$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer File: 8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer (raw, json) Hash identifier: ETNL3MNu0vN0erdYy4Tb8zfUAOOBZFvefUCXEnJll98= Subject key identifier: 8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 166527EC609DB6560801E573EC4732A4468E98EB Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 11 Jan 2024 05:22:40 +0000 Certificate not after: Thu 09 Jan 2025 05:27:40 +0000 Subordinate resources: IP: 2a05:dfc1:c400::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 22:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:65:27:ec:60:9d:b6:56:08:01:e5:73:ec:47:32:a4:46:8e:98:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Jan 11 05:22:40 2024 GMT Not After : Jan 9 05:27:40 2025 GMT Subject: CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6e:7f:01:2c:30:84:7a:12:69:d1:5a:a8:a4: 63:66:12:5d:d3:d1:a5:8e:ce:90:71:e1:29:37:42: 2f:3d:6e:07:ba:8d:df:a1:7a:e2:42:f6:4c:8a:5d: a3:a1:2b:15:55:61:4e:02:70:8b:55:8f:d4:53:dc: 80:7a:2a:30:eb:7c:cc:79:14:af:40:14:53:05:6f: 1c:16:15:a6:e5:6b:a0:aa:6a:30:1b:67:2a:54:51: 7d:d4:5f:4b:f9:5b:e2:9b:56:9d:ad:b8:aa:c2:c9: 55:e4:98:57:1d:5a:4c:49:8b:10:68:2d:3b:49:38: 76:8b:df:f5:2c:ed:46:17:f2:fb:ca:76:1c:8e:cf: c6:6d:f7:88:21:ae:4b:70:fe:16:c7:b5:87:9c:bf: 4f:5c:68:49:f0:ef:ec:ad:d5:ac:45:6e:1f:8a:51: 43:31:c8:40:bb:3c:aa:6b:83:58:4a:c7:f5:bd:b7: 29:e9:0c:56:3a:95:02:eb:2a:4e:cc:0a:21:b4:a7: 97:27:d1:2b:8e:e1:b4:9d:1f:50:f7:29:be:49:26: 6b:fa:9f:ec:74:94:4d:9a:58:ab:22:3b:c8:3a:93: d7:b4:19:37:66:49:2a:e0:62:ba:0c:8c:8b:75:36: 84:b3:df:0d:05:12:3c:41:07:69:09:0f:d3:9a:f7: ba:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:c400::/40 Signature Algorithm: sha256WithRSAEncryption 7e:ff:b2:51:20:f8:e2:b1:6c:4c:bb:7f:df:e8:e8:bd:f3:79: 70:6a:03:e3:e6:e4:6f:1e:6e:c9:4c:42:62:4f:0a:7a:9f:ae: 10:f0:b5:d5:79:e8:ff:83:32:94:65:68:02:5f:78:eb:29:1e: b5:a9:3f:d0:4b:c1:60:65:70:a3:fb:c0:37:83:92:7c:b4:dd: ed:5a:64:49:64:84:af:ca:a7:c1:6f:46:1f:5a:aa:7f:1f:24: bd:28:44:6f:32:0c:ff:7b:21:9f:dc:0b:ab:41:60:a9:11:58: 5a:7b:93:f3:f5:b1:40:c9:dd:d5:6b:33:b6:48:90:cf:af:81: 57:0b:ad:6f:1d:71:2c:f4:32:cb:7d:7a:42:0f:11:f8:a3:97: 67:f6:18:9a:0b:28:30:43:d6:13:07:18:af:b6:a7:eb:90:00: 1c:47:6c:25:be:8e:a3:c8:17:b3:ec:c6:9e:1c:33:d5:f4:22: 44:48:5b:5a:28:ca:57:5c:16:b6:b6:51:9f:25:15:cd:a4:90: 44:0f:1a:1a:64:11:00:e3:07:5e:13:10:c9:e3:50:4b:30:ae: a1:9c:ef:12:13:3a:04:b1:0c:06:df:e0:13:fb:f3:90:3f:07: 8e:94:d6:5d:0a:a4:e0:cc:2d:2c:f9:d9:63:46:73:6c:45:5d: 65:35:5b:e0 -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIUFmUn7GCdtlYIAeVz7EcypEaOmOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDAxMTEwNTIyNDBaFw0yNTAxMDkwNTI3NDBaMDMxMTAvBgNV BAMTKDhBODlFMERCODk1MzFGNzIzRTQyQzc1MDkyODJDQzU0OTZGRUE0RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUbn8BLDCEehJp0VqopGNmEl3T 0aWOzpBx4Sk3Qi89bge6jd+heuJC9kyKXaOhKxVVYU4CcItVj9RT3IB6KjDrfMx5 FK9AFFMFbxwWFabla6CqajAbZypUUX3UX0v5W+KbVp2tuKrCyVXkmFcdWkxJixBo LTtJOHaL3/Us7UYX8vvKdhyOz8Zt94ghrktw/hbHtYecv09caEnw7+yt1axFbh+K UUMxyEC7PKprg1hKx/W9tynpDFY6lQLrKk7MCiG0p5cn0SuO4bSdH1D3Kb5JJmv6 n+x0lE2aWKsiO8g6k9e0GTdmSSrgYroMjIt1NoSz3w0FEjxBB2kJD9Oa97qlAgMB AAGjggLsMIIC6DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSKieDbiVMfcj5C x1CSgsxUlv6k8DAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2 MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0 QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQw OTgyMzUyLzIvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS8zZGE0ZDhiNC1hMTU3LTQ2MzQtYWIxOC0zZWY5 ZDA5ODIzNTIvMi84QTg5RTBEQjg5NTMxRjcyM0U0MkM3NTA5MjgyQ0M1NDk2RkVB NEYwLm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BxDANBgkqhkiG9w0BAQsF AAOCAQEAfv+yUSD44rFsTLt/3+jovfN5cGoD4+bkbx5uyUxCYk8Kep+uEPC11Xno /4MylGVoAl946yketak/0EvBYGVwo/vAN4OSfLTd7VpkSWSEr8qnwW9GH1qqfx8k vShEbzIM/3shn9wLq0FgqRFYWnuT8/WxQMnd1WsztkiQz6+BVwutbx1xLPQyy316 Qg8R+KOXZ/YYmgsoMEPWEwcYr7an65AAHEdsJb6Oo8gXs+zGnhwz1fQiREhbWijK V1wWtrZRnyUVzaSQRA8aGmQRAOMHXhMQyeNQSzCuoZzvEhM6BLEMBt/gE/vzkD8H jpTWXQqk4MwtLPnZY0ZzbEVdZTVb4A== -----END CERTIFICATE-----Generated at Tue May 21 04:45:06 2024 by rpki-client on console-fra.rpki-client.org