$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer File: ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer (raw, json) Hash identifier: B/byKJHmlIUu6Yd5G/M/yY8W7CI9OYUQDJ1+H3nRRHc= Subject key identifier: AD:D7:3B:35:69:5B:B3:BF:25:B4:67:19:63:29:EF:CA:AC:86:7E:5E Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 0887F8B46380B2DC5C05B110587371232995F99D Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Mon 29 Apr 2024 00:14:38 +0000 Certificate not after: Mon 28 Apr 2025 00:19:38 +0000 Subordinate resources: IP: 2a06:9f81:3000::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 22:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:87:f8:b4:63:80:b2:dc:5c:05:b1:10:58:73:71:23:29:95:f9:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Apr 29 00:14:38 2024 GMT Not After : Apr 28 00:19:38 2025 GMT Subject: CN=ADD73B35695BB3BF25B467196329EFCAAC867E5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c3:0d:b0:18:b1:6a:76:16:86:5d:bf:3e:d0: 71:3b:bc:39:9e:6d:42:55:68:c1:95:a4:ce:32:52: 08:cb:7a:22:78:e6:5d:7d:2f:e8:16:b1:76:92:4d: 8e:d5:e9:1e:0c:f7:40:f1:7e:80:a8:7a:2e:83:1c: 59:f7:6f:3c:b8:15:ac:10:df:b1:e9:8f:e4:9d:67: da:63:8e:ea:8a:6f:4d:43:9f:ee:9c:70:9b:43:c3: d3:6f:6c:9f:71:79:c3:ee:51:e4:30:78:e5:cd:54: f2:e5:68:44:a0:22:6c:53:03:0e:6a:b1:da:f3:11: be:19:38:93:43:e1:be:c1:96:49:b9:9f:78:52:be: f8:7c:b4:38:21:13:e9:bd:e1:b6:b2:82:84:fe:d9: 14:98:b3:1a:70:f1:49:68:8a:9a:67:e2:92:19:a4: 62:d3:ab:d0:c8:5c:9d:cf:28:20:4e:9d:d3:12:22: 32:da:f3:96:77:48:2e:1a:88:99:b6:e8:58:bd:37: 58:fc:34:b7:54:06:66:fa:62:a3:82:bf:4f:81:33: 24:1d:48:32:2b:fe:76:6d:99:8d:1e:30:ed:81:46: 2f:fa:62:03:b9:42:51:d0:17:88:a2:3f:90:9b:3c: cf:f0:c8:72:f9:8e:20:20:71:da:44:b2:43:e9:8f: 72:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AD:D7:3B:35:69:5B:B3:BF:25:B4:67:19:63:29:EF:CA:AC:86:7E:5E X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:3000::/40 Signature Algorithm: sha256WithRSAEncryption 71:23:76:5b:e2:02:99:83:f1:77:69:4f:29:de:a2:42:53:3a: 9a:9d:32:11:4f:66:b7:a2:66:04:2a:c0:18:f4:e2:57:af:5d: 97:69:b9:21:ea:35:40:43:fa:0f:68:73:4d:c7:08:fa:04:52: c4:41:f7:0f:89:15:76:5f:69:86:ca:cb:06:e3:60:1b:8f:7f: 45:6c:73:99:d9:6b:c2:6b:4c:e3:fb:25:c7:92:da:50:fc:cb: c6:22:65:7e:e2:8b:fc:c5:54:81:3c:e2:f6:8e:a6:ae:0e:a6: c4:8f:2a:6c:72:4a:f1:a1:74:ce:a0:61:e3:df:4a:dc:fe:a8: d6:fb:35:f8:d8:d0:7d:86:b6:b6:95:39:ba:a5:f8:8d:23:9b: 54:5b:83:39:18:9f:81:be:7d:64:dd:7a:75:29:b0:70:56:86: c5:b1:b5:b7:75:fd:58:0c:2b:de:21:f5:7c:43:58:6b:e3:fc: a4:cb:ac:a4:3f:5c:dd:d4:5c:8d:14:9d:62:cf:71:66:a0:5e: ee:3b:b7:65:4f:35:52:11:5d:b4:98:bf:94:c4:54:8c:12:43: df:ca:19:7e:d7:0a:c5:14:83:78:15:03:e3:7e:77:d7:fb:ea: b0:96:51:2d:b0:d1:d1:aa:eb:11:5e:75:09:63:c2:ab:c7:af: 07:f8:42:9f -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIUCIf4tGOAstxcBbEQWHNxIymV+Z0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDA0MjkwMDE0MzhaFw0yNTA0MjgwMDE5MzhaMDMxMTAvBgNV BAMTKEFERDczQjM1Njk1QkIzQkYyNUI0NjcxOTYzMjlFRkNBQUM4NjdFNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbww2wGLFqdhaGXb8+0HE7vDme bUJVaMGVpM4yUgjLeiJ45l19L+gWsXaSTY7V6R4M90DxfoCoei6DHFn3bzy4FawQ 37Hpj+SdZ9pjjuqKb01Dn+6ccJtDw9NvbJ9xecPuUeQweOXNVPLlaESgImxTAw5q sdrzEb4ZOJND4b7Blkm5n3hSvvh8tDghE+m94baygoT+2RSYsxpw8Uloippn4pIZ pGLTq9DIXJ3PKCBOndMSIjLa85Z3SC4aiJm26Fi9N1j8NLdUBmb6YqOCv0+BMyQd SDIr/nZtmY0eMO2BRi/6YgO5QlHQF4iiP5CbPM/wyHL5jiAgcdpEskPpj3LxAgMB AAGjggLsMIIC6DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSt1zs1aVuzvyW0 ZxljKe/KrIZ+XjAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2 MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0 QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvYTliMGRlZGEtNTVjZS00NGIxLWI5NjQtZDhhYmRk NmQ1NWNlLzAvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9hOWIwZGVkYS01NWNlLTQ0YjEtYjk2NC1kOGFi ZGQ2ZDU1Y2UvMC9BREQ3M0IzNTY5NUJCM0JGMjVCNDY3MTk2MzI5RUZDQUFDODY3 RTVFLm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqBp+BMDANBgkqhkiG9w0BAQsF AAOCAQEAcSN2W+ICmYPxd2lPKd6iQlM6mp0yEU9mt6JmBCrAGPTiV69dl2m5Ieo1 QEP6D2hzTccI+gRSxEH3D4kVdl9phsrLBuNgG49/RWxzmdlrwmtM4/slx5LaUPzL xiJlfuKL/MVUgTzi9o6mrg6mxI8qbHJK8aF0zqBh499K3P6o1vs1+NjQfYa2tpU5 uqX4jSObVFuDORifgb59ZN16dSmwcFaGxbG1t3X9WAwr3iH1fENYa+P8pMuspD9c 3dRcjRSdYs9xZqBe7ju3ZU81UhFdtJi/lMRUjBJD38oZftcKxRSDeBUD43531/vq sJZRLbDR0arrEV51CWPCq8evB/hCnw== -----END CERTIFICATE-----Generated at Tue May 21 05:34:01 2024 by rpki-client on console-ams.rpki-client.org