$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer File: 85560E86F645F1E903C8627A31BDB65C534860B9.cer (raw, json) Hash identifier: 55cZ7qltfY2ZGWFe3+amG9c0Rv5P08GJzAEMLQLklEM= Subject key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 65540D836C3F5FD34DB12A42EF5BE97FA6D1F514 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Manifest: rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft caRepository: rsync://rpki.cc/repo/MythicalKitten/1/ Notify URL: https://rpki.cc/rrdp/notification.xml Certificate not before: Mon 07 Oct 2024 07:08:21 +0000 Certificate not after: Mon 06 Oct 2025 07:13:21 +0000 Subordinate resources: IP: 2a05:dfc1::/40 IP: 2a05:dfc1:1f00::/40 IP: 2a0a:6040::/40 IP: 2a0a:6040:1000::/40 IP: 2a0a:6040:5000::/40 IP: 2a0a:6040:6000::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:54:0d:83:6c:3f:5f:d3:4d:b1:2a:42:ef:5b:e9:7f:a6:d1:f5:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 7 07:08:21 2024 GMT Not After : Oct 6 07:13:21 2025 GMT Subject: CN=85560E86F645F1E903C8627A31BDB65C534860B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b8:f8:01:94:21:a9:99:f8:48:79:64:46:e2: 2b:45:0c:22:54:87:dd:f6:fd:1b:de:08:23:5a:94: d8:d3:1f:c3:c5:74:41:c7:6b:28:90:c0:82:8e:7b: 86:63:fd:b7:9f:ae:c2:0c:4f:71:ce:2d:48:2a:24: 84:7c:62:3b:e4:e4:77:3b:f3:87:ca:cf:72:a2:4d: 3c:fb:e6:d6:1c:04:f1:e2:99:b3:d6:9a:a3:47:d1: 06:43:ef:df:01:7a:70:c5:cc:a6:3d:09:3d:e3:63: 8d:e5:e1:67:81:2a:50:10:99:bc:aa:d3:53:f7:f8: db:f1:c5:33:50:a9:b7:1b:dc:a4:bb:06:e0:5e:58: dc:4e:cf:f4:47:72:4d:4c:22:69:d1:54:f7:b1:97: 11:f0:c8:5c:dd:4c:b2:69:d7:c9:7b:45:a2:e9:a0: 21:19:49:05:7c:19:4b:75:92:2d:56:09:e6:49:06: 40:c2:f0:83:e0:d7:cb:10:6c:b0:bd:e7:e3:37:81: 90:2f:10:c8:76:38:63:7f:38:82:65:72:03:48:54: 92:0e:66:76:d3:84:3c:c4:8a:d0:7a:af:57:cd:a5: 9d:6b:1a:41:93:36:84:e1:3a:4b:5f:e3:e3:40:ed: 9a:23:c4:8f:a6:60:57:c4:36:e2:c0:43:f5:8a:f5: 47:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: CA Repository - URI:rsync://rpki.cc/repo/MythicalKitten/1/ RPKI Manifest - URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft RPKI Notify - URI:https://rpki.cc/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1::/40 2a05:dfc1:1f00::/40 2a0a:6040::/40 2a0a:6040:1000::/40 2a0a:6040:5000::/40 2a0a:6040:6000::/40 Signature Algorithm: sha256WithRSAEncryption 3b:e0:6a:73:da:25:d8:00:a6:4b:c7:e6:02:79:36:95:8c:03: ae:f1:9e:05:09:e9:f6:5a:a2:c8:a7:d9:45:fe:28:58:a6:ab: 29:51:b2:9b:1e:fc:f1:b5:70:1d:d1:ac:e8:df:36:dc:d2:1a: 