
Certificate
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1.cer
File: A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1.cer (raw, json)
Hash identifier: yCbFyY96x/KeygmFddkm1F0RdHvJlCxmuKJLcaXjQfE=
Subject key identifier: A8:45:D8:47:B2:7C:18:D2:A8:C4:3F:47:ED:AA:EE:AB:5C:CC:0B:E1
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial: 7880ABC49C8FD7F4C75D9311B14A83D97DD6DFBF
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/1/A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 11 Jan 2024 14:31:56 +0000
Certificate not after: Thu 09 Jan 2025 14:36:56 +0000
Subordinate resources: IP: 2a05:dfc1:1400::/40
IP: 2a05:dfc1:3f00::/40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:80:ab:c4:9c:8f:d7:f4:c7:5d:93:11:b1:4a:83:d9:7d:d6:df:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Validity
Not Before: Jan 11 14:31:56 2024 GMT
Not After : Jan 9 14:36:56 2025 GMT
Subject: CN=A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fa:da:82:79:63:e1:14:f9:a4:68:40:d3:c5:
88:25:78:4d:37:2b:17:da:d2:10:d1:56:78:09:72:
a0:d7:9f:24:bf:20:40:5b:c4:d3:4d:7c:2f:93:33:
71:98:e3:1c:33:b3:9f:5a:0c:d3:b5:3a:48:63:9f:
99:20:47:32:42:0e:06:3a:f3:7b:52:73:54:11:4a:
62:72:1c:5f:86:2d:33:4a:25:58:5e:6f:d4:f5:72:
1f:dc:9b:cb:a6:94:7b:ba:81:71:81:cc:c0:94:93:
6a:78:71:a5:61:a1:a0:7d:37:12:4b:39:cc:b6:a9:
c3:e0:b4:11:49:a8:41:9d:a9:18:5c:95:95:94:d5:
5c:f7:d0:72:8f:74:6a:de:d9:1a:14:0d:b1:00:7f:
b1:95:b1:b8:f0:e4:88:63:c0:be:30:17:84:d9:df:
6f:2e:fe:68:4a:51:36:74:ef:1c:f1:fa:41:89:c1:
53:d5:72:82:25:fa:87:b1:89:70:86:18:47:00:5f:
fc:a7:45:03:05:19:c8:a0:bc:b6:0e:9c:2b:70:7e:
a4:f3:ae:06:da:e6:a7:ca:28:cb:29:91:21:15:c0:
db:35:eb:51:e4:ab:a3:b1:5b:4f:a7:98:68:48:72:
e7:52:36:ec:a3:24:41:d3:63:04:9f:c5:02:45:0d:
b2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A8:45:D8:47:B2:7C:18:D2:A8:C4:3F:47:ED:AA:EE:AB:5C:CC:0B:E1
X509v3 Authority Key Identifier:
keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/1/A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:1400::/40
2a05:dfc1:3f00::/40
Signature Algorithm: sha256WithRSAEncryption
8c:55:1c:04:cc:c1:d2:47:38:87:d6:7d:27:c5:64:7f:56:35:
94:0c:61:fb:6f:88:fd:09:91:8d:33:a1:d0:6a:bf:96:13:b2:
79:6e:9e:23:27:6a:4d:f7:34:4e:59:4a:93:be:29:84:89:92:
4e:41:62:5b:39:7e:00:e6:6c:86:f2:c2:fc:cd:4c:11:67:2f:
9d:eb:9d:12:bd:9c:be:28:99:00:5d:34:ee:b9:d2:0a:7b:c1:
28:a4:64:a1:ef:98:24:7d:65:43:6f:d5:57:64:68:09:11:c7:
87:1c:e7:a1:36:50:10:65:0d:11:2e:d4:df:62:88:19:26:17:
39:02:b6:d1:fe:0b:0c:16:93:42:5d:c4:44:cd:a1:9e:ce:da:
13:45:0e:f7:9e:52:21:0e:c4:44:52:17:13:a7:25:4a:e4:d9:
bf:0a:2c:50:3e:45:eb:d3:b9:99:6b:30:0a:bd:0f:d2:ca:e7:
37:09:3b:54:2a:b0:63:87:c4:4e:ae:40:67:a3:40:7c:e3:0f:
ca:90:6f:cf:18:c4:ef:e4:9c:fb:15:3a:04:1b:fa:fc:0a:c8:
e8:b5:93:fc:19:1e:75:6c:92:10:70:b9:55:d6:58:8d:39:25:
28:09:5f:e7:09:d4:eb:a2:19:2a:e0:3a:c3:60:30:7d:c7:6c:
e6:fc:18:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:04:48 2025 by rpki-client