Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/459DC6DCC4C4CF34B975D3A9DF186A1DE00FE00A.cer
File:                     459DC6DCC4C4CF34B975D3A9DF186A1DE00FE00A.cer (raw, json)
Hash identifier:          3KIh55bAxgVW3PhjMl2Kvy2cC6kKPAuabKd+SiQR19M=
Subject key identifier:   45:9D:C6:DC:C4:C4:CF:34:B9:75:D3:A9:DF:18:6A:1D:E0:0F:E0:0A
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       7465462DA91115D72370A0451AE79FABF8E33D60
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Manifest:                 rsync://cloudie-repo.rpki.app/repo/XODOTECH/0/459DC6DCC4C4CF34B975D3A9DF186A1DE00FE00A.mft
caRepository:             rsync://cloudie-repo.rpki.app/repo/XODOTECH/0/
Notify URL:               https://cloudie.rpki.app/rrdp/notification.xml
Certificate not before:   Thu 19 Dec 2024 09:49:29 +0000
Certificate not after:    Thu 18 Dec 2025 09:54:29 +0000
Subordinate resources:    IP: 2a06:9f80::/29
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Feb 2025 20:07:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:65:46:2d:a9:11:15:d7:23:70:a0:45:1a:e7:9f:ab:f8:e3:3d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 19 09:49:29 2024 GMT
            Not After : Dec 18 09:54:29 2025 GMT
        Subject: CN=459DC6DCC4C4CF34B975D3A9DF186A1DE00FE00A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d1:03:d6:1a:41:57:2c:fe:78:12:2f:06:88:
                    be:c4:a5:eb:00:90:3f:39:95:28:63:50:37:dd:8e:
                    90:b6:c7:cd:4e:4e:82:a9:fc:1a:76:d8:c2:08:a9:
                    b6:56:14:b5:95:24:df:5a:5e:99:10:a3:18:b6:56:
                    52:63:27:d1:f7:7a:3f:71:ab:a4:1e:55:17:aa:c5:
                    92:50:3b:d3:f4:6a:c3:b0:86:e8:d3:b5:11:9a:50:
                    ee:3c:3b:64:49:e9:99:bc:93:7b:44:be:48:c6:a0:
                    70:72:93:87:ab:a9:53:e3:0b:fa:71:22:25:26:2b:
                    8e:df:a0:28:20:8e:a9:8a:d4:26:27:c2:9e:f6:89:
                    23:63:56:7e:cd:65:07:2c:41:e9:9e:19:ae:5a:bb:
                    3d:94:70:63:78:9d:d1:3a:4b:c2:5b:8d:62:92:c6:
                    8b:82:08:fe:21:f1:fa:88:65:50:b5:ed:84:7c:f1:
                    ea:d3:54:0e:31:b6:35:17:4e:84:fb:9a:32:1a:1b:
                    2a:21:ec:15:f1:e6:f5:0c:00:8f:c9:26:da:8f:95:
                    1d:4d:4d:76:07:28:36:5a:eb:10:61:94:08:45:87:
                    bb:0f:7f:a8:e5:b0:e5:ce:fe:61:56:6a:a6:fc:ac:
                    8b:ef:a7:d8:2d:00:ad:80:6a:e7:2f:c7:85:b0:17:
                    d2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                45:9D:C6:DC:C4:C4:CF:34:B9:75:D3:A9:DF:18:6A:1D:E0:0F:E0:0A
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                CA Repository - URI:rsync://cloudie-repo.rpki.app/repo/XODOTECH/0/
                RPKI Manifest - URI:rsync://cloudie-repo.rpki.app/repo/XODOTECH/0/459DC6DCC4C4CF34B975D3A9DF186A1DE00FE00A.mft
                RPKI Notify - URI:https://cloudie.rpki.app/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f80::/29

    Signature Algorithm: sha256WithRSAEncryption
         b1:38:1d:cf:15:43:4a:f6:27:0a:44:93:ea:29:dd:fc:32:ff:
         f1:31:94:55:02:08:a8:15:2a:76:5b:a0:09:7f:4a:0e:55:74:
         21:f7:0c:8d:3d:cb:74:ab:a7:df:85:c2:fe:40:94:6c:5c:c3:
         8d:8d:38:95:5f:88:de:46:06:36:a2:6a:5b:f5:00:10:98:e5:
         f9:86:e2:09:14:20:7c:34:55:24:a9:dd:81:cb:b0:58:7d:2a:
         d0:c8:92:31:75:73:30:69:f5:fd:a1:5d:d5:7c:53:38:7f:05:
         02:1e:8b:77:19:ac:6f:d5:c0:93:d8:3e:d6:9a:92:e0:21:47:
         34:a1:0a:c4:ca:10:7e:d7:72:ae:4d:6a:a6:04:17:9a:d5:82:
         f5:fc:04:4e:3f:69:71:6c:28:e2:58:3e:ff:39:32:c4:47:90:
         2b:9a:0e:6c:4c:d5:11:8d:ef:36:4e:83:2b:41:28:95:d9:b4:
         1b:8f:3c:ce:41:45:87:75:60:9d:19:fc:f9:ba:28:aa:06:f8:
         a5:e9:36:ca:73:d0:38:f7:67:2e:3e:f4:ee:c3:65:ef:0b:63:
         c1:20:cd:88:a4:7b:53:0d:b4:2a:21:51:ec:51:03:3b:7c:66:
         38:d8:67:50:8b:2e:c0:d9:5c:b6:24:da:ae:98:4b:8d:92:0e:
         c9:15:ed:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:46:35 2025 by rpki-client