$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer File: 8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer (raw, json) Hash identifier: Zh7rrKSqz8YKAIvsBGRE4Kk1pqHffyEVaMmGpDC4jAw= Subject key identifier: 8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 12492EC9A10181D07FB773283D6E59830D95298A Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 12 Dec 2024 20:34:44 +0000 Certificate not after: Thu 11 Dec 2025 20:39:44 +0000 Subordinate resources: IP: 2a05:dfc1:c400::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 02:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:49:2e:c9:a1:01:81:d0:7f:b7:73:28:3d:6e:59:83:0d:95:29:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Dec 12 20:34:44 2024 GMT Not After : Dec 11 20:39:44 2025 GMT Subject: CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6e:7f:01:2c:30:84:7a:12:69:d1:5a:a8:a4: 63:66:12:5d:d3:d1:a5:8e:ce:90:71:e1:29:37:42: 2f:3d:6e:07:ba:8d:df:a1:7a:e2:42:f6:4c:8a:5d: a3:a1:2b:15:55:61:4e:02:70:8b:55:8f:d4:53:dc: 80:7a:2a:30:eb:7c:cc:79:14:af:40:14:53:05:6f: 1c:16:15:a6:e5:6b:a0:aa:6a:30:1b:67:2a:54:51: 7d:d4:5f:4b:f9:5b:e2:9b:56:9d:ad:b8:aa:c2:c9: 55:e4:98:57:1d:5a:4c:49:8b:10:68:2d:3b:49:38: 76:8b:df:f5:2c:ed:46:17:f2:fb:ca:76:1c:8e:cf: c6:6d:f7:88:21:ae:4b:70:fe:16:c7:b5:87:9c:bf: 4f:5c:68:49:f0:ef:ec:ad:d5:ac:45:6e:1f:8a:51: 43:31:c8:40:bb:3c:aa:6b:83:58:4a:c7:f5:bd:b7: 29:e9:0c:56:3a:95:02:eb:2a:4e:cc:0a:21:b4:a7: 97:27:d1:2b:8e:e1:b4:9d:1f:50:f7:29:be:49:26: 6b:fa:9f:ec:74:94:4d:9a:58:ab:22:3b:c8:3a:93: d7:b4:19:37:66:49:2a:e0:62:ba:0c:8c:8b:75:36: 84:b3:df:0d:05:12:3c:41:07:69:09:0f:d3:9a:f7: ba:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:c400::/40 Signature Algorithm: sha256WithRSAEncryption 33:e0:b1:fd:d3:af:9b:76:5b:fb:a9:2b:3f:18:0b:da:01:35: 6e:7c:43:4d:36:df:fb:11:ff:02:83:70:c3:f9:44:11:7d:e7: 41:e9:4f:5f:e4:85:cc:d3:7d:ce:8b:62:8e:6f:0b:fd:72:54: e7:71:83:97:a4:97:5a:20:8e:92:a8:31:2d:95:0a:c2:3e:5c: 12:eb:49:05:67:b6:b5:07:ff:7a:f9:c1:29:51:ff:0a:f6:a9: 46:99:0d:0a:af:57:bb:86:10:49:98:cf:2d:8b:3b:9b:43:bc: b3:35:05:4d:f0:73:fd:48:03:a0:92:5d:77:00:30:cb:93:2f: 67:ee:fc:41:8f:11:3d:a4:23:fa:5b:93:9b:02:e1:1a:66:7a: 92:e2:78:9b:1a:7b:a8:f2:fb:9d:47:04:d2:57:85:2c:7b:23: b3:d1:5c:bf:bd:ff:67:36:1b:07:d1:97:18:54:fa:e0:68:8f: 9e:c7:f4:ad:cd:d7:e6:dc:eb:af:bd:5b:35:72:48:56:bc:fe: 22:e8:dc:b3:7f:f7:a6:19:d8:5d:ee:a3:b1:e0:63:a1:d2:27: 11:be:4f:85:a9:a4:d3:92:5c:0a:98:e6:c5:16:a1:19:ff:f9: 77:15:a4:12:0c:bc:c1:0c:1f:d2:b4:02:34:ef:9c:e7:8d:98: 85:0a:c9:f7 -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIUEkkuyaEBgdB/t3MoPW5Zgw2VKYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEyMTIyMDM0NDRaFw0yNTEyMTEyMDM5NDRaMDMxMTAvBgNV BAMTKDhBODlFMERCODk1MzFGNzIzRTQyQzc1MDkyODJDQzU0OTZGRUE0RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUbn8BLDCEehJp0VqopGNmEl3T 0aWOzpBx4Sk3Qi89bge6jd+heuJC9kyKXaOhKxVVYU4CcItVj9RT3IB6KjDrfMx5 FK9AFFMFbxwWFabla6CqajAbZypUUX3UX0v5W+KbVp2tuKrCyVXkmFcdWkxJixBo LTtJOHaL3/Us7UYX8vvKdhyOz8Zt94ghrktw/hbHtYecv09caEnw7+yt1axFbh+K UUMxyEC7PKprg1hKx/W9tynpDFY6lQLrKk7MCiG0p5cn0SuO4bSdH1D3Kb5JJmv6 n+x0lE2aWKsiO8g6k9e0GTdmSSrgYroMjIt1NoSz3w0FEjxBB2kJD9Oa97qlAgMB AAGjggLsMIIC6DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSKieDbiVMfcj5C x1CSgsxUlv6k8DAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2 MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0 QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQw OTgyMzUyLzIvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS8zZGE0ZDhiNC1hMTU3LTQ2MzQtYWIxOC0zZWY5 ZDA5ODIzNTIvMi84QTg5RTBEQjg5NTMxRjcyM0U0MkM3NTA5MjgyQ0M1NDk2RkVB NEYwLm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BxDANBgkqhkiG9w0BAQsF AAOCAQEAM+Cx/dOvm3Zb+6krPxgL2gE1bnxDTTbf+xH/AoNww/lEEX3nQelPX+SF zNN9zotijm8L/XJU53GDl6SXWiCOkqgxLZUKwj5cEutJBWe2tQf/evnBKVH/Cvap RpkNCq9Xu4YQSZjPLYs7m0O8szUFTfBz/UgDoJJddwAwy5MvZ+78QY8RPaQj+luT mwLhGmZ6kuJ4mxp7qPL7nUcE0leFLHsjs9Fcv73/ZzYbB9GXGFT64GiPnsf0rc3X 5tzrr71bNXJIVrz+Iujcs3/3phnYXe6jseBjodInEb5Phamk05JcCpjmxRahGf/5 dxWkEgy8wQwf0rQCNO+c542YhQrJ9w== -----END CERTIFICATE-----Generated at Fri Apr 4 17:28:03 2025 by rpki-client