Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.cer
File:                     8174F52F3DDAD2C357E416F8CE94960D6EFA431A.cer (raw, json)
Hash identifier:          qMVNYDP553gG9g7+jfd0jBovAH8OXQLyv+2ppN/oIPo=
Subject key identifier:   81:74:F5:2F:3D:DA:D2:C3:57:E4:16:F8:CE:94:96:0D:6E:FA:43:1A
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       6A8BC9FE7F6804F4EBE8F208337D643A86149940
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sat 02 Dec 2023 03:03:39 +0000
Certificate not after:    Sat 30 Nov 2024 03:08:39 +0000
Subordinate resources:    IP: 2a06:9f81:3000::/40

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:8b:c9:fe:7f:68:04:f4:eb:e8:f2:08:33:7d:64:3a:86:14:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  2 03:03:39 2023 GMT
            Not After : Nov 30 03:08:39 2024 GMT
        Subject: CN=8174F52F3DDAD2C357E416F8CE94960D6EFA431A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b1:31:c0:0e:80:de:bb:3c:d2:4e:d6:f5:06:
                    b6:c3:41:bd:b4:73:10:48:98:8e:7f:ce:66:e2:35:
                    bc:c7:d0:bf:a1:42:a4:69:f9:e9:a9:d3:60:b3:fb:
                    63:a6:39:2d:cb:e1:c0:da:64:ca:bf:ab:94:26:0d:
                    bb:7b:ea:f1:00:2b:e8:3c:ea:16:15:54:83:75:57:
                    b6:2b:fa:56:a9:48:13:8f:8e:e8:c5:89:a7:97:58:
                    44:b6:36:03:a7:11:a3:81:37:a0:8e:bb:b4:69:b6:
                    76:76:18:2a:1c:a3:21:3b:c2:73:c4:4d:5c:e5:26:
                    3a:85:0a:8f:b3:16:65:0b:24:16:15:7a:f6:ce:7e:
                    02:39:df:7b:eb:ae:10:c9:c5:c9:be:55:99:b9:f6:
                    ee:cc:d9:20:f3:4c:63:e5:3a:09:05:e4:f2:20:54:
                    f3:a3:9b:74:87:59:a1:8c:e4:0b:61:14:c1:f6:57:
                    e7:75:f7:36:8c:63:b0:67:6f:a1:9a:cb:17:60:29:
                    bf:53:c5:35:88:54:08:48:a8:c1:b9:06:84:08:8e:
                    06:40:66:9a:90:6e:91:8f:69:0c:83:7b:b8:a7:97:
                    84:e5:bb:94:d6:41:dc:77:c8:bc:a9:40:8e:45:0f:
                    d9:3d:3e:a7:08:a2:8e:f3:d8:ca:93:05:9b:b6:1b:
                    7c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:74:F5:2F:3D:DA:D2:C3:57:E4:16:F8:CE:94:96:0D:6E:FA:43:1A
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         54:9d:9d:d2:1c:0d:d1:e2:7e:c9:0c:30:32:7c:1e:68:bc:ba:
         15:07:b8:56:18:fc:f9:4f:f1:01:7d:6b:3c:d1:f6:88:ec:7e:
         1e:43:c8:41:dd:65:da:ae:8b:74:68:9d:4a:23:c7:2d:9f:c1:
         59:91:9a:00:d1:db:b7:e3:61:2f:ef:fa:ef:9d:ca:e4:75:54:
         e1:e0:c4:ed:4a:4c:1a:93:6e:b3:9f:50:0c:4c:a0:17:94:73:
         0c:42:52:da:ca:58:46:56:2a:f2:fa:f5:39:b8:f6:62:e8:17:
         b8:07:27:6f:7c:a4:a6:57:aa:37:a1:58:bb:46:a8:54:83:ae:
         17:6b:0e:f6:b4:3e:e1:59:5e:da:27:e7:56:fc:0c:a9:eb:56:
         6f:e1:9d:66:85:e3:08:33:3a:aa:4e:fc:a0:c5:3a:9f:76:bf:
         42:cd:0a:64:26:4e:f0:a0:e8:91:4c:1d:08:8a:b0:a7:3d:92:
         35:91:a2:57:ab:43:c3:46:e8:d5:ef:d9:aa:94:25:14:93:12:
         db:53:54:c3:96:85:f2:af:cb:a3:1b:33:19:24:52:04:db:68:
         71:27:8a:44:7b:9c:98:ad:e5:24:b0:d9:f8:d1:a2:db:f0:13:
         c8:3c:47:59:96:9e:e0:68:02:65:3e:47:dc:fa:d9:a1:0d:e4:
         a4:f0:e5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:54 2024 by rpki-client on console-ams.rpki-client.org