$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.cer File: 8174F52F3DDAD2C357E416F8CE94960D6EFA431A.cer (raw, json) Hash identifier: qMVNYDP553gG9g7+jfd0jBovAH8OXQLyv+2ppN/oIPo= Subject key identifier: 81:74:F5:2F:3D:DA:D2:C3:57:E4:16:F8:CE:94:96:0D:6E:FA:43:1A Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 6A8BC9FE7F6804F4EBE8F208337D643A86149940 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 02 Dec 2023 03:03:39 +0000 Certificate not after: Sat 30 Nov 2024 03:08:39 +0000 Subordinate resources: IP: 2a06:9f81:3000::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 22:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:8b:c9:fe:7f:68:04:f4:eb:e8:f2:08:33:7d:64:3a:86:14:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Dec 2 03:03:39 2023 GMT Not After : Nov 30 03:08:39 2024 GMT Subject: CN=8174F52F3DDAD2C357E416F8CE94960D6EFA431A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b1:31:c0:0e:80:de:bb:3c:d2:4e:d6:f5:06: b6:c3:41:bd:b4:73:10:48:98:8e:7f:ce:66:e2:35: bc:c7:d0:bf:a1:42:a4:69:f9:e9:a9:d3:60:b3:fb: 63:a6:39:2d:cb:e1:c0:da:64:ca:bf:ab:94:26:0d: bb:7b:ea:f1:00:2b:e8:3c:ea:16:15:54:83:75:57: b6:2b:fa:56:a9:48:13:8f:8e:e8:c5:89:a7:97:58: 44:b6:36:03:a7:11:a3:81:37:a0:8e:bb:b4:69:b6: 76:76:18:2a:1c:a3:21:3b:c2:73:c4:4d:5c:e5:26: 3a:85:0a:8f:b3:16:65:0b:24:16:15:7a:f6:ce:7e: 02:39:df:7b:eb:ae:10:c9:c5:c9:be:55:99:b9:f6: ee:cc:d9:20:f3:4c:63:e5:3a:09:05:e4:f2:20:54: f3:a3:9b:74:87:59:a1:8c:e4:0b:61:14:c1:f6:57: e7:75:f7:36:8c:63:b0:67:6f:a1:9a:cb:17:60:29: bf:53:c5:35:88:54:08:48:a8:c1:b9:06:84:08:8e: 06:40:66:9a:90:6e:91:8f:69:0c:83:7b:b8:a7:97: 84:e5:bb:94:d6:41:dc:77:c8:bc:a9:40:8e:45:0f: d9:3d:3e:a7:08:a2:8e:f3:d8:ca:93:05:9b:b6:1b: 7c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 81:74:F5:2F:3D:DA:D2:C3:57:E4:16:F8:CE:94:96:0D:6E:FA:43:1A X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fae48901-fabe-41f1-9355-5f1488f51bd7/0/8174F52F3DDAD2C357E416F8CE94960D6EFA431A.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:3000::/40 Signature Algorithm: sha256WithRSAEncryption 54:9d:9d:d2:1c:0d:d1:e2:7e:c9:0c:30:32:7c:1e:68:bc:ba: 15:07:b8:56:18:fc:f9:4f:f1:01:7d:6b:3c:d1:f6:88:ec:7e: 1e:43:c8:41:dd:65:da:ae:8b:74:68:9d:4a:23:c7:2d:9f:c1: 59:91:9a:00:d1:db:b7:e3:61:2f:ef:fa:ef:9d:ca:e4:75:54: e1:e0:c4:ed:4a:4c:1a:93:6e:b3:9f:50:0c:4c:a0:17:94:73: 0c:42:52:da:ca:58:46:56:2a:f2:fa:f5:39:b8:f6:62:e8:17: b8:07:27:6f:7c:a4:a6:57:aa:37:a1:58:bb:46:a8:54:83:ae: 17:6b:0e:f6:b4:3e:e1:59:5e:da:27:e7:56:fc:0c:a9:eb:56: 6f:e1:9d:66:85:e3:08:33:3a:aa:4e:fc:a0:c5:3a:9f:76:bf: 42:cd:0a:64:26:4e:f0:a0:e8:91:4c:1d:08:8a:b0:a7:3d:92: 35:91:a2:57:ab:43:c3:46:e8:d5:ef:d9:aa:94:25:14:93:12: db:53:54:c3:96:85:f2:af:cb:a3:1b:33:19:24:52:04:db:68: 71:27:8a:44:7b:9c:98:ad:e5:24:b0:d9:f8:d1:a2:db:f0:13: c8:3c:47:59:96:9e:e0:68:02:65:3e:47:dc:fa:d9:a1:0d:e4: a4:f0:e5:c2 -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIUaovJ/n9oBPTr6PIIM31kOoYUmUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzEyMDIwMzAzMzlaFw0yNDExMzAwMzA4MzlaMDMxMTAvBgNV BAMTKDgxNzRGNTJGM0REQUQyQzM1N0U0MTZGOENFOTQ5NjBENkVGQTQzMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnsTHADoDeuzzSTtb1BrbDQb20 cxBImI5/zmbiNbzH0L+hQqRp+emp02Cz+2OmOS3L4cDaZMq/q5QmDbt76vEAK+g8 6hYVVIN1V7Yr+lapSBOPjujFiaeXWES2NgOnEaOBN6COu7RptnZ2GCocoyE7wnPE TVzlJjqFCo+zFmULJBYVevbOfgI533vrrhDJxcm+VZm59u7M2SDzTGPlOgkF5PIg VPOjm3SHWaGM5AthFMH2V+d19zaMY7Bnb6GayxdgKb9TxTWIVAhIqMG5BoQIjgZA ZpqQbpGPaQyDe7inl4Tlu5TWQdx3yLypQI5FD9k9PqcIoo7z2MqTBZu2G3x5AgMB AAGjggLsMIIC6DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSBdPUvPdrSw1fk FvjOlJYNbvpDGjAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2 MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0 QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvZmFlNDg5MDEtZmFiZS00MWYxLTkzNTUtNWYxNDg4 ZjUxYmQ3LzAvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9mYWU0ODkwMS1mYWJlLTQxZjEtOTM1NS01ZjE0 ODhmNTFiZDcvMC84MTc0RjUyRjNEREFEMkMzNTdFNDE2RjhDRTk0OTYwRDZFRkE0 MzFBLm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqBp+BMDANBgkqhkiG9w0BAQsF AAOCAQEAVJ2d0hwN0eJ+yQwwMnweaLy6FQe4Vhj8+U/xAX1rPNH2iOx+HkPIQd1l 2q6LdGidSiPHLZ/BWZGaANHbt+NhL+/6753K5HVU4eDE7UpMGpNus59QDEygF5Rz DEJS2spYRlYq8vr1Obj2YugXuAcnb3ykpleqN6FYu0aoVIOuF2sO9rQ+4Vle2ifn VvwMqetWb+GdZoXjCDM6qk78oMU6n3a/Qs0KZCZO8KDokUwdCIqwpz2SNZGiV6tD w0bo1e/ZqpQlFJMS21NUw5aF8q/LoxszGSRSBNtocSeKRHucmK3lJLDZ+NGi2/AT yDxHWZae4GgCZT5H3PrZoQ3kpPDlwg== -----END CERTIFICATE-----Generated at Tue May 21 04:45:06 2024 by rpki-client on console-fra.rpki-client.org