$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1.cer File: A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1.cer (raw, json) Hash identifier: yCbFyY96x/KeygmFddkm1F0RdHvJlCxmuKJLcaXjQfE= Subject key identifier: A8:45:D8:47:B2:7C:18:D2:A8:C4:3F:47:ED:AA:EE:AB:5C:CC:0B:E1 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 7880ABC49C8FD7F4C75D9311B14A83D97DD6DFBF Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/1/A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 11 Jan 2024 14:31:56 +0000 Certificate not after: Thu 09 Jan 2025 14:36:56 +0000 Subordinate resources: IP: 2a05:dfc1:1400::/40 IP: 2a05:dfc1:3f00::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 22:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:80:ab:c4:9c:8f:d7:f4:c7:5d:93:11:b1:4a:83:d9:7d:d6:df:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Jan 11 14:31:56 2024 GMT Not After : Jan 9 14:36:56 2025 GMT Subject: CN=A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:fa:da:82:79:63:e1:14:f9:a4:68:40:d3:c5: 88:25:78:4d:37:2b:17:da:d2:10:d1:56:78:09:72: a0:d7:9f:24:bf:20:40:5b:c4:d3:4d:7c:2f:93:33: 71:98:e3:1c:33:b3:9f:5a:0c:d3:b5:3a:48:63:9f: 99:20:47:32:42:0e:06:3a:f3:7b:52:73:54:11:4a: 62:72:1c:5f:86:2d:33:4a:25:58:5e:6f:d4:f5:72: 1f:dc:9b:cb:a6:94:7b:ba:81:71:81:cc:c0:94:93: 6a:78:71:a5:61:a1:a0:7d:37:12:4b:39:cc:b6:a9: c3:e0:b4:11:49:a8:41:9d:a9:18:5c:95:95:94:d5: 5c:f7:d0:72:8f:74:6a:de:d9:1a:14:0d:b1:00:7f: b1:95:b1:b8:f0:e4:88:63:c0:be:30:17:84:d9:df: 6f:2e:fe:68:4a:51:36:74:ef:1c:f1:fa:41:89:c1: 53:d5:72:82:25:fa:87:b1:89:70:86:18:47:00:5f: fc:a7:45:03:05:19:c8:a0:bc:b6:0e:9c:2b:70:7e: a4:f3:ae:06:da:e6:a7:ca:28:cb:29:91:21:15:c0: db:35:eb:51:e4:ab:a3:b1:5b:4f:a7:98:68:48:72: e7:52:36:ec:a3:24:41:d3:63:04:9f:c5:02:45:0d: b2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A8:45:D8:47:B2:7C:18:D2:A8:C4:3F:47:ED:AA:EE:AB:5C:CC:0B:E1 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/1/A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:1400::/40 2a05:dfc1:3f00::/40 Signature Algorithm: sha256WithRSAEncryption 8c:55:1c:04:cc:c1:d2:47:38:87:d6:7d:27:c5:64:7f:56:35: 94:0c:61:fb:6f:88:fd:09:91:8d:33:a1:d0:6a:bf:96:13:b2: 79:6e:9e:23:27:6a:4d:f7:34:4e:59:4a:93:be:29:84:89:92: 4e:41:62:5b:39:7e:00:e6:6c:86:f2:c2:fc:cd:4c:11:67:2f: 9d:eb:9d:12:bd:9c:be:28:99:00:5d:34:ee:b9:d2:0a:7b:c1: 28:a4:64:a1:ef:98:24:7d:65:43:6f:d5:57:64:68:09:11:c7: 87:1c:e7:a1:36:50:10:65:0d:11:2e:d4:df:62:88:19:26:17: 39:02:b6:d1:fe:0b:0c:16:93:42:5d:c4:44:cd:a1:9e:ce:da: 13:45:0e:f7:9e:52:21:0e:c4:44:52:17:13:a7:25:4a:e4:d9: bf:0a:2c:50:3e:45:eb:d3:b9:99:6b:30:0a:bd:0f:d2:ca:e7: 37:09:3b:54:2a:b0:63:87:c4:4e:ae:40:67:a3:40:7c:e3:0f: ca:90:6f:cf:18:c4:ef:e4:9c:fb:15:3a:04:1b:fa:fc:0a:c8: e8:b5:93:fc:19:1e:75:6c:92:10:70:b9:55:d6:58:8d:39:25: 28:09:5f:e7:09:d4:eb:a2:19:2a:e0:3a:c3:60:30:7d:c7:6c: e6:fc:18:50 -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgIUeICrxJyP1/THXZMRsUqD2X3W378wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDAxMTExNDMxNTZaFw0yNTAxMDkxNDM2NTZaMDMxMTAvBgNV BAMTKEE4NDVEODQ3QjI3QzE4RDJBOEM0M0Y0N0VEQUFFRUFCNUNDQzBCRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu+tqCeWPhFPmkaEDTxYgleE03 Kxfa0hDRVngJcqDXnyS/IEBbxNNNfC+TM3GY4xwzs59aDNO1Okhjn5kgRzJCDgY6 83tSc1QRSmJyHF+GLTNKJVheb9T1ch/cm8umlHu6gXGBzMCUk2p4caVhoaB9NxJL Ocy2qcPgtBFJqEGdqRhclZWU1Vz30HKPdGre2RoUDbEAf7GVsbjw5IhjwL4wF4TZ 328u/mhKUTZ07xzx+kGJwVPVcoIl+oexiXCGGEcAX/ynRQMFGcigvLYOnCtwfqTz rgba5qfKKMspkSEVwNs161Hkq6OxW0+nmGhIcudSNuyjJEHTYwSfxQJFDbKhAgMB AAGjggL0MIIC8DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSoRdhHsnwY0qjE P0ftqu6rXMwL4TAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2 MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0 QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvMWQyMGJlNGMtOGRiMy00NWUxLTgxNjktMGYyZTQw ODQxMzJjLzEvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS8xZDIwYmU0Yy04ZGIzLTQ1ZTEtODE2OS0wZjJl NDA4NDEzMmMvMS9BODQ1RDg0N0IyN0MxOEQyQThDNDNGNDdFREFBRUVBQjVDQ0Mw QkUxLm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw KQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgAqBd/BFAMGACoF38E/MA0GCSqG SIb3DQEBCwUAA4IBAQCMVRwEzMHSRziH1n0nxWR/VjWUDGH7b4j9CZGNM6HQar+W E7J5bp4jJ2pN9zROWUqTvimEiZJOQWJbOX4A5myG8sL8zUwRZy+d650SvZy+KJkA XTTuudIKe8EopGSh75gkfWVDb9VXZGgJEceHHOehNlAQZQ0RLtTfYogZJhc5ArbR /gsMFpNCXcREzaGeztoTRQ73nlIhDsREUhcTpyVK5Nm/CixQPkXr07mZazAKvQ/S yuc3CTtUKrBjh8ROrkBno0B84w/KkG/PGMTv5Jz7FToEG/r8CsjotZP8GR51bJIQ cLlV1liNOSUoCV/nCdTrohkq4DrDYDB9x2zm/BhQ -----END CERTIFICATE-----Generated at Tue May 21 05:34:01 2024 by rpki-client on console-ams.rpki-client.org