$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer File: 5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer (raw, json) Hash identifier: jTQusH1VXAV9Ei/MFVBsmLE0LIVk5Dq8MQ715lxFc0A= Subject key identifier: 5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 77F4CEC1543EFDEBADC434044A8999569E8271DF Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 15 Sep 2023 08:31:24 +0000 Certificate not after: Fri 13 Sep 2024 08:36:24 +0000 Subordinate resources: IP: 2a05:dfc1:5f00::/40 IP: 2a05:dfc1:8e00::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 07:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:f4:ce:c1:54:3e:fd:eb:ad:c4:34:04:4a:89:99:56:9e:82:71:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Sep 15 08:31:24 2023 GMT Not After : Sep 13 08:36:24 2024 GMT Subject: CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bd:97:d1:15:12:7a:79:4d:b1:fb:4c:02:a4: 7f:81:66:e3:08:71:d5:38:1c:28:51:9d:31:c1:ae: 1c:58:52:c0:3a:53:73:31:c4:73:3d:69:a9:ac:4a: ae:cb:63:e1:94:8b:50:fb:b5:ca:91:da:2b:67:be: bc:7f:40:93:4d:51:b2:4c:40:b3:67:6d:4c:b7:ee: ed:bb:be:8b:2f:f6:41:7f:43:94:31:e2:65:71:fd: bc:36:8a:91:4a:8a:84:55:30:36:fa:e9:bc:62:35: fc:da:de:8a:51:e7:cd:a4:44:04:dd:32:de:64:77: 11:a0:bc:bd:81:9a:f7:c9:bc:50:57:12:e9:2d:bb: f3:ee:2a:8c:db:79:6b:19:1a:e7:1a:18:51:b0:af: a5:49:46:82:29:3b:e3:38:ba:14:c6:7c:ff:6e:0c: 52:16:86:6e:6b:09:07:c3:96:3d:f2:c4:3a:e1:5d: 34:5c:4a:af:ca:c2:3a:7e:de:85:d3:cd:5d:3f:17: 79:0a:ef:4e:3c:5d:64:ae:12:46:da:ab:24:c9:00: 78:a2:ef:fd:ef:50:96:db:b2:33:0c:f2:a7:a0:13: e0:dd:d7:b1:24:96:2b:4e:33:d3:2f:78:ac:23:2b: d3:9d:1d:b5:57:b8:b5:84:0b:cd:87:cd:dc:3e:b0: 8b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5f00::/40 2a05:dfc1:8e00::/40 Signature Algorithm: sha256WithRSAEncryption a7:da:39:42:9e:26:76:c0:f7:9a:13:50:87:fd:17:57:1f:85: 6e:c5:ed:93:d2:41:0a:5b:e5:70:ec:9d:28:06:62:88:db:c8: 70:9b:ac:05:8d:94:1c:32:44:9c:8d:4c:26:78:c8:ee:51:62: 06:78:ef:8f:1b:ea:ab:62:5b:f1:69:88:16:45:bc:95:09:70: 36:af:4d:80:a2:52:e1:a0:85:a1:71:16:37:ad:b8:ca:4f:20: 22:a3:83:94:af:2a:8f:61:05:8d:2a:ae:6a:98:aa:60:5e:f0: a1:b6:6b:7a:a3:4a:60:07:26:92:90:d3:d2:b8:c8:04:ba:f0: 35:3d:60:75:67:50:d2:5b:61:f5:eb:9d:73:82:e1:d2:3d:54: e8:63:0a:cf:1a:e8:7a:47:9a:07:1f:fb:45:87:cf:17:4e:dc: 88:2f:5d:e4:fe:6b:84:fe:96:02:09:9b:eb:f5:76:e1:fa:e4: 49:15:8e:e2:e7:36:58:8e:e7:d1:90:c8:6b:b0:5c:04:32:84: 63:2f:13:64:bd:da:e1:51:e2:92:dd:23:cc:8c:b2:2c:b1:8b: 6d:42:9b:67:17:15:12:9f:f2:b4:9e:aa:ba:fb:58:a8:51:da: 42:f3:61:9f:77:40:9d:44:02:b6:d0:39:b9:cd:fb:9f:24:c3: 7e:b1:a7:0b -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgIUd/TOwVQ+/eutxDQESomZVp6Ccd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzA5MTUwODMxMjRaFw0yNDA5MTMwODM2MjRaMDMxMTAvBgNV BAMTKDVGQjUwNTY3OTFDNkYxRjI4ODkxQjI0RDRCRDJGQzc5M0I3RDc5NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnvZfRFRJ6eU2x+0wCpH+BZuMI cdU4HChRnTHBrhxYUsA6U3MxxHM9aamsSq7LY+GUi1D7tcqR2itnvrx/QJNNUbJM QLNnbUy37u27vosv9kF/Q5Qx4mVx/bw2ipFKioRVMDb66bxiNfza3opR582kRATd Mt5kdxGgvL2BmvfJvFBXEuktu/PuKozbeWsZGucaGFGwr6VJRoIpO+M4uhTGfP9u DFIWhm5rCQfDlj3yxDrhXTRcSq/Kwjp+3oXTzV0/F3kK7048XWSuEkbaqyTJAHii 7/3vUJbbsjMM8qegE+Dd17EklitOM9MveKwjK9OdHbVXuLWEC82Hzdw+sIuXAgMB AAGjggL0MIIC8DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRftQVnkcbx8oiR sk1L0vx5O315RjAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2 MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0 QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvZTc5YzJiMDktZWJkZC00YTZjLWE5NzUtMjRlMWEy MjYyZjRmLzAvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9lNzljMmIwOS1lYmRkLTRhNmMtYTk3NS0yNGUx YTIyNjJmNGYvMC81RkI1MDU2NzkxQzZGMUYyODg5MUIyNEQ0QkQyRkM3OTNCN0Q3 OTQ2Lm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw KQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgAqBd/BXwMGACoF38GOMA0GCSqG SIb3DQEBCwUAA4IBAQCn2jlCniZ2wPeaE1CH/RdXH4Vuxe2T0kEKW+Vw7J0oBmKI 28hwm6wFjZQcMkScjUwmeMjuUWIGeO+PG+qrYlvxaYgWRbyVCXA2r02AolLhoIWh cRY3rbjKTyAio4OUryqPYQWNKq5qmKpgXvChtmt6o0pgByaSkNPSuMgEuvA1PWB1 Z1DSW2H1651zguHSPVToYwrPGuh6R5oHH/tFh88XTtyIL13k/muE/pYCCZvr9Xbh +uRJFY7i5zZYjufRkMhrsFwEMoRjLxNkvdrhUeKS3SPMjLIssYttQptnFxUSn/K0 nqq6+1ioUdpC82Gfd0CdRAK20Dm5zfufJMN+sacL -----END CERTIFICATE-----Generated at Mon May 20 13:08:21 2024 by rpki-client on console-fra.rpki-client.org