$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer File: A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer (raw, json) Hash identifier: pkHoKvj3bpXebmNFs9dCz6UPkLmG6EC+O7jzmlWL68w= Subject key identifier: A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 0E96AE1D986E419AB62B297A85E7CE1480CCB1CA Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 09 Feb 2024 14:46:08 +0000 Certificate not after: Fri 07 Feb 2025 14:51:08 +0000 Subordinate resources: IP: 2a05:dfc1:c00::/40 IP: 2a05:dfc1:9300::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 Nov 2024 15:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:96:ae:1d:98:6e:41:9a:b6:2b:29:7a:85:e7:ce:14:80:cc:b1:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Feb 9 14:46:08 2024 GMT Not After : Feb 7 14:51:08 2025 GMT Subject: CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:16:56:85:56:24:de:6a:14:a3:6b:3d:a5:18: 7a:f4:54:f3:0c:0e:73:0e:45:ba:d2:e4:f7:23:70: 03:38:9f:ea:e2:1a:8b:3c:41:c6:d2:ed:29:b4:28: 0e:e3:2e:52:98:1d:6e:2a:20:92:91:46:9b:f2:42: e4:1c:bf:0d:05:4a:94:86:4a:14:ef:63:b3:c5:98: 13:bc:87:3b:23:81:9a:de:9c:e5:b6:fc:64:fc:b7: 3d:a4:aa:0c:4a:e3:a0:fe:f7:9e:f3:d2:c7:af:2e: b5:60:29:a3:46:3c:cd:aa:6a:47:87:18:ed:e3:c5: 5c:c6:7d:38:74:d3:2c:94:7d:81:f5:5a:1e:0a:1b: 90:12:13:61:62:14:75:16:a7:86:7b:1b:82:5f:29: 2d:3a:8c:b0:6a:f6:ec:ee:77:fa:9e:4e:28:44:6d: 0b:0c:d2:55:1f:a5:a2:33:6e:d2:d9:13:27:b5:b8: b9:75:ac:8a:43:39:af:a3:ce:2b:83:45:e1:0c:90: 9d:29:d2:e4:90:f1:e3:7e:91:98:1e:ad:c4:62:13: b2:94:9a:1b:f7:c4:b3:63:be:e9:07:20:28:29:67: f1:11:86:90:e8:ca:77:a8:77:6c:54:b8:0d:07:1d: f3:bc:89:a0:96:c4:cf:20:c0:cb:54:1d:e9:97:90: b3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:c00::/40 2a05:dfc1:9300::/40 Signature Algorithm: sha256WithRSAEncryption 20:c2:1f:ae:4d:13:60:cb:d5:54:bb:2e:15:71:30:ec:c6:39: 0e:3c:8b:7b:30:40:72:74:d3:20:35:05:c2:99:ec:9f:c9:05: 59:77:c6:49:ce:24:c0:6e:ce:e9:0f:30:63:ba:79:9d:ec:29: fa:60:a4:e9:d7:81:82:17:ee:b3:c7:4c:d0:1c:d9:41:a0:f5: 27:d8:ff:d9:7e:0c:04:b7:85:ca:a5:bb:ff:bb:af:ff:be:b2: b3:91:7f:22:be:99:7b:63:0a:2c:72:2f:76:1d:a6:17:5e:84: 06:8c:64:37:4f:3a:20:d7:dc:c8:03:fa:9c:8f:26:45:3e:a5: fd:46:b9:23:68:c2:f5:dc:76:13:05:63:5a:81:aa:a7:00:66: 04:18:6f:45:0e:c0:82:94:19:5f:29:61:c6:26:f4:0b:59:b5: 87:af:9f:28:dd:0a:04:75:ce:48:15:78:27:e7:a0:ec:a5:28: 36:00:e6:aa:09:41:d1:98:69:f0:f3:82:03:15:98:66:3c:fd: d5:55:59:24:c8:9a:06:32:73:04:e6:be:78:73:53:e8:15:77: b8:88:f7:7d:bd:bb:01:db:ff:ff:70:bc:b3:b4:e5:e2:60:14: 62:a4:f6:7a:70:0f:01:66:5d:91:2d:5e:e5:27:19:09:b0:37: df:08:8c:26 -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgIUDpauHZhuQZq2Kyl6hefOFIDMscowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDAyMDkxNDQ2MDhaFw0yNTAyMDcxNDUxMDhaMDMxMTAvBgNV BAMTKEEwQkRDRDRDRUYwMkI5QUEzQ0JEMEE4Mzc2NjY3MTYzOTcxOThCRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaFlaFViTeahSjaz2lGHr0VPMM DnMORbrS5PcjcAM4n+riGos8QcbS7Sm0KA7jLlKYHW4qIJKRRpvyQuQcvw0FSpSG ShTvY7PFmBO8hzsjgZrenOW2/GT8tz2kqgxK46D+957z0sevLrVgKaNGPM2qakeH GO3jxVzGfTh00yyUfYH1Wh4KG5ASE2FiFHUWp4Z7G4JfKS06jLBq9uzud/qeTihE bQsM0lUfpaIzbtLZEye1uLl1rIpDOa+jziuDReEMkJ0p0uSQ8eN+kZgercRiE7KU mhv3xLNjvukHICgpZ/ERhpDoyneod2xUuA0HHfO8iaCWxM8gwMtUHemXkLPrAgMB AAGjggL0MIIC8DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSgvc1M7wK5qjy9 CoN2ZnFjlxmL/TAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2 MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0 QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZh M2U5MjQzLzEvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS8yOGNkNjIyNC1hM2IwLTQ2OGUtYWEzNy04MmNh NmEzZTkyNDMvMS9BMEJEQ0Q0Q0VGMDJCOUFBM0NCRDBBODM3NjY2NzE2Mzk3MTk4 QkZELm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw KQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgAqBd/BDAMGACoF38GTMA0GCSqG SIb3DQEBCwUAA4IBAQAgwh+uTRNgy9VUuy4VcTDsxjkOPIt7MEBydNMgNQXCmeyf yQVZd8ZJziTAbs7pDzBjunmd7Cn6YKTp14GCF+6zx0zQHNlBoPUn2P/ZfgwEt4XK pbv/u6//vrKzkX8ivpl7Ywosci92HaYXXoQGjGQ3Tzog19zIA/qcjyZFPqX9Rrkj aML13HYTBWNagaqnAGYEGG9FDsCClBlfKWHGJvQLWbWHr58o3QoEdc5IFXgn56Ds pSg2AOaqCUHRmGnw84IDFZhmPP3VVVkkyJoGMnME5r54c1PoFXe4iPd9vbsB2/// cLyztOXiYBRipPZ6cA8BZl2RLV7lJxkJsDffCIwm -----END CERTIFICATE-----Generated at Wed Nov 20 21:51:30 2024 by rpki-client on console-fra.rpki-client.org