$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer File: 53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer (raw, json) Hash identifier: DOTWSGfGAKx4CoJjXPq3WS7tWoztGvtxvYdplXNs58o= Subject key identifier: 53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 2B67BABD315957A517A92EC8BC229DE0F4E2F03C Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Mon 06 Nov 2023 13:14:17 +0000 Certificate not after: Mon 04 Nov 2024 13:19:17 +0000 Subordinate resources: IP: 2a05:dfc1:9500::/40 IP: 2a0a:6040:4900::/40 IP: 2a0a:6040:5400::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 07:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:67:ba:bd:31:59:57:a5:17:a9:2e:c8:bc:22:9d:e0:f4:e2:f0:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 6 13:14:17 2023 GMT Not After : Nov 4 13:19:17 2024 GMT Subject: CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:75:4f:b2:ff:01:04:fc:91:d6:d3:89:19:d4: 0c:f3:9c:1e:15:3c:a6:30:52:01:a8:c1:aa:69:72: dc:f2:34:b5:85:da:d2:da:ef:a8:6f:db:47:7c:22: c2:75:3f:14:e3:19:cc:26:36:76:a4:6e:34:66:89: 50:e1:65:5d:5b:23:8f:00:f7:ab:03:49:a9:be:be: 9d:c7:1d:4b:13:af:5d:81:53:96:a1:c4:c4:fa:11: 0c:5a:cd:e7:67:a0:66:9f:24:eb:82:d0:ba:d9:81: b8:f3:9f:61:d5:f9:85:f6:12:e6:60:94:45:75:c0: 3c:19:f7:de:f9:5b:4e:97:04:16:c2:3f:19:78:8a: 45:ed:f0:f3:ff:d0:7a:cf:6b:75:da:33:8a:cc:ce: c2:68:21:39:10:ad:36:aa:82:30:72:aa:67:96:be: cf:ba:76:c6:98:55:8b:a7:ba:96:80:a1:9e:0b:8d: a6:b2:e8:1c:bb:ab:f1:87:62:80:f9:76:ca:9e:d0: a8:e4:ba:f0:ee:48:a2:c5:b1:16:11:58:87:7f:41: 11:ed:3c:3a:b7:82:8b:a5:1f:3a:1b:1c:e0:50:a8: 6c:82:92:2d:37:6c:4f:1d:a6:8e:ef:9b:98:bd:61: 44:e2:75:6b:3d:b9:7b:b6:0b:36:8d:4e:7b:f8:2a: 20:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:9500::/40 2a0a:6040:4900::/40 2a0a:6040:5400::/40 Signature Algorithm: sha256WithRSAEncryption 31:23:35:1a:1b:79:5b:e7:7a:54:57:69:2e:bd:8f:b1:1c:fc: 23:19:09:a3:2c:e0:23:2b:b5:d1:81:93:55:80:b3:fa:f1:ef: f7:15:4a:e1:4b:31:19:b2:0a:70:04:0f:11:ac:1b:e4:c0:92: 80:f0:ca:d5:71:80:81:af:66:b3:ad:e1:82:90:79:96:9b:5c: 89:8f:51:a6:1f:1d:a8:83:5d:e6:7a:af:88:78:2b:a2:17:9e: 0c:5b:26:8a:af:f2:7d:9d:ac:ad:63:32:61:77:0f:cf:2a:8f: 46:83:b3:36:b6:4b:00:d4:68:56:4e:a0:8a:a6:37:f4:f4:d4: f9:6e:78:47:28:c8:b8:f9:03:33:21:28:31:41:8a:6a:93:8b: 92:e1:e8:2c:4d:df:63:ba:bb:05:30:a2:e4:2d:c1:78:00:57: 96:e6:4f:68:72:50:cc:a6:44:82:3e:f7:2f:c9:e2:26:1c:d2: f4:18:7d:75:aa:2b:55:ae:6a:15:3f:d6:06:3e:ae:89:0d:db: 3e:4d:59:d8:80:c7:0a:89:dc:a7:a1:ab:0e:3d:9c:1b:11:50: 28:96:67:a4:40:a8:e6:5f:b3:e1:5f:a6:e2:1d:1c:ad:27:e2: d3:52:8d:1a:3e:cd:0e:25:3d:f6:e4:fc:06:fc:20:f0:a6:4d: 94:9a:fb:5e -----BEGIN CERTIFICATE----- MIIF8jCCBNqgAwIBAgIUK2e6vTFZV6UXqS7IvCKd4PTi8DwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDYxMzE0MTdaFw0yNDExMDQxMzE5MTdaMDMxMTAvBgNV BAMTKDUzQkFCOEE5RjgzMzc4OUIzNTNEMkFDQzE1Q0UzNzI3MEUzRDYwRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIdU+y/wEE/JHW04kZ1AzznB4V PKYwUgGowappctzyNLWF2tLa76hv20d8IsJ1PxTjGcwmNnakbjRmiVDhZV1bI48A 96sDSam+vp3HHUsTr12BU5ahxMT6EQxazednoGafJOuC0LrZgbjzn2HV+YX2EuZg lEV1wDwZ9975W06XBBbCPxl4ikXt8PP/0HrPa3XaM4rMzsJoITkQrTaqgjByqmeW vs+6dsaYVYunupaAoZ4Ljaay6By7q/GHYoD5dsqe0KjkuvDuSKLFsRYRWId/QRHt PDq3goulHzobHOBQqGyCki03bE8dpo7vm5i9YUTidWs9uXu2CzaNTnv4KiDPAgMB AAGjggL8MIIC+DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRTurip+DN4mzU9 KswVzjcnDj1g4zAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2 MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0 QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3 OGE3Y2EzLzAvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS8wMTc5MWE2NC1hMzZhLTRlYjktYTZmZi1lMWM0 MDc4YTdjYTMvMC81M0JBQjhBOUY4MzM3ODlCMzUzRDJBQ0MxNUNFMzcyNzBFM0Q2 MEUzLm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw MQYIKwYBBQUHAQcBAf8EIjAgMB4EAgACMBgDBgAqBd/BlQMGACoKYEBJAwYAKgpg QFQwDQYJKoZIhvcNAQELBQADggEBADEjNRobeVvnelRXaS69j7Ec/CMZCaMs4CMr tdGBk1WAs/rx7/cVSuFLMRmyCnAEDxGsG+TAkoDwytVxgIGvZrOt4YKQeZabXImP UaYfHaiDXeZ6r4h4K6IXngxbJoqv8n2drK1jMmF3D88qj0aDsza2SwDUaFZOoIqm N/T01PlueEcoyLj5AzMhKDFBimqTi5Lh6CxN32O6uwUwouQtwXgAV5bmT2hyUMym RII+9y/J4iYc0vQYfXWqK1WuahU/1gY+rokN2z5NWdiAxwqJ3Kehqw49nBsRUCiW Z6RAqOZfs+FfpuIdHK0n4tNSjRo+zQ4lPfbk/Ab8IPCmTZSa+14= -----END CERTIFICATE-----Generated at Mon May 20 12:06:23 2024 by rpki-client on console-ams.rpki-client.org