7c:fd:e0:8c:70:2b:83:31:18:fd:65:c5:60:4e:40:b8:fb:73: b2:0d:5c:7b:29:ac:16:c5:05:4b:09:db:bc:4d:94:8f:f5:38: 87:4a:40:b2:a3:8c:d9:52:17:7d:c4:8b:f8:d1:36:8a:5e:31: 76:e5:85:d7:99:b4:e3:81:64:48:b6:75:40:cc:0d:21:6f:fd: 6d:cf:9b:a0:e7:3b:6f:31:81:43:55:bc:01:0d:c7:e1:a2:65: 06:54:06:1e:36:48:6a:f8:1a:75:2a:4d:b9:33:de:25:d2:05: ca:e3:b3:4b:13:14:17:13:e7:91:1a:91:40:41:92:39:52:a2: 2b:70:ae:31:05:df:93:e4:23:f6:65:c9:8b:0e:d1:65:a4:e1: 52:0c:78:83:d9:59:36:ae:11:1d:86:ef:36:95:48:ec:82:1d: f0:14:d7:46:78:18:44:69:a2:89:23:ae:6d:33:2a:12:30:8a: 16:c1:cc:af:6f:3a:ad:15:db:d5:07:c5:88:2a:b8:43:e9:5f: 25:16:70:00 -----BEGIN CERTIFICATE----- MIIFoTCCBImgAwIBAgIUZVQNg2w/X9NNsSpC71vpf6bR9RQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDcwNzA4MjFaFw0yNTEwMDYwNzEzMjFaMDMxMTAvBgNV BAMTKDg1NTYwRTg2RjY0NUYxRTkwM0M4NjI3QTMxQkRCNjVDNTM0ODYwQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7uPgBlCGpmfhIeWRG4itFDCJU h932/RveCCNalNjTH8PFdEHHayiQwIKOe4Zj/befrsIMT3HOLUgqJIR8Yjvk5Hc7 84fKz3KiTTz75tYcBPHimbPWmqNH0QZD798BenDFzKY9CT3jY43l4WeBKlAQmbyq 01P3+NvxxTNQqbcb3KS7BuBeWNxOz/RHck1MImnRVPexlxHwyFzdTLJp18l7RaLp oCEZSQV8GUt1ki1WCeZJBkDC8IPg18sQbLC95+M3gZAvEMh2OGN/OIJlcgNIVJIO ZnbThDzEitB6r1fNpZ1rGkGTNoThOktf4+NA7ZojxI+mYFfENuLAQ/WK9UeRAgMB AAGjggKrMIICpzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSFVg6G9kXx6QPI YnoxvbZcU0hguTAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2 MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0 QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCB1wYIKwYBBQUHAQsE gcowgccwMgYIKwYBBQUHMAWGJnJzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2Fs S2l0dGVuLzEvMF4GCCsGAQUFBzAKhlJyc3luYzovL3Jwa2kuY2MvcmVwby9NeXRo aWNhbEtpdHRlbi8xLzg1NTYwRTg2RjY0NUYxRTkwM0M4NjI3QTMxQkRCNjVDNTM0 ODYwQjkubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY2MvcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwSQYIKwYBBQUH AQcBAf8EOjA4MDYEAgACMDADBgAqBd/BAAMGACoF38EfAwYAKgpgQAADBgAqCmBA EAMGACoKYEBQAwYAKgpgQGAwDQYJKoZIhvcNAQELBQADggEBADvganPaJdgApkvH 5gJ5NpWMA67xngUJ6fZaosin2UX+KFimqylRspse/PG1cB3RrOjfNtzSGnz94Ixw K4MxGP1lxWBOQLj7c7INXHsprBbFBUsJ27xNlI/1OIdKQLKjjNlSF33Ei/jRNope MXblhdeZtOOBZEi2dUDMDSFv/W3Pm6DnO28xgUNVvAENx+GiZQZUBh42SGr4GnUq Tbkz3iXSBcrjs0sTFBcT55EakUBBkjlSoitwrjEF35PkI/ZlyYsO0WWk4VIMeIPZ WTauER2G7zaVSOyCHfAU10Z4GERpookjrm0zKhIwihbBzK9vOq0V29UHxYgquEPp XyUWcAA= -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:45 2024 by rpki-client on console-fra.rpki-client.org