$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer File: 53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer (raw, json) Hash identifier: gcpLKmiuNldGmkjtVTJqCvGaMMJ17FHryraK+xCdY8A= Subject key identifier: 53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 22E1284D08FE20BA34C1286F58A0C76E2EE45775 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 08 Oct 2024 12:45:12 +0000 Certificate not after: Tue 07 Oct 2025 12:50:12 +0000 Subordinate resources: IP: 2a05:dfc1:9500::/40 IP: 2a0a:6040:4900::/40 IP: 2a0a:6040:5400::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e1:28:4d:08:fe:20:ba:34:c1:28:6f:58:a0:c7:6e:2e:e4:57:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 8 12:45:12 2024 GMT Not After : Oct 7 12:50:12 2025 GMT Subject: CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:75:4f:b2:ff:01:04:fc:91:d6:d3:89:19:d4: 0c:f3:9c:1e:15:3c:a6:30:52:01:a8:c1:aa:69:72: dc:f2:34:b5:85:da:d2:da:ef:a8:6f:db:47:7c:22: c2:75:3f:14:e3:19:cc:26:36:76:a4:6e:34:66:89: 50:e1:65:5d:5b:23:8f:00:f7:ab:03:49:a9:be:be: 9d:c7:1d:4b:13:af:5d:81:53:96:a1:c4:c4:fa:11: 0c:5a:cd:e7:67:a0:66:9f:24:eb:82:d0:ba:d9:81: b8:f3:9f:61:d5:f9:85:f6:12:e6:60:94:45:75:c0: 3c:19:f7:de:f9:5b:4e:97:04:16:c2:3f:19:78:8a: 45:ed:f0:f3:ff:d0:7a:cf:6b:75:da:33:8a:cc:ce: c2:68:21:39:10:ad:36:aa:82:30:72:aa:67:96:be: cf:ba:76:c6:98:55:8b:a7:ba:96:80:a1:9e:0b:8d: a6:b2:e8:1c:bb:ab:f1:87:62:80:f9:76:ca:9e:d0: a8:e4:ba:f0:ee:48:a2:c5:b1:16:11:58:87:7f:41: 11:ed:3c:3a:b7:82:8b:a5:1f:3a:1b:1c:e0:50:a8: 6c:82:92:2d:37:6c:4f:1d:a6:8e:ef:9b:98:bd:61: 44:e2:75:6b:3d:b9:7b:b6:0b:36:8d:4e:7b:f8:2a: 20:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:9500::/40 2a0a:6040:4900::/40 2a0a:6040:5400::/40 Signature Algorithm: sha256WithRSAEncryption 44:be:0c:82:44:cd:ed:ca:b3:6e:4a:49:4c:e4:3a:f1:bd:98: a0:56:5c:37:fa:fb:b9:ce:be:69:3b:86:45:c7:be:d5:5f:59: a5:18:18:55:68:ec:eb:99:bc:ff:41:f1:d3:b9:56:80:98:2b: 95:2c:87:bf:a8:ed:38:e4:d9:d6:04:58:e6:36:9c:0e:04:79: 30:c2:96:2f:77:4d:21:8b:c9:76:04:6c:10:3e:e7:4b:81:6d: 0b:4f:18:58:0c:23:a7:67:78:1c:93:7d:bb:47:8f:fa:c0:99: d2:93:88:5f:75:cf:d7:36:ca:f0:90:ba:04:55:a2:2a:ea:0f: 04:f9:6e:fc:24:e5:2f:4b:22:12:44:b9:8a:78:84:8f:bc:14: 89:fb:c3:8e:8d:10:4e:3c:fa:1f:43:ef:8e:f5:19:22:65:9b: 34:3b:66:29:70:1e:06:d7:14:6a:d3:12:07:dc:5d:96:aa:da: 38:d4:20:59:e4:6e:1a:56:bb:cd:b2:c4:83:71:1e:55:8f:b5: 85:c8:55:db:85:c8:6c:3f:fb:4f:db:e7:6f:45:8f:ac:20:a6: d8:4c:c6:f9:15:2b:6f:e0:28:98:0c:60:89:02:5e:6e:71:90: 94:cd:6e:eb:1c:0f:42:1f:11:79:81:7c:2b:66:3b:f8:6e:3e: 59:87:3f:40 -----BEGIN CERTIFICATE----- MIIF8jCCBNqgAwIBAgIUIuEoTQj+ILo0wShvWKDHbi7kV3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDgxMjQ1MTJaFw0yNTEwMDcxMjUwMTJaMDMxMTAvBgNV BAMTKDUzQkFCOEE5RjgzMzc4OUIzNTNEMkFDQzE1Q0UzNzI3MEUzRDYwRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIdU+y/wEE/JHW04kZ1AzznB4V PKYwUgGowappctzyNLWF2tLa76hv20d8IsJ1PxTjGcwmNnakbjRmiVDhZV1bI48A 96sDSam+vp3HHUsTr12BU5ahxMT6EQxazednoGafJOuC0LrZgbjzn2HV+YX2EuZg lEV1wDwZ9975W06XBBbCPxl4ikXt8PP/0HrPa3XaM4rMzsJoITkQrTaqgjByqmeW vs+6dsaYVYunupaAoZ4Ljaay6By7q/GHYoD5dsqe0KjkuvDuSKLFsRYRWId/QRHt PDq3goulHzobHOBQqGyCki03bE8dpo7vm5i9YUTidWs9uXu2CzaNTnv4KiDPAgMB AAGjggL8MIIC+DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRTurip+DN4mzU9 KswVzjcnDj1g4zAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2 MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0 QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3 OGE3Y2EzLzAvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS8wMTc5MWE2NC1hMzZhLTRlYjktYTZmZi1lMWM0 MDc4YTdjYTMvMC81M0JBQjhBOUY4MzM3ODlCMzUzRDJBQ0MxNUNFMzcyNzBFM0Q2 MEUzLm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw MQYIKwYBBQUHAQcBAf8EIjAgMB4EAgACMBgDBgAqBd/BlQMGACoKYEBJAwYAKgpg QFQwDQYJKoZIhvcNAQELBQADggEBAES+DIJEze3Ks25KSUzkOvG9mKBWXDf6+7nO vmk7hkXHvtVfWaUYGFVo7OuZvP9B8dO5VoCYK5Ush7+o7Tjk2dYEWOY2nA4EeTDC li93TSGLyXYEbBA+50uBbQtPGFgMI6dneByTfbtHj/rAmdKTiF91z9c2yvCQugRV oirqDwT5bvwk5S9LIhJEuYp4hI+8FIn7w46NEE48+h9D7471GSJlmzQ7ZilwHgbX FGrTEgfcXZaq2jjUIFnkbhpWu82yxINxHlWPtYXIVduFyGw/+0/b529Fj6wgpthM xvkVK2/gKJgMYIkCXm5xkJTNbuscD0IfEXmBfCtmO/huPlmHP0A= -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:45 2024 by rpki-client on console-fra.rpki-client.org