$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8BE926DC29C1ABADF96D6B3B9838B32AFA445C54.cer File: 8BE926DC29C1ABADF96D6B3B9838B32AFA445C54.cer (raw, json) Hash identifier: uv15hbsBzwMbYOQYxmy34BKdoN1Knaaqzn135Ey8tSw= Subject key identifier: 8B:E9:26:DC:29:C1:AB:AD:F9:6D:6B:3B:98:38:B3:2A:FA:44:5C:54 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 39A65378C433109449C6B4ECBA4CB48283B27494 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/4/8BE926DC29C1ABADF96D6B3B9838B32AFA445C54.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/4/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 28 May 2024 06:42:54 +0000 Certificate not after: Tue 27 May 2025 06:47:54 +0000 Subordinate resources: IP: 2a0a:6040:4400::/40 IP: 2a0a:6040:c200::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Sep 2024 07:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:a6:53:78:c4:33:10:94:49:c6:b4:ec:ba:4c:b4:82:83:b2:74:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: May 28 06:42:54 2024 GMT Not After : May 27 06:47:54 2025 GMT Subject: CN=8BE926DC29C1ABADF96D6B3B9838B32AFA445C54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3e:81:ef:b2:77:7b:21:4f:ad:91:1c:52:d0: 0c:01:03:b2:aa:3e:34:02:8c:19:e4:b2:4a:8d:21: 38:6a:01:c9:f3:9e:a7:2c:e6:c0:9a:38:31:f4:c7: 1b:9d:79:b1:e0:6e:95:a4:6c:a1:e7:43:24:e7:99: ce:d8:35:28:66:62:16:de:50:dc:9a:3a:68:ba:34: f1:91:90:81:c9:32:79:c5:68:ca:18:1c:bd:8f:46: cb:5e:f6:b5:44:b9:a4:ac:b1:4c:82:59:3e:aa:a4: ac:40:a4:fe:1f:11:8d:dc:b9:1d:b4:02:8a:8e:68: 4d:65:3f:f3:8b:92:e2:18:03:02:d8:d5:c1:71:9d: c2:80:e5:53:18:6f:61:35:aa:9d:bc:22:bc:d5:d0: 50:b6:2b:bb:ce:69:74:e1:7e:2a:4f:58:1c:b3:f3: b5:ee:4e:e0:b9:42:a5:51:30:e9:ac:fb:0f:a7:4b: c4:67:5d:f6:5c:f0:97:56:f0:92:59:63:2b:0d:bc: 74:bd:10:b0:93:a2:d5:16:59:33:63:f2:90:e4:6b: 51:5c:70:c2:c4:86:72:d1:04:1a:ad:28:64:bc:fa: 67:8b:a5:12:4b:77:37:21:9a:de:3e:52:98:81:30: a8:e0:8b:fa:21:7d:18:9d:d4:ff:a5:f3:5c:04:6e: 68:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:E9:26:DC:29:C1:AB:AD:F9:6D:6B:3B:98:38:B3:2A:FA:44:5C:54 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/4/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/4/8BE926DC29C1ABADF96D6B3B9838B32AFA445C54.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:4400::/40 2a0a:6040:c200::/40 Signature Algorithm: sha256WithRSAEncryption 65:7f:ab:72:de:8b:14:11:a2:07:68:e0:27:d4:80:f9:c8:23: 04:32:1b:80:bc:d0:b6:0c:5e:a8:5e:f9:a6:d8:7d:69:89:95: b0:c5:ae:9d:8f:40:29:8b:7c:1c:a2:06:ab:95:15:b7:80:3c: 00:51:b3:54:51:44:01:26:11:d5:59:6b:ea:ae:56:18:6d:f5: ef:0f:4e:4c:82:35:c6:51:2e:24:a9:d9:3e:ae:c5:92:9d:ed: 8d:80:47:45:ca:21:5a:76:ea:d1:ba:ae:bb:e2:00:02:84:06: 32:b2:e8:01:40:b6:81:68:67:69:24:33:bc:ba:0b:45:af:4d: 3f:81:31:49:01:94:a2:48:19:67:11:20:95:71:b9:f9:19:2b: e7:8c:75:b3:e9:73:66:69:81:a2:07:72:27:3f:97:5b:3e:d4: 1a:31:3a:69:09:fc:9d:d9:90:8c:25:1a:57:6c:f5:8e:ba:12: b7:f7:81:12:1c:49:f4:2b:d7:6f:61:fa:a3:24:67:9e:f4:09: b1:42:c2:8f:a5:ba:77:9b:36:ca:53:43:bd:db:87:85:3b:20: 7a:62:78:d3:11:e3:d3:4f:df:aa:bd:2e:e2:67:eb:b6:c0:8d: 11:9b:08:71:1b:d6:9e:cc:41:3c:54:c7:6c:22:d4:b7:fc:3b: ca:1b:8b:fe -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgIUOaZTeMQzEJRJxrTsuky0goOydJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDA1MjgwNjQyNTRaFw0yNTA1MjcwNjQ3NTRaMDMxMTAvBgNV BAMTKDhCRTkyNkRDMjlDMUFCQURGOTZENkIzQjk4MzhCMzJBRkE0NDVDNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCPoHvsnd7IU+tkRxS0AwBA7Kq PjQCjBnkskqNIThqAcnznqcs5sCaODH0xxudebHgbpWkbKHnQyTnmc7YNShmYhbe UNyaOmi6NPGRkIHJMnnFaMoYHL2PRste9rVEuaSssUyCWT6qpKxApP4fEY3cuR20 AoqOaE1lP/OLkuIYAwLY1cFxncKA5VMYb2E1qp28IrzV0FC2K7vOaXThfipPWByz 87XuTuC5QqVRMOms+w+nS8RnXfZc8JdW8JJZYysNvHS9ELCTotUWWTNj8pDka1Fc cMLEhnLRBBqtKGS8+meLpRJLdzchmt4+UpiBMKjgi/ohfRid1P+l81wEbmjNAgMB AAGjggL0MIIC8DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSL6SbcKcGrrflt azuYOLMq+kRcVDAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2 MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0 QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvZjBmNWFjYTktZGMyOC00NTkyLTk3MTItNDA4NGRl OWM5NDIxLzQvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9mMGY1YWNhOS1kYzI4LTQ1OTItOTcxMi00MDg0 ZGU5Yzk0MjEvNC84QkU5MjZEQzI5QzFBQkFERjk2RDZCM0I5ODM4QjMyQUZBNDQ1 QzU0Lm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw KQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgAqCmBARAMGACoKYEDCMA0GCSqG SIb3DQEBCwUAA4IBAQBlf6ty3osUEaIHaOAn1ID5yCMEMhuAvNC2DF6oXvmm2H1p iZWwxa6dj0Api3wcogarlRW3gDwAUbNUUUQBJhHVWWvqrlYYbfXvD05MgjXGUS4k qdk+rsWSne2NgEdFyiFadurRuq674gAChAYysugBQLaBaGdpJDO8ugtFr00/gTFJ AZSiSBlnESCVcbn5GSvnjHWz6XNmaYGiB3InP5dbPtQaMTppCfyd2ZCMJRpXbPWO uhK394ESHEn0K9dvYfqjJGee9AmxQsKPpbp3mzbKU0O924eFOyB6YnjTEePTT9+q vS7iZ+u2wI0RmwhxG9aezEE8VMdsItS3/DvKG4v+ -----END CERTIFICATE-----Generated at Thu Sep 19 14:42:25 2024 by rpki-client on console-ams.rpki-client.org