Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ACEA194714A54AD4EE3CAE964BDE6B31430614A1.cer
File:                     ACEA194714A54AD4EE3CAE964BDE6B31430614A1.cer (raw, json)
Hash identifier:          B37vz3cQyVdiuOPBHozU1AKRInt/sewvKI0rzsd4kfw=
Subject key identifier:   AC:EA:19:47:14:A5:4A:D4:EE:3C:AE:96:4B:DE:6B:31:43:06:14:A1
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       20760BB04F95D35F5EDC278F089CAD15FED8E606
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/2/ACEA194714A54AD4EE3CAE964BDE6B31430614A1.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/2/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Sun 03 Dec 2023 02:20:56 +0000
Certificate not after:    Sun 01 Dec 2024 02:25:56 +0000
Subordinate resources:    IP: 2a05:dfc1:6000::/40

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:76:0b:b0:4f:95:d3:5f:5e:dc:27:8f:08:9c:ad:15:fe:d8:e6:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  3 02:20:56 2023 GMT
            Not After : Dec  1 02:25:56 2024 GMT
        Subject: CN=ACEA194714A54AD4EE3CAE964BDE6B31430614A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f7:91:8f:0b:99:6d:13:9d:32:da:60:dd:c3:
                    13:b5:8a:31:1e:35:0f:64:9b:cc:c4:c0:84:6f:21:
                    d3:38:b3:e7:a3:7f:76:77:02:19:41:97:d5:2e:79:
                    02:0b:ee:b4:f9:f0:8e:c2:c4:06:08:43:1e:f9:d3:
                    bd:a4:76:ee:65:a3:d7:3d:7e:97:25:53:48:50:dd:
                    94:48:72:92:f0:f4:aa:66:ef:59:f8:61:cf:78:80:
                    89:44:95:74:17:e8:b7:e6:b3:ea:91:ae:20:6b:28:
                    70:f8:e2:63:2e:c5:77:5a:4b:61:84:d5:99:ce:1c:
                    7c:1d:3b:c1:ff:fc:9a:c1:66:50:f0:74:e0:46:42:
                    43:22:3e:a1:02:e0:63:1c:ba:b1:00:b4:4f:9f:d6:
                    f0:8c:51:4b:ae:65:f1:ba:87:cc:75:62:24:66:4b:
                    13:59:bf:91:57:0e:83:5a:47:28:b3:c4:5b:6a:44:
                    f5:1e:e1:71:51:07:df:f2:95:08:ef:34:11:b5:f7:
                    f0:e0:8b:5d:12:6f:e2:8c:ef:9d:fa:ac:b7:7f:6d:
                    52:20:64:38:89:01:ae:88:d1:7c:6f:63:19:01:81:
                    9c:e4:2c:32:0f:0d:c7:84:ba:a0:1c:17:9d:88:7f:
                    99:f0:9b:b7:86:3f:51:04:c1:09:43:cb:cc:f8:87:
                    dd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AC:EA:19:47:14:A5:4A:D4:EE:3C:AE:96:4B:DE:6B:31:43:06:14:A1
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/2/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/2/ACEA194714A54AD4EE3CAE964BDE6B31430614A1.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6e:0c:2e:03:d0:4e:5b:42:14:8b:b2:00:49:af:df:64:69:d1:
         9b:86:e1:68:62:82:d6:f2:ec:75:4a:45:d8:c7:93:38:1a:08:
         ed:c2:e8:24:38:09:4d:07:1d:9b:12:93:b4:d0:ba:2c:c5:f6:
         c8:f9:d6:c8:d2:39:54:af:8f:d0:7f:5c:68:e6:5f:7b:1f:3c:
         e5:92:e5:5e:f0:b8:24:06:96:c4:a5:bc:d0:35:2c:be:c4:f3:
         63:75:be:ba:b1:f4:ce:06:36:db:5b:9e:46:1c:e0:b6:58:c5:
         e6:6f:23:90:0b:dd:e2:59:15:11:bf:73:c9:19:7b:76:94:98:
         92:e4:ab:9a:0d:61:42:97:2c:d2:6b:d8:89:d5:68:a1:44:17:
         6b:c4:00:4e:e4:74:a0:2b:8c:94:29:d7:07:a8:c1:e9:b1:91:
         55:b8:a4:b4:89:2c:93:be:98:9f:81:66:38:bd:b1:b3:2a:46:
         3d:6a:62:9c:ca:d8:3e:10:60:ac:f1:7a:80:93:a6:0f:f4:d1:
         0a:95:55:78:f6:4b:5a:cd:32:96:e1:e6:45:92:a5:d6:7c:5f:
         21:28:81:c4:2b:44:38:a2:78:7f:a0:49:dd:f8:42:0d:6c:a1:
         95:6a:6c:70:df:f1:bc:1e:5f:67:d0:1e:14:5e:2e:77:58:66:
         30:8c:4b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:45 2024 by rpki-client on console-fra.rpki-client.org