqI7q76Rdh3hvLUj7R AH2R5blmIQRJiFb//3QzMr3sWfbOUWJDl1ABRHH82LM2Kf4ULk7VagCIOoKE/pE9 3EuaJV9Y+GzZ5AcMMj9AG2Hf5kA0tjc+BDWBQgADgss= -----END CERTIFICATE-----Generated at Mon May 20 12:06:23 2024 by rpki-client on console-ams.rpki-client.org