Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
File:                     A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer (raw, json)
Hash identifier:          pkHoKvj3bpXebmNFs9dCz6UPkLmG6EC+O7jzmlWL68w=
Subject key identifier:   A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       0E96AE1D986E419AB62B297A85E7CE1480CCB1CA
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 09 Feb 2024 14:46:08 +0000
Certificate not after:    Fri 07 Feb 2025 14:51:08 +0000
Subordinate resources:    IP: 2a05:dfc1:c00::/40
                          IP: 2a05:dfc1:9300::/40

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 07:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:96:ae:1d:98:6e:41:9a:b6:2b:29:7a:85:e7:ce:14:80:cc:b1:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Feb  9 14:46:08 2024 GMT
            Not After : Feb  7 14:51:08 2025 GMT
        Subject: CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:16:56:85:56:24:de:6a:14:a3:6b:3d:a5:18:
                    7a:f4:54:f3:0c:0e:73:0e:45:ba:d2:e4:f7:23:70:
                    03:38:9f:ea:e2:1a:8b:3c:41:c6:d2:ed:29:b4:28:
                    0e:e3:2e:52:98:1d:6e:2a:20:92:91:46:9b:f2:42:
                    e4:1c:bf:0d:05:4a:94:86:4a:14:ef:63:b3:c5:98:
                    13:bc:87:3b:23:81:9a:de:9c:e5:b6:fc:64:fc:b7:
                    3d:a4:aa:0c:4a:e3:a0:fe:f7:9e:f3:d2:c7:af:2e:
                    b5:60:29:a3:46:3c:cd:aa:6a:47:87:18:ed:e3:c5:
                    5c:c6:7d:38:74:d3:2c:94:7d:81:f5:5a:1e:0a:1b:
                    90:12:13:61:62:14:75:16:a7:86:7b:1b:82:5f:29:
                    2d:3a:8c:b0:6a:f6:ec:ee:77:fa:9e:4e:28:44:6d:
                    0b:0c:d2:55:1f:a5:a2:33:6e:d2:d9:13:27:b5:b8:
                    b9:75:ac:8a:43:39:af:a3:ce:2b:83:45:e1:0c:90:
                    9d:29:d2:e4:90:f1:e3:7e:91:98:1e:ad:c4:62:13:
                    b2:94:9a:1b:f7:c4:b3:63:be:e9:07:20:28:29:67:
                    f1:11:86:90:e8:ca:77:a8:77:6c:54:b8:0d:07:1d:
                    f3:bc:89:a0:96:c4:cf:20:c0:cb:54:1d:e9:97:90:
                    b3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:c00::/40
                  2a05:dfc1:9300::/40

    Signature Algorithm: sha256WithRSAEncryption
         20:c2:1f:ae:4d:13:60:cb:d5:54:bb:2e:15:71:30:ec:c6:39:
         0e:3c:8b:7b:30:40:72:74:d3:20:35:05:c2:99:ec:9f:c9:05:
         59:77:c6:49:ce:24:c0:6e:ce:e9:0f:30:63:ba:79:9d:ec:29:
         fa:60:a4:e9:d7:81:82:17:ee:b3:c7:4c:d0:1c:d9:41:a0:f5:
         27:d8:ff:d9:7e:0c:04:b7:85:ca:a5:bb:ff:bb:af:ff:be:b2:
         b3:91:7f:22:be:99:7b:63:0a:2c:72:2f:76:1d:a6:17:5e:84:
         06:8c:64:37:4f:3a:20:d7:dc:c8:03:fa:9c:8f:26:45:3e:a5:
         fd:46:b9:23:68:c2:f5:dc:76:13:05:63:5a:81:aa:a7:00:66:
         04:18:6f:45:0e:c0:82:94:19:5f:29:61:c6:26:f4:0b:59:b5:
         87:af:9f:28:dd:0a:04:75:ce:48:15:78:27:e7:a0:ec:a5:28:
         36:00:e6:aa:09:41:d1:98:69:f0:f3:82:03:15:98:66:3c:fd:
         d5:55:59:24:c8:9a:06:32:73:04:e6:be:78:73:53:e8:15:77:
         b8:88:f7:7d:bd:bb:01:db:ff:ff:70:bc:b3:b4:e5:e2:60:14:
         62:a4:f6:7a:70:0f:01:66:5d:91:2d:5e:e5:27:19:09:b0:37:
         df:08:8c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 12:06:23 2024 by rpki-client on console-ams.rpki-client.org