Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/84BDF3823F3DA1A54B8BB9AF6156F4E5A1DB170E.cer
File:                     84BDF3823F3DA1A54B8BB9AF6156F4E5A1DB170E.cer (raw, json)
Hash identifier:          HN3Xm9Z40ujFYdsgvE1fmBf8DwrDlYYIL6+BKvtDCeg=
Subject key identifier:   84:BD:F3:82:3F:3D:A1:A5:4B:8B:B9:AF:61:56:F4:E5:A1:DB:17:0E
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       6A7AD8767F87F8F0B38F6C38C67642952EF409F3
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Manifest:                 rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/1/84BDF3823F3DA1A54B8BB9AF6156F4E5A1DB170E.mft
caRepository:             rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/1/
Notify URL:               https://krill.accuristechnologies.ca/rrdp/notification.xml
Certificate not before:   Sat 22 Jul 2023 04:05:54 +0000
Certificate not after:    Sat 20 Jul 2024 04:10:54 +0000
Subordinate resources:    IP: 2a0a:6040:1500::/40
                          IP: 2a0a:6040:6d00::/40
                          IP: 2a0a:6040:c500::/40

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:7a:d8:76:7f:87:f8:f0:b3:8f:6c:38:c6:76:42:95:2e:f4:09:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Jul 22 04:05:54 2023 GMT
            Not After : Jul 20 04:10:54 2024 GMT
        Subject: CN=84BDF3823F3DA1A54B8BB9AF6156F4E5A1DB170E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b8:4e:34:0a:84:9a:75:27:f8:bb:a7:28:f9:
                    cd:8a:9f:7e:86:cc:c2:43:5b:ee:d0:97:01:bc:39:
                    6a:d3:a9:be:a1:06:54:82:8b:b4:a4:d7:b1:78:68:
                    e4:73:01:11:64:59:c0:de:1c:49:bf:bf:8a:8f:9a:
                    e7:88:4a:d3:85:a2:f8:20:e9:b4:ca:b5:85:6f:c9:
                    c0:a6:4c:85:4d:39:78:8b:91:0b:c9:12:32:69:4b:
                    1a:63:5f:bc:85:d4:6f:ab:c1:7d:55:5a:b5:c4:db:
                    af:64:4b:26:f9:41:7b:4e:ec:8e:83:ff:32:71:5f:
                    fb:1d:04:fa:51:d0:90:dd:a5:15:3b:a9:a2:17:9b:
                    3c:85:29:f9:71:d2:16:f9:61:a6:39:03:12:54:fc:
                    3d:4a:ab:10:d0:f7:14:b1:f2:83:a9:33:a7:59:fc:
                    cc:45:f1:a1:0d:d1:ba:ca:2d:9f:59:69:f0:f6:74:
                    bd:ff:24:b5:d0:41:41:70:32:88:56:0f:bb:06:05:
                    fb:f7:77:aa:28:8f:45:a0:23:8a:30:a3:5c:4a:77:
                    ce:d6:f8:6c:95:c3:1d:e2:0c:1c:76:c1:fe:59:dd:
                    0a:5c:ee:e7:ec:04:01:45:45:d3:a5:93:0f:65:13:
                    e3:cf:3b:81:51:50:c2:0e:e6:bc:c6:12:a3:04:75:
                    12:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                84:BD:F3:82:3F:3D:A1:A5:4B:8B:B9:AF:61:56:F4:E5:A1:DB:17:0E
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                CA Repository - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/1/
                RPKI Manifest - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/1/84BDF3823F3DA1A54B8BB9AF6156F4E5A1DB170E.mft
                RPKI Notify - URI:https://krill.accuristechnologies.ca/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1500::/40
                  2a0a:6040:6d00::/40
                  2a0a:6040:c500::/40

    Signature Algorithm: sha256WithRSAEncryption
         08:27:de:19:e5:ea:5b:28:d9:fe:cb:a3:5d:73:53:32:f1:dc:
         dd:60:b3:b1:68:72:9e:39:82:28:fd:cf:d5:0c:98:05:32:41:
         c7:27:9e:53:04:1a:d1:1c:42:6d:95:89:fc:f8:c8:c3:c8:94:
         d2:73:0d:43:57:f0:0f:f8:2b:6f:ef:68:e4:4f:e3:28:d4:5e:
         22:46:1c:f7:00:31:ae:78:2e:48:3b:c0:09:18:33:10:72:eb:
         66:a8:50:ee:1f:54:1c:40:84:92:43:94:5b:aa:97:90:1e:a4:
         6f:53:f5:df:f2:c6:8a:e8:b4:64:f1:26:de:2c:3a:b1:cc:7f:
         ac:d1:1f:85:e4:cf:24:89:6b:e3:a7:1a:a4:0b:44:e8:08:73:
         58:ca:f5:23:68:86:50:04:b5:c1:71:e0:ea:81:19:88:cb:31:
         d3:95:07:dc:1a:17:70:d1:6e:6a:31:ba:a9:fb:90:e4:84:c7:
         dc:c3:9a:04:e5:0b:33:5c:73:ed:9e:8b:fc:ce:47:2d:a8:88:
         e5:04:d3:da:9c:6c:d0:26:12:79:43:79:cd:e8:8e:6b:49:cc:
         cc:46:0e:c7:36:ca:2d:db:71:1a:f1:b2:67:ce:48:34:4d:6e:
         9e:09:44:c7:b9:78:be:e8:76:41:93:6f:bd:a5:7d:00:84:9f:
         16:7c:3b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 5 03:55:44 2023 by rpki-client on console-fra.rpki-client.org