Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
File:                     756560C5B960222CE81AF47A8B758E1741461E7F.cer (raw, json)
Hash identifier:          ZzQzzKFOiqVEEJj0zDLR979Xa4rE1VTGiDyIAfqPlR8=
Subject key identifier:   75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       506BAE42BB642D5D63D049E913B753E7DEFA28FC
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 07 Oct 2024 02:44:17 +0000
Certificate not after:    Mon 06 Oct 2025 02:49:17 +0000
Subordinate resources:    IP: 2a0a:6040:ba00::/40

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:6b:ae:42:bb:64:2d:5d:63:d0:49:e9:13:b7:53:e7:de:fa:28:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Oct  7 02:44:17 2024 GMT
            Not After : Oct  6 02:49:17 2025 GMT
        Subject: CN=756560C5B960222CE81AF47A8B758E1741461E7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:73:b4:4c:78:2d:e0:a9:91:a3:cc:b7:29:6a:
                    8f:06:23:4b:71:4c:74:9b:7d:5d:fa:6a:52:0b:d2:
                    9a:da:d7:55:89:30:4f:13:c3:45:62:1b:b3:a2:b1:
                    ea:64:3f:1d:37:e1:90:c2:f1:bd:bd:24:dc:f4:e3:
                    99:90:4f:ea:e6:5c:20:f9:c6:9e:c9:e6:45:bb:57:
                    1e:2c:df:01:df:16:40:af:06:19:e2:3a:9b:6b:ff:
                    11:ae:a3:37:8a:c6:70:f0:28:5a:5b:4f:d0:e4:86:
                    83:5f:63:b3:9b:32:19:0a:f6:ae:c0:2d:e4:b5:92:
                    4a:d0:05:2c:e5:6d:ff:1c:a7:15:d3:9f:ad:86:8d:
                    15:7c:c9:18:ab:73:99:3a:41:df:f7:42:23:f4:1a:
                    5b:cf:b6:d2:9b:a9:83:90:44:10:c4:e7:fa:ec:10:
                    11:3d:af:89:3b:25:fd:06:0e:f9:e7:35:bf:70:ee:
                    68:a4:bb:4c:73:fc:c8:27:38:3e:00:44:a4:91:b3:
                    b8:24:dd:15:c0:8d:42:a9:c8:75:e0:d7:40:3d:1b:
                    95:b1:e0:aa:d5:92:d0:d9:f0:97:44:be:c2:a5:0f:
                    43:cb:f1:7f:73:07:b4:74:86:11:36:77:6e:69:4f:
                    51:13:b1:70:83:74:75:8f:96:80:70:0d:d2:68:84:
                    0a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ba00::/40

    Signature Algorithm: sha256WithRSAEncryption
         9d:58:6d:88:97:94:a7:2f:85:d3:55:09:17:46:15:eb:c6:1d:
         d5:c8:56:6f:4e:c0:f3:f3:33:dd:2f:eb:f1:0f:1d:8d:4b:d3:
         5c:92:38:ad:a1:e2:87:3c:9a:33:c5:e9:53:09:e4:a9:76:86:
         78:75:e9:f2:33:1e:c0:a8:f8:e6:68:a0:45:21:3d:26:69:a9:
         06:42:d5:33:ae:a5:01:5e:a4:88:94:96:25:dd:5c:bc:ce:53:
         4c:9e:ff:7a:d1:36:62:d0:bb:66:6b:c9:03:1d:f9:31:11:76:
         1c:11:fd:ee:11:76:87:25:c3:97:0a:b6:1e:f7:97:5a:6b:f6:
         b4:5d:52:78:8d:d8:a3:09:83:3d:89:de:1a:d4:95:74:f5:9e:
         cc:2d:b2:c3:23:e7:74:e3:5c:58:89:10:9d:72:dc:42:0c:c3:
         26:91:8f:51:16:52:6b:79:9d:f5:8e:b2:51:ec:e1:f4:88:40:
         1e:d3:e8:5d:53:1d:bb:55:6a:7f:03:4d:08:08:d6:81:dc:1f:
         06:f2:be:45:30:6c:66:ae:d2:97:e1:50:7e:b2:1c:97:60:f9:
         3c:19:64:f0:79:91:dc:3a:87:db:75:b7:ad:35:57:7e:03:26:
         29:c8:1f:c9:3a:4b:00:96:78:c4:d6:00:f7:ed:3e:c7:c3:13:
         24:54:b7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:54 2024 by rpki-client on console-ams.rpki-client.org