Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer
File:                     B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer (raw, json)
Hash identifier:          rgDcKFEc4Q8o/0+3q+WClgX+D3AMT6kpY/WQa3v3YaY=
Subject key identifier:   B3:D1:0E:E6:F3:7C:24:3D:0D:0C:08:F7:AA:02:BA:3C:D2:55:95:76
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       4E9D2E28AD8F44196A250FD08AA99D4D0FEF4277
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 06 Oct 2024 19:34:05 +0000
Certificate not after:    Sun 05 Oct 2025 19:39:05 +0000
Subordinate resources:    IP: 2a0a:6040:1300::/40
                          IP: 2a0a:6040:9f00::/40

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:9d:2e:28:ad:8f:44:19:6a:25:0f:d0:8a:a9:9d:4d:0f:ef:42:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Oct  6 19:34:05 2024 GMT
            Not After : Oct  5 19:39:05 2025 GMT
        Subject: CN=B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2c:82:b1:26:8b:6e:91:e0:f0:ae:57:72:b5:
                    c7:10:9e:1d:db:b4:63:f5:ff:9a:80:66:3b:e0:71:
                    26:9d:ed:7f:69:f7:c7:8d:be:f9:8c:97:16:39:75:
                    39:2e:f1:69:21:01:66:61:66:40:da:19:37:de:04:
                    18:17:5e:1b:42:d6:07:31:41:61:c9:d6:6e:99:4f:
                    cc:0f:83:2b:45:23:a3:fb:dc:53:14:70:14:d7:d4:
                    2c:98:23:d9:b4:b6:84:10:90:d0:8a:ab:13:68:2d:
                    57:ce:c5:1b:bc:16:5c:63:6e:98:43:42:44:58:f7:
                    0e:ed:4d:30:5c:58:8d:04:cc:22:05:5e:40:cf:90:
                    ed:49:66:ac:cd:cf:da:a7:d5:65:1e:73:b0:a7:12:
                    24:a6:cf:8c:9f:6b:a1:59:09:d6:64:4c:54:87:1a:
                    92:74:22:68:8c:5f:31:e6:92:c3:67:1e:1c:c4:51:
                    5b:d3:a2:e7:a5:3d:12:6d:d4:ad:15:b9:c0:2b:96:
                    68:b1:52:f7:38:e8:9d:ec:86:d1:f5:63:12:59:5b:
                    48:58:ed:99:74:45:2b:be:8b:66:d7:0b:4d:b7:a1:
                    be:7c:80:35:02:2f:6a:62:11:95:9a:8b:18:34:4d:
                    df:39:f2:c7:67:41:16:65:7b:2e:76:5f:05:8e:a2:
                    3e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:D1:0E:E6:F3:7C:24:3D:0D:0C:08:F7:AA:02:BA:3C:D2:55:95:76
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1300::/40
                  2a0a:6040:9f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4f:cf:bf:e7:46:ee:2b:83:e0:0f:06:e5:0d:1f:f5:d1:eb:0c:
         52:47:16:3e:7b:f3:87:94:3c:f0:e0:72:e6:e1:08:75:83:07:
         f8:73:9a:34:ed:8e:a9:6f:75:fe:d0:6c:66:c0:53:0d:75:1e:
         ea:43:a1:3c:94:79:85:32:43:e2:eb:0a:4d:a4:31:74:90:b5:
         35:1d:5c:77:3b:15:9f:cb:ea:8d:1d:3d:76:f6:ee:01:59:96:
         60:1c:7d:0a:6c:4e:c6:7e:ba:e7:b6:1d:aa:f0:31:8a:af:48:
         bc:75:ea:1b:13:90:09:37:c2:fc:8c:31:69:a2:58:7f:6c:07:
         07:1b:4a:a6:4b:b9:e6:bc:7b:09:82:7f:32:51:61:74:3b:07:
         b0:3d:73:ee:33:10:23:9f:63:82:ab:82:53:ab:33:94:3f:2e:
         49:70:32:36:b0:db:f9:30:71:0a:69:d7:e1:5f:b6:ae:6b:fa:
         23:9d:3c:3b:01:6e:c7:98:05:21:12:60:b5:90:a1:34:d1:b8:
         bb:bb:a1:52:f5:80:94:86:5a:d7:cb:44:64:39:20:cb:b0:84:
         0e:61:1e:0d:31:9d:d1:f5:da:c2:0e:55:06:6f:c3:48:31:a6:
         53:40:2e:3d:1e:25:26:ca:15:9c:3e:82:2a:4e:e1:20:80:31:
         7d:a2:7e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:31 2024 by rpki-client on console-fra.rpki-client.org