Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/469D308DBBB88444EF4530905C6C6D40559ADF4D.cer
File:                     469D308DBBB88444EF4530905C6C6D40559ADF4D.cer (raw, json)
Hash identifier:          dRiKkiBEIi19ILdKYi73ka2wxGkVRsmOcIYVV3C0Y6g=
Subject key identifier:   46:9D:30:8D:BB:B8:84:44:EF:45:30:90:5C:6C:6D:40:55:9A:DF:4D
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       0A2F313973D273EF4CC7B239A34A8886F32A6184
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/3/469D308DBBB88444EF4530905C6C6D40559ADF4D.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/3/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Thu 31 Oct 2024 08:46:31 +0000
Certificate not after:    Thu 30 Oct 2025 08:51:31 +0000
Subordinate resources:    IP: 2a06:9f85:: -- 2a06:9f86:ffff:ffff:ffff:ffff:ffff:ffff

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:2f:31:39:73:d2:73:ef:4c:c7:b2:39:a3:4a:88:86:f3:2a:61:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Oct 31 08:46:31 2024 GMT
            Not After : Oct 30 08:51:31 2025 GMT
        Subject: CN=469D308DBBB88444EF4530905C6C6D40559ADF4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7c:18:81:f4:d4:f2:8c:e5:e7:5d:35:55:7c:
                    f5:3e:aa:b4:25:dc:57:62:7e:7c:d5:5f:9b:f0:c1:
                    60:9b:97:db:5d:7d:97:65:af:c2:37:14:86:0a:ca:
                    5b:22:20:fd:25:52:d1:70:f3:4d:b2:74:c0:19:9d:
                    3b:a8:89:d6:b3:da:93:74:cf:2e:43:ff:f8:ff:d2:
                    1e:b8:5a:91:4e:7a:fc:08:a9:e9:a3:a2:2c:54:56:
                    37:ad:22:29:c7:31:28:63:90:12:d3:c8:88:3e:c9:
                    c3:5c:56:2b:68:d5:35:d9:bc:94:e3:8e:e6:8f:09:
                    70:cf:83:7c:b8:e7:01:4a:08:ee:3a:7f:e0:be:ba:
                    10:04:39:02:1f:04:e1:58:8c:ad:df:68:09:03:c3:
                    66:b8:ee:f5:89:c3:f5:55:fc:3b:4e:5a:00:45:73:
                    db:3e:07:13:90:02:69:70:f6:1f:08:ae:c7:9b:e5:
                    cb:e8:49:b4:06:9b:32:79:95:92:8e:48:7b:75:44:
                    6b:a3:71:6a:92:b0:e4:1c:b2:41:bd:fe:41:6a:07:
                    b1:93:d9:d2:56:cf:f1:8e:fb:4a:65:71:46:32:a3:
                    64:b1:86:53:06:71:6c:b1:b7:a4:95:aa:b2:11:a1:
                    d5:35:29:2d:3a:0d:40:8d:e4:f7:94:f3:9c:fc:3a:
                    0e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                46:9D:30:8D:BB:B8:84:44:EF:45:30:90:5C:6C:6D:40:55:9A:DF:4D
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/3/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/3/469D308DBBB88444EF4530905C6C6D40559ADF4D.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f85::-2a06:9f86:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         4d:84:0d:22:44:aa:9d:d3:45:ea:0b:6e:84:64:3b:44:ea:01:
         46:f5:38:a3:b7:93:5a:fc:f8:ec:4a:44:37:96:05:15:7e:96:
         5d:53:1c:e5:6e:82:ff:7c:2a:aa:c3:de:88:7b:48:79:e0:83:
         df:35:d2:64:ed:ab:56:7c:5b:9f:8c:49:03:cf:28:38:46:ce:
         28:2b:eb:eb:3b:d8:e9:5e:ab:63:44:a4:d0:4f:41:46:72:6b:
         94:93:a0:9b:65:d0:7d:71:7d:d8:ca:22:d6:2a:d1:84:7d:06:
         9e:46:f3:df:cf:20:f8:7c:58:d6:d4:91:a6:f0:5d:dd:88:ea:
         13:ab:14:44:4e:45:11:82:d2:e5:a0:69:36:9c:20:d8:86:8d:
         74:6d:fe:c8:fd:6e:7c:a6:13:32:79:e2:7a:9e:f8:b0:df:ac:
         fd:8a:e7:35:c0:2c:61:92:ce:eb:c4:2d:d3:93:a9:23:da:5c:
         d9:71:eb:5e:d7:c4:61:7a:13:bd:af:1a:f1:4b:20:a1:0a:94:
         1d:af:dc:a4:8c:61:e2:f5:13:a4:60:9b:5c:89:30:1a:bb:6b:
         4b:01:50:c3:dd:85:6a:23:53:6a:cb:ec:0a:6a:ab:c8:3b:6f:
         41:52:be:0a:b9:06:7c:11:b1:0c:57:58:3d:df:b2:c5:6b:ab:
         1c:61:db:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:54 2024 by rpki-client on console-ams.rpki-client.org