Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
File:                     756560C5B960222CE81AF47A8B758E1741461E7F.cer (raw, json)
Hash identifier:          81qFWVYM4QMIHiKzn5RZ0X0Fm/cuJdJD5cUg2Ovns2c=
Subject key identifier:   75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       597F9CD51E7A0A8B3EE844BD2CAE94A0973B1A59
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 05 Nov 2023 04:55:12 +0000
Certificate not after:    Sun 03 Nov 2024 05:00:12 +0000
Subordinate resources:    IP: 2a0a:6040:ba00::/40

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:7f:9c:d5:1e:7a:0a:8b:3e:e8:44:bd:2c:ae:94:a0:97:3b:1a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Nov  5 04:55:12 2023 GMT
            Not After : Nov  3 05:00:12 2024 GMT
        Subject: CN=756560C5B960222CE81AF47A8B758E1741461E7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:73:b4:4c:78:2d:e0:a9:91:a3:cc:b7:29:6a:
                    8f:06:23:4b:71:4c:74:9b:7d:5d:fa:6a:52:0b:d2:
                    9a:da:d7:55:89:30:4f:13:c3:45:62:1b:b3:a2:b1:
                    ea:64:3f:1d:37:e1:90:c2:f1:bd:bd:24:dc:f4:e3:
                    99:90:4f:ea:e6:5c:20:f9:c6:9e:c9:e6:45:bb:57:
                    1e:2c:df:01:df:16:40:af:06:19:e2:3a:9b:6b:ff:
                    11:ae:a3:37:8a:c6:70:f0:28:5a:5b:4f:d0:e4:86:
                    83:5f:63:b3:9b:32:19:0a:f6:ae:c0:2d:e4:b5:92:
                    4a:d0:05:2c:e5:6d:ff:1c:a7:15:d3:9f:ad:86:8d:
                    15:7c:c9:18:ab:73:99:3a:41:df:f7:42:23:f4:1a:
                    5b:cf:b6:d2:9b:a9:83:90:44:10:c4:e7:fa:ec:10:
                    11:3d:af:89:3b:25:fd:06:0e:f9:e7:35:bf:70:ee:
                    68:a4:bb:4c:73:fc:c8:27:38:3e:00:44:a4:91:b3:
                    b8:24:dd:15:c0:8d:42:a9:c8:75:e0:d7:40:3d:1b:
                    95:b1:e0:aa:d5:92:d0:d9:f0:97:44:be:c2:a5:0f:
                    43:cb:f1:7f:73:07:b4:74:86:11:36:77:6e:69:4f:
                    51:13:b1:70:83:74:75:8f:96:80:70:0d:d2:68:84:
                    0a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ba00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7b:50:a7:f8:eb:0d:2b:64:30:ed:82:ad:be:35:d9:92:22:6c:
         85:d2:35:eb:4d:dd:d1:99:05:38:86:44:d6:4f:05:5c:6a:24:
         d1:31:b7:6b:53:56:3d:0f:1d:6a:e3:38:8d:de:59:a7:73:10:
         9e:33:d7:f7:9b:a1:f9:fb:73:37:a5:ab:8c:be:01:16:b6:dd:
         87:ac:4a:c7:8d:8a:77:a5:36:fa:f3:34:9c:42:a1:a1:0c:c1:
         74:20:1c:7d:35:a1:07:e5:62:e0:e1:4f:ac:20:a4:5a:03:c7:
         79:22:ce:90:d5:35:9f:2e:e3:b6:5c:15:d7:f4:19:ae:49:f5:
         f0:53:69:4c:bf:e8:31:44:79:eb:4a:27:4b:8c:1d:6d:eb:49:
         f9:20:c6:f3:c8:cc:84:13:4d:d4:fc:0f:cd:22:00:45:de:77:
         c2:5e:15:a8:17:ec:d1:d8:e4:e2:d3:74:f2:5a:7c:51:b2:3e:
         dc:4f:57:d5:92:10:f8:c9:be:0b:9a:b8:a8:55:17:ee:1e:18:
         94:44:e0:9c:18:b4:6a:34:cf:51:04:ee:ab:38:3c:f6:0f:32:
         ad:e5:eb:08:bd:a6:b5:ca:23:2f:3a:d9:b3:78:04:30:a9:97:
         70:ff:c7:d8:a7:a3:77:69:db:ac:92:a5:69:cd:a5:ca:f7:4c:
         59:00:50:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:17:21 2024 by rpki-client on console-fra.rpki-client.org