Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
File:                     85560E86F645F1E903C8627A31BDB65C534860B9.cer (raw, json)
Hash identifier:          VGk8i/MHHyJ+yexrjjgd2eRa3wAX5Jm8dFj20GdRm5k=
Subject key identifier:   85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       1301284CDD9BC5B96209519B532034DE8314F816
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Manifest:                 rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
caRepository:             rsync://rpki.cc/repo/MythicalKitten/1/
Notify URL:               https://rpki.cc/rrdp/notification.xml
Certificate not before:   Sun 05 Nov 2023 07:45:12 +0000
Certificate not after:    Sun 03 Nov 2024 07:50:12 +0000
Subordinate resources:    IP: 2a05:dfc1::/40
                          IP: 2a05:dfc1:1f00::/40
                          IP: 2a0a:6040::/40
                          IP: 2a0a:6040:1000::/40
                          IP: 2a0a:6040:5000::/40
                          IP: 2a0a:6040:6000::/40

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 02:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:01:28:4c:dd:9b:c5:b9:62:09:51:9b:53:20:34:de:83:14:f8:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Nov  5 07:45:12 2023 GMT
            Not After : Nov  3 07:50:12 2024 GMT
        Subject: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b8:f8:01:94:21:a9:99:f8:48:79:64:46:e2:
                    2b:45:0c:22:54:87:dd:f6:fd:1b:de:08:23:5a:94:
                    d8:d3:1f:c3:c5:74:41:c7:6b:28:90:c0:82:8e:7b:
                    86:63:fd:b7:9f:ae:c2:0c:4f:71:ce:2d:48:2a:24:
                    84:7c:62:3b:e4:e4:77:3b:f3:87:ca:cf:72:a2:4d:
                    3c:fb:e6:d6:1c:04:f1:e2:99:b3:d6:9a:a3:47:d1:
                    06:43:ef:df:01:7a:70:c5:cc:a6:3d:09:3d:e3:63:
                    8d:e5:e1:67:81:2a:50:10:99:bc:aa:d3:53:f7:f8:
                    db:f1:c5:33:50:a9:b7:1b:dc:a4:bb:06:e0:5e:58:
                    dc:4e:cf:f4:47:72:4d:4c:22:69:d1:54:f7:b1:97:
                    11:f0:c8:5c:dd:4c:b2:69:d7:c9:7b:45:a2:e9:a0:
                    21:19:49:05:7c:19:4b:75:92:2d:56:09:e6:49:06:
                    40:c2:f0:83:e0:d7:cb:10:6c:b0:bd:e7:e3:37:81:
                    90:2f:10:c8:76:38:63:7f:38:82:65:72:03:48:54:
                    92:0e:66:76:d3:84:3c:c4:8a:d0:7a:af:57:cd:a5:
                    9d:6b:1a:41:93:36:84:e1:3a:4b:5f:e3:e3:40:ed:
                    9a:23:c4:8f:a6:60:57:c4:36:e2:c0:43:f5:8a:f5:
                    47:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.cc/repo/MythicalKitten/1/
                RPKI Manifest - URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                RPKI Notify - URI:https://rpki.cc/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1::/40
                  2a05:dfc1:1f00::/40
                  2a0a:6040::/40
                  2a0a:6040:1000::/40
                  2a0a:6040:5000::/40
                  2a0a:6040:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4d:c3:2a:37:1e:48:84:42:c1:7f:e7:73:73:11:cb:55:d7:06:
         1e:bb:a4:1e:56:ee:97:f1:61:4b:77:44:3c:bc:a7:0e:af:6e:
         96:97:d8:4d:7d:c5:5c:b6:36:c1:c3:a9:c1:62:bd:c5:99:d7:
         c9:3d:97:9a:17:18:1e:0c:1a:9e:33:ab:3e:c6:1e:b1:2c:45:
         fe:1b:6a:b6:2c:e0:01:3b:94:ac:b7:7a:3d:ea:14:4b:80:8e:
         47:a8:c3:55:9a:5d:f1:51:81:05:65:dd:78:3c:71:6b:f3:96:
         16:03:64:cd:80:0f:ae:54:6c:c3:f9:35:f3:97:0d:ae:03:3f:
         82:dd:4f:d5:4a:52:10:91:79:6a:23:ce:b9:b6:1f:8b:f5:02:
         ba:dd:38:82:83:11:09:5b:a4:76:d4:43:d2:64:75:51:12:6a:
         c0:61:a5:bb:26:4a:9b:45:30:ad:8a:ed:88:92:84:a8:e3:01:
         00:ea:f9:b1:b5:0c:8a:13:9a:a2:18:82:85:d1:43:e0:21:c1:
         00:58:56:8a:cb:b7:40:36:68:34:be:b4:cb:64:5d:21:5e:54:
         ae:10:ee:0b:9b:57:23:90:d9:8c:f6:18:d8:43:b2:10:21:00:
         bf:cb:96:29:7f:0d:11:24:1c:0d:05:7e:dc:42:4a:0e:b4:8e:
         b1:99:73:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:12:34 2024 by rpki-client on console-ams.rpki-client.org