Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
File:                     4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer (raw, json)
Hash identifier:          4V4EmC1SPSYXZCDhg96oFy03a7m+2HSpwqKntOvwXZM=
Subject key identifier:   48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       34037117D008460357043353107B7BF5AF544387
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 03 Jun 2024 08:41:44 +0000
Certificate not after:    Mon 02 Jun 2025 08:46:44 +0000
Subordinate resources:    IP: 2a05:dfc1:5f00::/40
                          IP: 2a05:dfc1:8e00::/40

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Sep 2024 14:28:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:03:71:17:d0:08:46:03:57:04:33:53:10:7b:7b:f5:af:54:43:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Jun  3 08:41:44 2024 GMT
            Not After : Jun  2 08:46:44 2025 GMT
        Subject: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:36:fd:c0:6e:8d:43:b5:50:70:f5:74:1f:90:
                    46:da:9a:c3:32:1e:9a:9b:7e:2b:53:20:44:63:ce:
                    d1:bb:c2:53:3e:02:5e:36:f4:54:8c:2f:e5:0e:e9:
                    75:50:eb:40:be:99:12:07:5a:c6:b9:1b:37:54:60:
                    7a:f9:b6:6a:2c:84:a0:85:b2:c9:09:b6:a5:0c:f9:
                    ab:91:81:be:2b:d2:5f:d9:62:a2:a6:71:b0:2a:5b:
                    f5:c0:cb:07:1c:de:d5:81:41:f6:26:24:4a:7e:9b:
                    6b:91:db:92:ac:3f:72:89:92:d2:99:13:c6:e6:ba:
                    6a:7a:22:63:16:91:70:fa:e0:06:14:50:cb:bb:e9:
                    77:04:80:e1:24:20:88:17:28:7c:2e:29:52:5f:41:
                    62:75:2e:ad:0a:62:2a:e6:b0:df:19:32:4e:25:ae:
                    e5:f6:c9:65:82:c1:37:e0:f4:a6:bf:70:fa:f0:66:
                    25:66:37:40:25:d6:21:07:cc:e1:31:69:79:82:7b:
                    10:1d:71:18:6b:76:99:f8:05:ea:82:0a:a1:5b:9f:
                    88:2c:d8:28:10:b9:29:fa:25:33:ae:50:a3:b9:47:
                    1a:be:dc:0f:2b:a0:b4:b2:ec:60:3b:e5:40:68:2e:
                    c4:72:d0:cf:39:9c:36:ce:63:53:02:c4:1d:b3:85:
                    7f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5f00::/40
                  2a05:dfc1:8e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         44:78:04:34:db:2e:ab:a6:e7:93:57:27:5c:b0:00:9e:86:10:
         55:2e:1d:b8:20:1a:91:1e:92:23:13:76:a9:bc:38:c0:2c:40:
         e7:d5:3d:ce:d0:59:ba:9a:73:1a:8b:d8:59:23:44:1e:69:37:
         ad:e7:b2:cb:5d:df:1a:51:dd:db:e4:95:f2:30:a2:8e:9b:b7:
         f4:60:21:b4:94:a4:d6:9e:72:7a:62:bd:a6:3c:c7:8a:97:6c:
         1e:84:bf:b6:76:66:ac:48:eb:2e:5f:07:d6:72:70:73:0a:71:
         9e:f6:be:39:25:10:3e:2f:2e:ce:2a:e6:68:a3:05:c6:d3:9a:
         00:3c:3a:60:54:f1:6d:ab:4c:f3:19:10:6f:b2:73:84:a5:cb:
         e7:f4:13:02:7e:4a:47:cc:ec:17:6b:c3:7c:50:63:c8:38:cb:
         b4:4d:d0:70:eb:45:74:2d:e0:95:44:45:ff:14:e8:15:22:1d:
         5a:40:28:23:3a:b0:6d:de:87:d1:ad:8e:0a:ca:39:46:0b:21:
         e9:a7:20:17:50:60:5e:34:df:6e:44:b5:e6:35:27:28:c6:c3:
         bd:51:2d:76:58:ee:92:05:61:72:10:18:38:f2:63:fd:d8:53:
         40:d5:77:cd:0e:89:87:aa:d9:6b:07:ad:c7:11:7e:b6:77:61:
         45:3b:ec:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 00:24:33 2024 by rpki-client on console-fra.rpki-client.org